Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FD529D9606A0945DD870859B99FF45B58E7E363.cer
File:                     4FD529D9606A0945DD870859B99FF45B58E7E363.cer (raw, json)
Hash identifier:          MPKS8kKJEsDSw2b/nfy2hbMwVLCgI+CnB+g2iKsXEbQ=
Subject key identifier:   4F:D5:29:D9:60:6A:09:45:DD:87:08:59:B9:9F:F4:5B:58:E7:E3:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       515F05DA5BFD3A5F0F37DA502D8BCD0E07EB4DAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/0/4FD529D9606A0945DD870859B99FF45B58E7E363.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 11:08:33 +0000
Certificate not after:    Fri 20 Sep 2024 11:13:33 +0000
Subordinate resources:    AS: 272701
                          IP: 2804:8750::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5f:05:da:5b:fd:3a:5f:0f:37:da:50:2d:8b:cd:0e:07:eb:4d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 11:08:33 2023 GMT
            Not After : Sep 20 11:13:33 2024 GMT
        Subject: CN=4FD529D9606A0945DD870859B99FF45B58E7E363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:38:2b:1d:41:27:9b:94:67:9b:f0:15:ed:
                    e8:93:f0:a3:4d:ca:78:d0:9b:1d:48:79:27:96:5f:
                    26:2f:1b:39:85:97:a6:98:3b:f6:bc:a1:18:11:3b:
                    67:b3:bc:f3:e3:69:d3:95:bd:3f:94:04:6c:a4:7d:
                    67:b2:40:d1:80:e8:41:d0:d2:ce:d1:a3:78:50:b9:
                    a8:37:2d:e4:32:ce:82:f1:15:0c:49:42:5b:53:57:
                    22:90:32:a6:d2:8c:9b:68:e1:aa:dc:0e:59:5d:3f:
                    ba:17:3f:06:60:00:41:46:13:a3:4a:1f:aa:58:d8:
                    9c:33:b2:d0:93:14:24:10:05:02:4b:2c:77:1d:a5:
                    65:da:13:a0:ac:e8:55:51:f8:b9:8b:a1:a3:5f:4c:
                    d7:a7:8a:13:70:68:48:cb:b7:2f:5f:03:55:2b:a7:
                    34:d0:92:ce:c7:ac:f7:4a:85:d3:23:14:bc:c1:30:
                    33:2b:a3:26:da:13:dd:f8:f2:f9:97:ac:80:da:d4:
                    80:f5:cc:78:c1:87:14:e6:36:cd:8d:d9:87:3e:31:
                    21:d5:54:ad:6d:29:fd:ea:0c:e0:ec:56:ee:76:82:
                    11:f4:6f:5b:75:6a:ea:35:d7:20:7e:61:69:0f:d2:
                    3c:dd:6e:7a:e2:86:3d:75:ce:13:a4:54:74:0e:29:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:D5:29:D9:60:6A:09:45:DD:87:08:59:B9:9F:F4:5B:58:E7:E3:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/0/4FD529D9606A0945DD870859B99FF45B58E7E363.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8750::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272701

    Signature Algorithm: sha256WithRSAEncryption
         3f:15:c1:19:d7:77:82:71:66:32:22:cc:84:dc:5f:ae:04:d0:
         9f:bf:48:f1:42:2f:21:3e:97:bf:d3:8a:00:6f:44:df:46:e6:
         54:5c:62:53:f7:7b:4d:70:02:c0:70:31:f3:ab:6d:fa:32:eb:
         1d:45:8c:2e:db:34:2c:58:a8:f1:10:b1:2c:2d:10:01:0e:bc:
         76:c1:3f:cf:89:88:e3:85:a5:93:18:6d:cb:a0:bb:57:66:31:
         2c:ac:02:fd:5f:4e:6e:52:3f:f3:71:15:98:77:0e:23:1d:eb:
         8b:19:16:ee:ac:a4:89:3a:f3:9a:14:a4:b4:8a:ba:cd:3e:a9:
         91:ec:54:d5:0e:fc:d3:0a:b2:6f:08:93:4e:6f:04:0a:13:38:
         80:55:b8:54:6a:68:2b:75:af:e5:ac:1c:b8:d4:1a:c0:b8:d6:
         e1:70:05:cc:38:16:c6:1e:bf:d5:6f:70:63:17:4b:7b:11:04:
         13:d6:70:4a:82:cf:1e:2d:71:ea:14:97:e3:03:b3:98:74:8a:
         5f:8f:14:b9:8d:b3:89:b3:5a:84:64:b5:6d:e0:aa:8a:f6:75:
         11:5e:b4:34:d9:ad:e9:af:3b:ed:ae:b3:53:2a:52:bc:50:d4:
         22:ca:8b:d2:a9:92:af:a5:00:e7:18:fc:65:e7:37:c3:c3:6a:
         dd:24:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org