Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.cer
File:                     4FDD68DAA96562ED008416263830E4D1A7EC8827.cer (raw, json)
Hash identifier:          BJ43MEIfyhiZ1r9UxsrP6KFf/H387okDoILcuGhi0WM=
Subject key identifier:   4F:DD:68:DA:A9:65:62:ED:00:84:16:26:38:30:E4:D1:A7:EC:88:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       693FE1B0C88F63676E66825E01A85F9B32C24EA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 06:07:03 +0000
Certificate not after:    Tue 29 Oct 2024 06:12:03 +0000
Subordinate resources:    AS: 268330
                          IP: 45.237.0.0/22
                          IP: 2804:4f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3f:e1:b0:c8:8f:63:67:6e:66:82:5e:01:a8:5f:9b:32:c2:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 31 06:07:03 2023 GMT
            Not After : Oct 29 06:12:03 2024 GMT
        Subject: CN=4FDD68DAA96562ED008416263830E4D1A7EC8827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:9c:94:a8:f4:ac:51:2f:cf:9b:58:b2:9d:
                    68:fb:3a:cd:0e:b5:8f:d8:19:f5:51:61:1b:6a:7f:
                    cc:b6:d1:19:65:c9:cd:83:30:ee:78:65:fb:0e:b8:
                    81:ed:a4:a2:a8:80:24:56:a8:63:f8:04:2e:7d:c0:
                    23:b1:07:5c:1f:5c:c7:21:c1:2f:37:a5:21:e2:75:
                    ca:57:c0:cd:d6:a4:4c:8d:cf:a8:09:ae:7d:2a:ce:
                    c7:81:60:3f:df:22:30:39:0e:6e:fe:bd:75:28:ec:
                    e5:7e:cf:e2:c7:ea:c4:2f:c3:2d:d2:74:03:0f:5a:
                    ef:9f:d3:c7:ea:3e:e3:7e:fb:7f:80:33:38:98:b2:
                    f3:fc:12:1a:0f:28:9d:3e:e1:a4:ec:26:8e:6c:98:
                    82:16:32:5d:00:2d:8f:f9:ca:a7:78:f5:0d:e7:94:
                    ed:23:80:9d:0b:2d:2e:64:8a:17:97:31:16:50:62:
                    b9:36:f9:1d:71:62:cc:4e:c2:20:8e:0c:72:fe:e7:
                    a6:fb:ac:72:4a:fa:33:91:74:84:24:16:44:77:62:
                    a8:d7:4a:a1:e3:ea:2d:ea:f3:d2:8d:62:1c:e9:9f:
                    34:7d:49:d3:ed:3a:e1:9e:8d:69:c2:ea:0b:a8:9d:
                    3f:80:c3:51:a7:48:82:19:a9:ab:56:25:be:64:73:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:DD:68:DA:A9:65:62:ED:00:84:16:26:38:30:E4:D1:A7:EC:88:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.0.0/22
                IPv6:
                  2804:4f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268330

    Signature Algorithm: sha256WithRSAEncryption
         3d:4e:22:58:ec:62:6f:be:37:23:2c:9c:1c:fa:3d:b6:4b:53:
         05:cb:8e:22:fb:d2:e3:87:23:3e:4b:10:0a:a3:8f:96:ac:81:
         d6:00:26:14:9f:df:72:a8:1e:92:e9:33:f4:17:6c:90:0a:a3:
         3f:30:19:f3:c7:fc:e3:46:4a:d1:6b:f6:45:a2:31:b7:45:7f:
         04:da:81:67:08:cf:c5:73:f3:43:20:30:be:e2:cb:92:9c:af:
         1b:1a:56:f0:8c:f2:03:3a:f6:d3:8b:4b:03:b6:a3:3a:02:28:
         1c:e6:33:51:b5:20:48:32:4f:fd:34:c4:70:a6:7a:58:80:ab:
         7f:ae:54:03:00:c1:8f:66:50:94:ef:7c:13:51:e0:63:8e:d4:
         40:ae:a7:ba:e5:f5:00:97:55:1f:3f:64:ad:14:08:ed:df:40:
         48:ab:bc:a9:9f:a2:20:c9:af:dc:fb:61:49:e9:5f:be:2a:af:
         84:2f:5a:f2:84:ae:ef:3b:bb:c2:6d:95:90:99:7f:6b:7e:d9:
         ca:02:d6:0e:1e:1e:63:dc:26:85:a1:6f:b6:43:dd:9f:45:e2:
         fd:b2:f0:09:22:be:4c:73:1c:d2:8d:6a:99:50:b2:89:a9:05:
         0d:66:49:da:7b:43:91:da:63:24:8a:80:29:69:12:81:c7:65:
         64:68:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org