Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FF318E98F603319C3B3575E583C5677F094486F.cer
File:                     4FF318E98F603319C3B3575E583C5677F094486F.cer (raw, json)
Hash identifier:          Ar//26YUEmYT5ghYplCRZ0rFVY5jLAH/mTPVCXFqfqQ=
Subject key identifier:   4F:F3:18:E9:8F:60:33:19:C3:B3:57:5E:58:3C:56:77:F0:94:48:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DD29AA7CE17E14EBE6AC4187668825BDB0CB3AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4FF318E98F603319C3B3575E583C5677F094486F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 12:45:33 +0000
Certificate not after:    Mon 20 May 2024 12:50:33 +0000
Subordinate resources:    AS: 267675
                          IP: 45.224.236.0/22
                          IP: 2804:4524::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d2:9a:a7:ce:17:e1:4e:be:6a:c4:18:76:68:82:5b:db:0c:b3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 12:45:33 2023 GMT
            Not After : May 20 12:50:33 2024 GMT
        Subject: CN=4FF318E98F603319C3B3575E583C5677F094486F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:41:8e:df:19:cb:ed:0e:81:47:18:e6:b6:46:
                    b6:d2:9d:a7:83:48:e9:c4:7d:bd:90:8a:35:8d:b6:
                    fd:4f:75:2a:c6:9e:37:73:de:9d:44:92:15:52:64:
                    d9:ae:ce:2d:bc:9f:cd:8d:6d:73:b7:76:63:75:10:
                    b5:ec:95:23:42:ae:12:a0:e8:e5:9d:d6:b8:2f:33:
                    ae:bc:81:4f:1e:2a:1a:c5:b6:41:9c:42:26:89:8e:
                    09:f7:b4:cf:f1:2b:c1:e8:89:a5:d2:69:63:16:f4:
                    c8:f8:eb:9d:69:5d:3f:df:2f:34:c8:e6:3f:e3:a4:
                    85:c0:94:f2:c1:bd:0b:f1:38:59:dd:05:65:a2:c7:
                    17:fe:a4:f0:fe:ff:e9:e6:55:de:d8:c7:0e:2e:4d:
                    8f:53:46:64:11:a5:58:c8:ab:e7:f6:26:b7:d9:22:
                    67:3a:28:69:bb:7f:ef:30:5e:0c:e4:78:9f:f6:c3:
                    24:a5:f9:58:c8:84:36:b3:9f:49:ef:14:bd:e3:c7:
                    95:86:69:41:a8:1c:8a:aa:07:48:e1:6f:60:df:68:
                    20:e5:b1:9b:02:5b:79:65:be:16:4b:0b:10:c7:9c:
                    79:f2:28:a0:6b:b4:44:de:1e:33:a7:4f:d3:a6:78:
                    f0:3e:67:5c:9a:b1:82:e0:c8:47:02:72:d7:e5:3c:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:F3:18:E9:8F:60:33:19:C3:B3:57:5E:58:3C:56:77:F0:94:48:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4FF318E98F603319C3B3575E583C5677F094486F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/22
                IPv6:
                  2804:4524::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267675

    Signature Algorithm: sha256WithRSAEncryption
         02:46:84:27:fb:cf:d7:f1:c8:06:98:07:ad:cc:d6:29:ba:a2:
         e1:7f:2f:5c:a3:a4:b3:35:c0:d2:8b:41:80:e4:ee:80:e6:52:
         44:3f:70:3f:d1:e2:19:be:3a:4a:45:e7:83:88:f1:8a:ff:12:
         cb:a1:33:5c:87:ef:69:2e:b4:35:8d:a2:ea:1c:41:80:9f:6e:
         e5:09:e5:66:ff:f8:ad:af:25:fa:0c:2f:c9:e8:c6:7e:19:ea:
         ab:96:e8:c0:e8:0c:81:1c:83:93:45:a5:08:e1:25:62:b8:fd:
         5c:a7:4b:e1:f1:4b:62:a6:b9:e5:18:53:12:00:cd:ef:d2:72:
         37:49:6b:3b:f7:49:11:cd:fc:10:a5:42:6c:42:7c:6e:c2:d0:
         3d:4c:a2:c3:e7:29:b0:c1:d1:22:0a:ef:db:7a:68:c2:99:8f:
         bb:98:81:da:c4:e5:ac:37:96:51:4c:09:23:11:bb:da:37:ba:
         cd:98:bd:05:e7:cc:43:1b:df:a5:92:60:c4:b4:f9:17:63:64:
         92:68:02:ae:c6:94:8d:56:33:ba:7d:ee:ac:45:b7:24:08:90:
         aa:84:34:8c:c7:6c:59:1d:34:d4:1a:04:8a:d3:d2:77:05:3b:
         c7:73:be:7e:b0:0f:b8:bf:66:cc:51:26:25:23:28:4e:9f:c7:
         9b:d8:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org