Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/84B4275CF36B34D0C494CB783A3E9AA8BEBBFBF1.cer
File:                     84B4275CF36B34D0C494CB783A3E9AA8BEBBFBF1.cer (raw, json)
Hash identifier:          Ga1jHFFjgA4yq1xP+9PvmJdBdrBA7OukjpNf6hT/N90=
Subject key identifier:   84:B4:27:5C:F3:6B:34:D0:C4:94:CB:78:3A:3E:9A:A8:BE:BB:FB:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6922E58192EEA4681BEA2440E3D7F4569EBC831E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/84B4275CF36B34D0C494CB783A3E9AA8BEBBFBF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Dec 2022 15:14:38 +0000
Certificate not after:    Mon 18 Dec 2023 15:19:38 +0000
Subordinate resources:    AS: 267339
                          IP: 45.233.208.0/22
                          IP: 2804:4bf4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:22:e5:81:92:ee:a4:68:1b:ea:24:40:e3:d7:f4:56:9e:bc:83:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 15:14:38 2022 GMT
            Not After : Dec 18 15:19:38 2023 GMT
        Subject: CN=84B4275CF36B34D0C494CB783A3E9AA8BEBBFBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:ce:2c:8a:40:08:7d:2a:2f:57:33:db:c8:
                    9d:11:bc:15:a9:e6:f1:3f:73:03:7f:c6:22:61:d6:
                    ae:54:c9:8b:2a:cc:eb:26:4a:14:10:d5:77:c1:7c:
                    08:67:f1:11:30:3e:32:0a:86:1f:79:e5:af:be:66:
                    0c:e1:d3:5f:d4:5e:7a:9c:d2:ce:e4:54:fd:bb:dd:
                    81:06:0b:c6:a0:b9:fe:05:18:1a:62:06:3f:9b:96:
                    65:c1:0a:8c:d3:31:84:98:64:0b:2b:79:8f:d1:4f:
                    13:0e:73:7d:01:d2:a0:7a:d8:26:19:81:81:ed:dc:
                    7c:5d:80:67:30:38:eb:9d:bd:1e:45:d9:92:23:46:
                    58:9c:3e:2a:f8:84:a4:d7:57:8c:f4:f0:e3:86:63:
                    e9:15:74:81:9e:24:51:71:0a:08:e8:f5:93:a7:e3:
                    c1:ae:00:db:99:19:c0:07:2c:06:f2:67:53:f5:98:
                    1e:74:68:9d:39:77:d1:78:4d:12:61:92:ff:1f:b3:
                    ad:59:50:37:73:70:5a:a4:9c:8a:92:65:5e:11:94:
                    d4:3c:3a:61:3d:51:41:e7:26:5b:d5:e1:36:21:d6:
                    9d:b5:2d:46:25:56:90:18:40:45:0d:5f:3d:f6:52:
                    35:74:73:bd:3e:6d:3d:1c:d9:a8:bd:a5:3d:2b:7a:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:B4:27:5C:F3:6B:34:D0:C4:94:CB:78:3A:3E:9A:A8:BE:BB:FB:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/84B4275CF36B34D0C494CB783A3E9AA8BEBBFBF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.208.0/22
                IPv6:
                  2804:4bf4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267339

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:9c:f2:4c:69:d2:46:31:cd:a3:ab:4e:f9:b2:8c:18:21:
         ba:51:33:34:17:97:f9:b1:6e:95:1c:bc:4a:17:6e:9b:f8:f7:
         cc:2c:e5:76:62:aa:8a:56:79:ad:91:f2:88:14:b4:26:75:f7:
         5a:a6:96:10:cd:c6:28:62:c4:5d:ca:41:9e:8b:04:15:bd:11:
         40:91:a2:f4:c3:d7:89:a9:d0:6d:e8:3d:ed:5c:ed:d0:4a:9f:
         a6:eb:14:f1:f4:0d:bd:8b:b6:2c:10:0c:18:84:eb:8a:77:a2:
         56:72:a3:06:ac:7c:fe:1d:78:ac:2d:00:9f:80:ea:be:e1:7d:
         c8:b0:f7:d5:34:a1:59:9e:db:13:20:6c:59:ed:b4:26:28:95:
         59:a3:f2:d9:f7:ed:a5:a3:31:80:8b:ec:a7:88:42:da:99:10:
         34:d9:3f:0a:79:71:c0:cd:a9:a0:d1:4d:1b:72:02:ad:ef:a8:
         5c:a5:36:20:49:e0:7f:b5:5e:d9:08:ca:57:7b:0d:29:e4:ca:
         8f:78:00:8c:42:aa:5e:03:be:f4:c2:9d:a4:0f:d6:d8:1a:e5:
         71:4a:1c:2a:6c:b7:f0:01:63:84:22:3e:af:cf:f8:8b:2d:30:
         ef:2a:b9:f4:9b:6a:96:04:95:fa:cc:f7:1d:6b:0f:9f:06:d7:
         3b:41:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org