Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
File:                     A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer (raw, json)
Hash identifier:          tu6Xama/h+hcxjGqsWta2B1Y8unIcPG/OqReA7j3+To=
Subject key identifier:   A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4056DFF82CA1121D3901EA376C34B8710FFA7537
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Dec 2023 21:35:08 +0000
Certificate not after:    Fri 27 Dec 2024 21:40:08 +0000
Subordinate resources:    AS: 10906
                          AS: 11284
                          AS: 11431
                          AS: 11644
                          AS: 11752
                          AS: 12136
                          AS: 13874
                          AS: 14026
                          AS: 14650
                          AS: 20121
                          AS: 22548
                          AS: 26162
                          AS: 28345
                          AS: 53035
                          AS: 61580
                          AS: 263044
                          IP: 45.6.52.0/22
                          IP: 45.184.144.0/22
                          IP: 45.227.0.0/22
                          IP: 168.181.20.0/22
                          IP: 177.52.38.0/23
                          IP: 187.16.192.0/19
                          IP: 189.76.96.0/19
                          IP: 200.160.0.0/20
                          IP: 200.189.40.0/22
                          IP: 200.192.104.0/24
                          IP: 200.192.108.0/22
                          IP: 200.192.232.0/22
                          IP: 200.194.128.0/19
                          IP: 200.219.130.0/23
                          IP: 200.219.138.0 -- 200.219.141.255
                          IP: 200.219.143.0 -- 200.219.148.255
                          IP: 200.219.154.0 -- 200.219.159.255
                          IP: 200.229.248.0/23
                          IP: 2001:12f8::/48
                          IP: 2001:12f8:2:: -- 2001:12f8:d:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:12fe::/31
                          IP: 2801:80:1700::/40
                          IP: 2801:80:1e00::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:56:df:f8:2c:a1:12:1d:39:01:ea:37:6c:34:b8:71:0f:fa:75:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 21:35:08 2023 GMT
            Not After : Dec 27 21:40:08 2024 GMT
        Subject: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:99:78:be:2b:d7:20:60:58:3f:29:83:f7:
                    2c:03:72:a4:93:d8:cc:d0:3b:23:fc:66:ac:f6:d7:
                    fb:63:bd:bf:62:e6:44:e9:15:ce:95:eb:e2:bc:ea:
                    6d:1d:bc:58:4c:24:b5:35:44:50:7e:1c:71:2c:b8:
                    52:f0:e8:b7:8a:00:63:d4:cf:a9:13:27:3f:5d:e1:
                    3f:cc:82:09:af:28:32:34:61:e6:65:d8:34:e7:89:
                    3f:42:52:df:fa:97:9e:95:99:92:87:9b:84:bb:a1:
                    8a:d1:fd:07:c1:6f:bd:48:9a:ef:78:bc:f5:ea:c6:
                    53:7c:4d:0a:31:95:01:9f:ff:88:32:34:90:6e:34:
                    fc:53:eb:d7:ea:5d:fd:9a:0e:ad:8c:ee:32:8f:e5:
                    af:3b:73:b3:88:31:f8:86:a0:84:c2:52:d9:81:72:
                    e6:2b:ed:a1:a3:92:5e:81:ed:01:19:57:ed:bc:32:
                    92:e1:1c:8d:56:9e:61:24:18:ee:44:49:76:d5:15:
                    f9:da:0d:5a:ae:8d:03:61:5c:98:5a:48:01:19:a0:
                    bd:71:19:3f:67:35:92:26:3a:a7:82:32:c8:60:cd:
                    76:03:03:f7:63:a3:36:bf:eb:68:56:31:1a:28:7c:
                    59:d8:17:f5:6b:7b:6c:d6:46:af:c6:de:2d:81:6a:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.52.0/22
                  45.184.144.0/22
                  45.227.0.0/22
                  168.181.20.0/22
                  177.52.38.0/23
                  187.16.192.0/19
                  189.76.96.0/19
                  200.160.0.0/20
                  200.189.40.0/22
                  200.192.104.0/24
                  200.192.108.0/22
                  200.192.232.0/22
                  200.194.128.0/19
                  200.219.130.0/23
                  200.219.138.0-200.219.141.255
                  200.219.143.0-200.219.148.255
                  200.219.154.0-200.219.159.255
                  200.229.248.0/23
                IPv6:
                  2001:12f8::/48
                  2001:12f8:2::-2001:12f8:d:ffff:ffff:ffff:ffff:ffff
                  2001:12fe::/31
                  2801:80:1700::/40
                  2801:80:1e00::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10906
                  11284
                  11431
                  11644
                  11752
                  12136
                  13874
                  14026
                  14650
                  20121
                  22548
                  26162
                  28345
                  53035
                  61580
                  263044

    Signature Algorithm: sha256WithRSAEncryption
         04:5b:86:23:10:11:ac:16:18:b4:ac:c1:da:8d:5a:ab:a5:43:
         b3:fa:35:fc:1c:ff:3e:09:d0:87:05:97:90:94:21:71:4d:ae:
         ce:fb:d4:75:0c:a6:b7:c7:8f:e6:ec:c2:d0:d1:b8:b6:af:d0:
         89:05:57:3f:8d:e3:24:f0:8c:47:83:b0:7f:cd:00:de:c1:4f:
         08:ad:5f:74:53:2b:19:ee:43:39:e6:65:cb:c3:4e:b9:8b:3b:
         68:aa:4b:c3:e5:94:5b:ff:8f:33:da:12:49:fa:ee:59:71:50:
         f5:12:f1:30:97:78:fc:10:9f:d1:b0:c6:2b:bd:b2:b1:2c:a9:
         a6:cd:c6:a9:70:8b:05:57:11:4d:88:c8:b8:bc:74:c8:14:b5:
         db:60:f8:30:17:43:cb:0a:32:fe:d0:61:7a:28:f9:3b:9b:5b:
         62:b3:17:27:3e:5f:c3:f9:bd:50:00:2d:83:85:eb:8f:1f:69:
         ff:7b:3c:d7:aa:b7:ac:30:85:40:0d:17:ab:cd:1b:e0:ac:b2:
         30:cb:2d:36:a2:84:ac:85:f7:20:c3:f3:f4:64:5a:67:50:d9:
         f4:4a:83:b5:21:c5:f6:95:b5:60:b2:59:b7:33:dc:e1:07:93:
         03:b4:03:cc:44:49:ab:43:0a:79:7a:09:6b:72:19:7b:48:ec:
         b2:52:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org