Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.cer
File:                     C48F9D371DFEA1B18BDE20A84C319A09510281E0.cer (raw, json)
Hash identifier:          YWwCTW7E1qbukVvdri7qc6XTDNlg3KfmbqhoJNIS6uY=
Subject key identifier:   C4:8F:9D:37:1D:FE:A1:B1:8B:DE:20:A8:4C:31:9A:09:51:02:81:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36A63E1E7704E711A1AB65EA7DAA368698A74EF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:41 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:41 +0000
Subordinate resources:    AS: 267168
                          IP: 45.230.132.0/22
                          IP: 2804:492c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a6:3e:1e:77:04:e7:11:a1:ab:65:ea:7d:aa:36:86:98:a7:4e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:41 2024 GMT
            Not After : Mar 31 11:03:41 2025 GMT
        Subject: CN=C48F9D371DFEA1B18BDE20A84C319A09510281E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:5e:9f:e0:b1:a6:ee:48:f0:60:80:64:f2:
                    f2:7d:7b:38:76:90:4b:83:87:f2:e6:ad:2e:8e:53:
                    16:4b:dc:91:21:7e:2d:47:e7:e5:7c:cf:d3:d6:99:
                    0a:29:f1:6a:b0:36:0e:1a:0a:4f:19:d8:58:4f:04:
                    3b:b8:f6:49:43:d9:ed:bb:96:41:48:6c:8b:83:78:
                    dd:69:9b:0f:ac:dd:c8:ea:c2:e9:ea:4f:67:e9:ae:
                    82:62:4a:ef:c3:a0:08:71:2d:02:7f:ae:2b:b5:54:
                    3f:e1:6e:47:07:21:a7:00:1a:ad:9d:2d:7c:54:4e:
                    00:fe:0e:74:94:b7:72:db:3d:3d:69:ae:e3:6b:e8:
                    f3:b4:cc:32:8f:28:72:f7:44:33:9c:72:f7:f8:c5:
                    6c:9a:d0:29:54:a8:fb:15:a0:a4:4e:e7:ef:6a:a9:
                    0c:40:74:54:87:bd:35:91:0c:9a:09:45:f3:e8:d2:
                    f9:1c:e9:a3:8e:1f:e5:78:5e:58:57:e8:04:aa:3e:
                    52:0f:f1:60:a1:f2:dc:f2:8b:cc:62:42:d7:bb:25:
                    5d:48:da:28:e3:5c:27:2d:8e:68:b4:84:88:c4:63:
                    b4:67:63:aa:6a:70:73:00:ff:4a:a2:53:6a:6a:d9:
                    d6:df:f8:01:b3:56:32:79:e7:1c:92:cb:f9:19:8a:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:8F:9D:37:1D:FE:A1:B1:8B:DE:20:A8:4C:31:9A:09:51:02:81:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.132.0/22
                IPv6:
                  2804:492c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267168

    Signature Algorithm: sha256WithRSAEncryption
         4c:52:ed:6a:85:e4:ba:9c:cc:d2:d9:bd:f4:b1:b1:1d:d5:94:
         5d:be:7c:22:fe:2d:a2:72:39:1e:f2:cd:cc:6f:1c:ad:41:af:
         fb:4c:d2:c5:e8:f3:c7:b9:c9:fa:49:da:b6:84:6c:73:72:14:
         56:e6:14:8c:62:36:bd:61:02:c9:e3:93:73:9c:b6:9b:36:36:
         78:5a:db:72:25:8c:28:64:56:06:7a:fc:4f:de:1d:1b:f9:0d:
         a8:b7:54:e9:c6:43:13:b2:5d:78:cf:d4:55:e9:59:1e:59:2a:
         c3:e1:d9:0b:55:ee:87:ab:97:7b:28:b4:6f:fd:23:68:0d:93:
         a8:09:0c:19:68:ca:c7:49:c9:f3:13:84:e0:c1:35:e1:a9:7e:
         0f:4d:5c:6f:5a:66:d5:98:d6:24:b2:54:9e:f1:3a:e3:21:6b:
         be:c3:7a:6f:51:1f:ab:9d:9d:8f:5e:2d:1e:f8:dc:57:39:02:
         86:02:5f:56:d4:6b:84:7f:61:65:d3:3d:63:0e:27:26:57:61:
         dc:7e:50:fc:9a:c5:97:07:e1:d8:40:29:5d:25:7d:72:27:b3:
         43:3a:02:d4:67:41:e0:b3:3f:7b:10:2e:52:36:95:9f:0e:c1:
         67:bf:e3:cc:f6:95:ef:71:6d:3b:6e:dc:88:7e:ef:fe:1b:1e:
         86:74:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org