Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.cer
File:                     CC4F271563875365A5DCAFE4E8BEA976C2DBA756.cer (raw, json)
Hash identifier:          DXH2KEVLbiAPZY2iym6RXUievRx5KHL1k20ZSWmz8HE=
Subject key identifier:   CC:4F:27:15:63:87:53:65:A5:DC:AF:E4:E8:BE:A9:76:C2:DB:A7:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D33D7FA4540C7C3930A88AC4BE6AA2680DA3353
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 18:25:10 +0000
Certificate not after:    Tue 25 Feb 2025 18:30:10 +0000
Subordinate resources:    AS: 267579
                          IP: 45.70.52.0/22
                          IP: 2804:439c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:33:d7:fa:45:40:c7:c3:93:0a:88:ac:4b:e6:aa:26:80:da:33:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 18:25:10 2024 GMT
            Not After : Feb 25 18:30:10 2025 GMT
        Subject: CN=CC4F271563875365A5DCAFE4E8BEA976C2DBA756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:63:a7:8d:17:90:17:10:69:83:5e:eb:a0:7e:
                    17:4b:09:fe:81:ab:98:55:25:48:cc:45:2e:85:71:
                    91:ff:59:c4:db:3c:22:ab:48:c8:69:44:66:3c:22:
                    62:9e:f7:f9:16:f8:bd:80:5b:5a:99:e6:be:bb:a7:
                    31:2b:84:e2:ed:e3:e2:11:d6:e8:b9:90:be:71:00:
                    8b:e2:d2:54:1b:1a:1b:7b:e7:b7:61:69:a7:67:cd:
                    d4:62:7b:d1:d6:06:c1:f6:9d:f2:4c:6b:b2:f9:8d:
                    25:2b:67:da:06:af:b1:87:a0:7d:ec:2c:77:16:1b:
                    f0:a5:1a:be:bb:84:96:60:a0:d3:e1:3b:ef:80:cc:
                    4d:ac:70:d9:78:14:85:14:a1:6d:4e:74:f2:60:1a:
                    76:f6:27:17:8a:fd:4a:ea:40:bd:86:5a:31:85:f7:
                    bc:ed:3b:ac:4a:03:32:f7:5a:a4:36:d6:e4:94:1e:
                    8f:e1:4f:a5:c2:fc:ed:d4:c0:5b:d4:85:c7:6a:fe:
                    6d:e1:2d:21:f9:0a:70:b7:0d:cf:a4:79:74:c2:e5:
                    99:09:5a:e8:f5:6a:30:43:3d:cc:53:ce:f5:ab:ab:
                    70:24:0d:a1:d4:2b:10:ac:6e:00:75:c4:b2:37:bf:
                    71:b7:75:52:b5:6e:8a:4b:5d:d4:3d:51:53:ce:7c:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:4F:27:15:63:87:53:65:A5:DC:AF:E4:E8:BE:A9:76:C2:DB:A7:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/CC4F271563875365A5DCAFE4E8BEA976C2DBA756.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/22
                IPv6:
                  2804:439c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267579

    Signature Algorithm: sha256WithRSAEncryption
         48:90:d6:d2:f2:30:20:d4:a1:26:68:bb:c2:3d:2d:00:2d:d5:
         ff:ec:a5:bd:7e:90:bc:20:28:28:6f:f6:77:32:39:7a:c9:cc:
         98:12:8e:08:75:42:2d:67:0d:f6:31:00:dc:9f:b8:b9:0b:0e:
         09:58:c8:de:02:0c:2f:61:a0:70:f0:73:7c:f0:9e:bc:85:34:
         94:83:fa:9a:b7:3b:d8:31:07:3d:96:a2:3d:9e:c0:d7:ba:0f:
         9d:e4:2d:31:cd:21:40:89:da:98:10:a1:34:34:f2:93:e3:cf:
         d0:1e:b0:4f:01:26:71:d9:4a:35:f6:a5:a7:08:92:bb:de:93:
         ed:f9:43:15:e8:28:b0:e9:da:74:06:c8:e1:cb:76:ce:ba:76:
         92:a1:b9:63:41:19:09:57:af:c6:25:da:ec:44:b9:dd:64:d8:
         12:29:f7:c9:a5:8f:f1:d9:0c:26:16:57:72:30:2d:42:64:6a:
         30:bd:64:98:7d:b2:d3:41:80:69:cf:fe:19:43:4b:fb:bc:b3:
         39:c9:67:ab:72:f0:b0:16:85:ce:7f:de:78:00:18:07:39:6f:
         a3:0f:b0:7f:91:3f:6a:36:77:4a:0e:2c:cb:83:68:e7:50:a7:
         98:e3:45:d2:51:14:56:63:61:9f:90:df:5d:8f:ae:e4:3c:e0:
         3f:c9:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org