Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer
File:                     01BB812570793F27C1E5A61B45140B6550487AB2.cer (raw, json)
Hash identifier:          DZWGTJ1TGLvz6+yHZOnqGWR6R1rJVo9qaFe2s0EFt2U=
Subject key identifier:   01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3354068F0134EEB754034457ACBF5A6035DABDB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/01BB812570793F27C1E5A61B45140B6550487AB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 13:29:02 +0000
Certificate not after:    Mon 24 Feb 2025 13:34:02 +0000
Subordinate resources:    AS: 266636
                          IP: 128.201.56.0/22
                          IP: 2804:3f0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:54:06:8f:01:34:ee:b7:54:03:44:57:ac:bf:5a:60:35:da:bd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 13:29:02 2024 GMT
            Not After : Feb 24 13:34:02 2025 GMT
        Subject: CN=01BB812570793F27C1E5A61B45140B6550487AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:b1:fc:b9:d5:cc:8a:f4:37:65:b9:2c:6e:
                    9c:15:8b:e2:29:48:46:e1:3f:73:d2:c8:5d:c6:a9:
                    5a:61:0d:90:9e:87:d2:83:cc:03:55:94:a8:06:05:
                    84:f0:a0:36:22:8b:60:8e:7e:05:61:a5:76:b2:d0:
                    25:69:fb:a1:6e:52:21:32:a4:60:f9:17:f2:4a:41:
                    9f:72:a4:9f:cf:63:ae:9e:80:56:d2:dc:01:12:91:
                    2f:a0:cf:24:91:0a:12:1d:b3:3c:90:65:61:d0:f3:
                    68:4e:94:e3:72:5a:30:cc:3f:5c:6d:f1:0c:41:93:
                    79:c8:95:6e:3a:6a:1f:50:1d:30:af:eb:47:5c:7b:
                    ee:f7:10:00:f8:dd:90:63:7b:dd:ae:ba:d7:21:38:
                    d6:4e:e6:35:56:93:8c:5c:1d:8f:7c:08:43:66:4c:
                    bf:17:29:07:e9:3e:0a:43:f3:dd:ef:38:00:b1:73:
                    89:6a:7c:6c:11:64:24:79:fd:41:cf:61:c7:a7:59:
                    f0:96:c3:20:a5:db:26:f9:c5:fc:33:8d:52:3d:99:
                    7e:e0:80:8a:14:5d:58:0f:a7:8a:e5:96:6e:26:86:
                    30:81:76:9d:80:bd:10:f4:f4:3d:61:f3:21:df:f6:
                    b2:36:62:97:27:5a:1d:66:a5:73:eb:9e:38:01:36:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/01BB812570793F27C1E5A61B45140B6550487AB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.56.0/22
                IPv6:
                  2804:3f0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266636

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:30:f7:08:ce:09:63:16:45:5e:ad:c2:77:46:06:23:2f:
         17:0f:0b:7f:0a:6b:fd:e3:c8:76:ba:ae:c7:74:49:64:d5:9c:
         37:49:9b:bf:95:79:1f:b8:ae:1b:3d:9c:70:84:13:e0:64:6e:
         2d:25:1b:e1:fb:43:f5:dd:2b:ff:b2:33:cf:a9:23:1a:f0:78:
         6b:da:6b:a4:89:fe:8f:79:1a:9e:46:e3:69:12:0a:d8:7f:30:
         43:ff:a3:a6:ff:ba:a7:3c:2f:42:9b:7a:a7:88:f5:53:bd:e0:
         53:16:26:0e:02:8c:ab:34:1b:7b:24:db:d3:9a:c2:70:e1:84:
         08:43:9d:b2:11:2d:6b:dd:dd:d6:9e:ea:58:61:8a:0d:8a:28:
         06:a2:93:71:07:4c:c2:3d:57:64:98:13:2b:eb:ea:56:bc:a6:
         f1:78:b7:6c:ed:cd:5b:a2:4e:17:4d:07:6f:45:12:7a:1a:5e:
         8d:32:d1:02:0d:0a:00:e7:95:4a:f8:2f:0d:4a:d1:90:08:07:
         25:ef:14:c5:81:6a:41:6c:23:60:97:8b:b9:b7:b0:be:2e:40:
         f4:c9:ca:b6:11:3f:18:56:82:ad:01:f4:f3:1f:d8:b2:98:59:
         4d:5a:a6:d6:fb:fd:4c:d2:7f:2a:aa:f3:62:28:ce:d9:79:2e:
         8d:a3:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org