Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.cer
File:                     0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.cer (raw, json)
Hash identifier:          Vo8Ev9Y8G3KT8gEQ4hw7Lf+Yh609DZ8kCH5U/U1TILE=
Subject key identifier:   0B:07:09:AC:6E:EA:CC:CA:96:E1:14:5C:5E:8F:CF:AA:F9:A1:C2:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29F47A387AFEF05FB3B076821E90029F9CB9DD13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Sep 2022 17:31:29 +0000
Certificate not after:    Thu 21 Sep 2023 17:36:29 +0000
Subordinate resources:    AS: 266280
                          IP: 170.78.228.0/22
                          IP: 2804:3550::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:7a:38:7a:fe:f0:5f:b3:b0:76:82:1e:90:02:9f:9c:b9:dd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 17:31:29 2022 GMT
            Not After : Sep 21 17:36:29 2023 GMT
        Subject: CN=0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:73:27:a7:ac:d8:79:69:f4:08:81:15:da:
                    49:d6:14:a5:e8:5f:70:25:70:af:06:cf:8d:0c:b4:
                    12:39:13:b2:80:ef:5a:f5:65:70:68:f0:be:c2:e1:
                    08:a7:f0:c3:b7:b6:4b:cf:7b:21:de:d2:7a:04:cf:
                    22:c4:f2:ae:7d:e0:6c:1d:25:54:4d:21:cb:6c:19:
                    24:17:48:06:d7:3f:96:a1:dd:1c:1e:9f:72:eb:55:
                    ba:ec:65:e3:9c:f8:ab:3e:ed:6f:0a:e9:a2:a4:6e:
                    64:2b:80:66:1a:34:48:ea:6a:a9:bb:34:45:e3:88:
                    90:2f:f7:e3:3b:f8:eb:c0:a9:1b:83:7a:55:65:2c:
                    b2:73:21:68:58:60:7b:1e:b7:85:57:f4:a6:e0:f5:
                    a8:46:39:3f:4c:79:93:5d:b5:ef:ee:fb:8b:07:33:
                    68:d0:9d:dd:27:a6:fd:e3:8a:7c:f0:3c:2e:c9:70:
                    b7:c1:74:36:a8:e9:9c:27:22:7c:da:c1:33:19:fc:
                    66:26:b3:65:d8:e2:29:1e:1d:19:af:36:1c:28:51:
                    fe:50:5d:b5:ab:79:9c:1d:80:98:01:1b:aa:7d:d3:
                    9f:2e:6f:b9:d7:19:c8:02:0b:70:e3:f8:a1:b1:5b:
                    04:d2:2e:44:25:89:0c:10:9f:68:87:ee:4a:81:c5:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:07:09:AC:6E:EA:CC:CA:96:E1:14:5C:5E:8F:CF:AA:F9:A1:C2:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.228.0/22
                IPv6:
                  2804:3550::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266280

    Signature Algorithm: sha256WithRSAEncryption
         19:71:36:ca:5c:81:a9:53:4f:03:b1:ea:fa:b1:0f:3d:a8:11:
         44:9d:9d:19:11:ef:97:cd:ad:53:31:38:60:7d:38:61:21:83:
         3d:29:4d:f5:c0:90:ad:d0:87:5a:dc:a8:19:85:62:d6:b9:ea:
         a6:a0:c6:9d:28:a3:90:a0:94:14:e0:45:73:ce:61:97:82:08:
         be:d5:42:80:dc:30:46:de:4f:34:8d:df:25:10:2b:82:1d:ab:
         df:0b:33:43:97:ab:19:d0:de:d1:7b:ed:06:b0:ea:71:b6:bc:
         20:7c:db:72:4e:91:31:d5:a4:5f:c6:05:ca:ad:4f:87:eb:b3:
         9e:e1:0b:91:17:3d:8a:58:ee:ef:4d:a1:e7:1d:e0:d5:e9:29:
         5a:38:e6:18:0e:01:07:e9:15:4e:33:89:27:98:63:11:81:2a:
         d9:13:9a:64:8a:83:a7:f2:a6:6f:fa:1c:2f:fc:48:67:96:0e:
         12:0a:fc:33:9a:ec:5e:35:bf:27:58:e8:bc:16:66:54:35:a1:
         3b:24:ec:16:fb:a6:0d:aa:58:4c:f9:b0:ab:60:b8:cb:0a:b6:
         bf:e6:d8:13:39:46:be:a4:02:87:7e:72:66:bb:35:a9:50:ec:
         fb:1a:d1:9c:b7:21:6e:24:f0:13:6f:97:dd:d6:17:57:77:a3:
         3c:b4:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org