Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.cer
File:                     0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.cer (raw, json)
Hash identifier:          J9qREOe6WWPjX5N276X0VmcO4TrCiMd/pKBEcsyrkdY=
Subject key identifier:   0B:60:CA:91:C9:FD:E7:59:8D:B5:3A:0F:81:A2:54:B9:17:7E:AF:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F71F2C88D272D3C21E390CFB6247428A3BB817D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 14:13:33 +0000
Certificate not after:    Thu 20 Feb 2025 14:18:33 +0000
Subordinate resources:    AS: 270783
                          IP: 177.131.136.0/22
                          IP: 2804:7158::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:71:f2:c8:8d:27:2d:3c:21:e3:90:cf:b6:24:74:28:a3:bb:81:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 14:13:33 2024 GMT
            Not After : Feb 20 14:18:33 2025 GMT
        Subject: CN=0B60CA91C9FDE7598DB53A0F81A254B9177EAF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:5d:42:d6:6b:10:85:30:22:87:58:55:bc:
                    c4:25:70:50:ef:9e:70:20:46:d8:c0:c0:84:8e:ca:
                    32:47:1e:ff:43:ee:c4:03:e1:2a:82:0f:6e:e2:f7:
                    cb:dc:22:4d:9c:16:a2:bc:98:be:1b:98:7a:45:3a:
                    c7:a2:f9:bc:36:ad:a2:11:e3:d7:29:45:87:b3:ae:
                    2b:1e:28:09:c1:cd:05:d6:c9:12:53:24:8f:dd:98:
                    b2:57:4b:d5:89:8e:20:96:21:6d:c5:00:21:99:33:
                    76:41:7d:34:0c:55:04:18:b9:b4:4b:51:bf:9e:2c:
                    91:6a:ab:8c:1b:cc:48:43:95:2b:a6:80:db:17:09:
                    8b:5a:a4:98:d8:1b:19:2f:91:ed:b4:3a:93:31:2f:
                    8c:84:be:34:eb:77:50:9b:8b:ed:f9:a4:98:28:a3:
                    81:5a:43:5a:c6:95:62:6d:73:39:d9:32:13:32:7e:
                    37:54:e0:23:8d:1e:3e:ad:23:31:99:af:b2:04:b1:
                    62:6c:ed:2b:b1:78:97:24:f3:3f:62:b5:be:f5:0d:
                    03:e8:df:cb:f1:1f:bc:a9:09:8e:a0:a2:c0:dd:a4:
                    95:f1:29:9c:89:8c:a9:fd:fe:50:a6:ee:aa:20:6c:
                    5a:96:5b:43:ce:11:52:d0:18:3c:7e:85:37:d0:7d:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:60:CA:91:C9:FD:E7:59:8D:B5:3A:0F:81:A2:54:B9:17:7E:AF:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/0B60CA91C9FDE7598DB53A0F81A254B9177EAF49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.136.0/22
                IPv6:
                  2804:7158::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270783

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:64:2f:25:1e:0f:b1:ac:e8:96:c1:f9:59:1d:22:fd:7d:
         6f:ec:aa:1e:15:d3:80:79:79:30:c8:9c:a2:35:60:bd:d3:0f:
         76:3b:ce:25:9f:4b:56:e7:05:ea:67:3e:a9:7a:98:29:7a:3e:
         50:a8:33:8e:f6:c8:09:1b:43:12:33:7c:3b:36:19:b5:d8:58:
         26:42:aa:43:07:b2:44:42:75:db:2a:80:cc:44:c1:30:0b:17:
         0b:d7:c8:d0:2b:a8:97:99:c9:24:d8:74:57:69:f0:46:33:58:
         1c:a6:32:77:f6:94:b3:34:e0:e8:98:d7:6a:59:87:1a:62:5f:
         14:99:9b:41:81:c6:37:8b:54:94:09:5b:47:65:5c:ae:4b:e7:
         e2:5c:2d:bb:4c:20:66:9c:9f:8c:3f:62:b0:4b:21:ab:21:1f:
         65:5e:6a:85:3c:b8:24:54:73:f5:9d:f8:d1:48:90:7d:6f:d3:
         18:f3:77:34:f6:e2:dd:45:9a:4e:1d:a6:19:56:5a:df:b1:81:
         41:a8:b2:0e:6a:08:cd:2a:53:fc:ed:d4:f3:6a:6c:55:55:3b:
         cd:1b:06:9e:45:30:30:f4:b2:9c:51:7f:c6:c8:ae:58:74:31:
         41:38:2b:45:1d:d7:18:de:1b:fc:84:a8:fc:73:39:a9:38:dd:
         cd:e1:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org