Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer
File:                     0B7E676BF893065665A524EBE293E999020CF3E1.cer (raw, json)
Hash identifier:          GMczt1qE4xoLsjzekli83EDtr7b3Qmqofmls2Kcu98A=
Subject key identifier:   0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51CE4D2D9E642771D6C523A716A610CCAD979F30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 19:49:16 +0000
Certificate not after:    Tue 28 Jan 2025 19:54:16 +0000
Subordinate resources:    AS: 271298
                          IP: 200.53.84.0/22
                          IP: 2804:7950::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ce:4d:2d:9e:64:27:71:d6:c5:23:a7:16:a6:10:cc:ad:97:9f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 19:49:16 2024 GMT
            Not After : Jan 28 19:54:16 2025 GMT
        Subject: CN=0B7E676BF893065665A524EBE293E999020CF3E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:2b:a2:6e:b6:71:33:20:cd:48:83:b9:c0:
                    b0:27:f3:c7:1d:5a:72:36:e4:68:0e:09:b1:99:97:
                    92:13:a9:d9:e1:8d:9a:58:0f:77:a2:39:30:ab:5b:
                    36:db:01:29:2f:b1:1a:a2:fe:d2:93:77:96:e0:89:
                    6e:84:b3:dd:db:b0:39:31:c7:ca:cb:b4:74:eb:c6:
                    27:4e:b3:ec:3f:ed:a3:78:2f:64:73:af:4f:60:aa:
                    4a:19:7b:38:d8:8b:3a:a7:9f:8c:f4:70:65:2f:cb:
                    e3:f5:6b:35:b0:56:51:e2:5e:e9:13:60:bc:9c:b7:
                    80:8a:c3:77:d1:c9:5d:ef:f4:c2:83:ab:45:a2:ee:
                    79:d7:58:14:de:f9:1b:fe:c5:14:f0:af:de:0c:89:
                    fe:26:15:b0:6d:a7:86:32:96:5c:a1:6d:5b:5a:c5:
                    6f:f1:7f:51:21:b4:15:dc:ed:dd:0a:6a:28:21:6c:
                    98:b4:1e:39:94:0d:1b:54:67:fb:d8:5b:1d:b7:ba:
                    b4:47:8f:17:75:f2:fd:7e:6b:4e:4e:59:99:6b:8a:
                    a6:b9:d8:f3:22:20:9e:97:e5:f0:19:77:6e:51:a9:
                    be:20:00:ea:9e:c6:ff:eb:9a:03:b3:fd:b0:57:3c:
                    05:50:e8:5c:5c:1e:47:57:41:62:46:7a:ae:00:c0:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/22
                IPv6:
                  2804:7950::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271298

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:04:6d:32:f1:72:fa:0a:74:8d:b2:e3:80:77:c3:49:4f:
         93:03:fe:6b:6e:96:7e:a1:36:46:a8:21:74:c9:2e:1f:2a:39:
         d5:04:50:3e:60:fe:7f:84:a1:40:8d:d8:eb:e3:a7:8e:88:76:
         ce:b6:58:a5:08:a8:9c:5d:00:41:22:e7:e9:3a:28:fc:47:f0:
         ff:d4:55:bb:71:c2:e8:fb:b1:fb:70:a8:63:a6:77:e3:34:b8:
         60:d3:95:11:23:78:64:19:93:c8:b6:f5:28:17:65:81:86:b4:
         c8:bf:a2:4d:6d:62:ea:9b:29:f8:a0:23:ba:a4:57:f3:15:1c:
         3f:f9:a9:b3:fa:f5:c1:a6:9a:be:f1:21:47:9b:b3:96:74:02:
         8d:41:c5:80:48:6b:a6:b2:b7:a7:7b:bf:30:4c:79:12:bb:2b:
         3a:a5:a2:65:bd:38:de:06:e6:61:08:3b:c8:9f:11:64:b3:c4:
         0e:b4:01:db:c8:b5:70:fd:bf:a9:ed:aa:ad:94:ea:10:eb:9f:
         f2:0f:5e:77:c2:9f:21:24:c5:4d:a7:5c:33:ad:0f:dc:c7:1e:
         cf:13:6e:fd:39:97:36:e6:41:d7:42:15:45:9e:e7:3a:e5:93:
         04:67:45:b4:b2:7f:20:c8:0d:0a:18:c8:3e:69:35:b1:1a:5e:
         7a:53:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org