Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0BA84391EEF969B9C033F2E7B03DB8588A4A8CA8.cer
File:                     0BA84391EEF969B9C033F2E7B03DB8588A4A8CA8.cer (raw, json)
Hash identifier:          bDPWSXwhiqJj8r863cuHz7sOdah0qXIv7OJ8VEiS1QE=
Subject key identifier:   0B:A8:43:91:EE:F9:69:B9:C0:33:F2:E7:B0:3D:B8:58:8A:4A:8C:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EBE501DD9999810651C086387AC598832CD4794
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/0BA84391EEF969B9C033F2E7B03DB8588A4A8CA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Mar 2023 20:43:20 +0000
Certificate not after:    Fri 01 Mar 2024 20:48:20 +0000
Subordinate resources:    AS: 266028
                          IP: 170.245.220.0/22
                          IP: 2804:3964::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:be:50:1d:d9:99:98:10:65:1c:08:63:87:ac:59:88:32:cd:47:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  3 20:43:20 2023 GMT
            Not After : Mar  1 20:48:20 2024 GMT
        Subject: CN=0BA84391EEF969B9C033F2E7B03DB8588A4A8CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:1e:0b:0e:f7:6b:07:8e:29:1e:70:57:cf:
                    5c:5c:44:f9:c4:0f:66:44:d1:a9:f3:33:54:1f:7f:
                    c9:ef:4f:38:8e:fc:2a:7b:99:22:81:05:91:41:33:
                    4a:ff:ad:b8:f2:de:e7:c8:22:0e:98:63:56:83:ef:
                    9d:61:70:27:15:cd:57:bd:88:d1:9d:a0:49:95:eb:
                    f8:ab:28:4e:3f:60:93:a6:96:de:8b:2d:65:f8:81:
                    09:04:88:3b:5e:11:26:e8:82:2b:48:53:1a:dd:37:
                    a2:cd:7d:dd:6f:93:48:56:12:90:dc:76:b5:66:24:
                    96:d0:96:ec:4b:4d:06:1a:02:f5:f8:e1:39:4b:c4:
                    8e:93:ee:4d:32:7d:0e:8f:6c:f8:03:67:77:a6:86:
                    10:e1:1d:5e:1c:58:08:8c:26:e3:1e:27:7e:38:e6:
                    16:90:20:b1:b8:c9:bc:4b:d9:c5:62:17:b2:f3:18:
                    15:9f:6f:aa:29:57:fd:e7:b9:15:e5:1e:eb:ac:38:
                    75:ed:5d:e4:bd:a9:e7:d2:dc:c0:7d:c5:1d:13:5b:
                    b1:e1:37:85:22:b1:4c:7a:e1:3d:6f:d2:f1:6e:cf:
                    c5:a3:55:fd:e4:b2:d3:6a:29:54:6c:e8:45:c9:cd:
                    93:a2:f5:f3:cb:70:85:19:12:2f:6f:f3:1b:28:a8:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:A8:43:91:EE:F9:69:B9:C0:33:F2:E7:B0:3D:B8:58:8A:4A:8C:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/0BA84391EEF969B9C033F2E7B03DB8588A4A8CA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.220.0/22
                IPv6:
                  2804:3964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266028

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:67:26:01:6c:e3:f9:4c:7a:7f:c7:ef:97:4a:83:42:18:
         06:0d:48:57:0c:53:bc:aa:d1:be:85:66:f4:30:d7:3b:7f:ec:
         f9:df:c3:71:14:3e:1e:08:27:08:53:d4:ab:36:74:f3:03:46:
         02:58:b2:f7:26:66:72:21:74:0d:2b:1c:25:dc:5a:a4:96:b2:
         ef:44:bd:e4:bb:9d:d3:d4:41:83:2d:d7:74:88:7f:ca:b3:da:
         3e:6d:89:6e:2e:79:6a:b4:d8:27:bb:7b:da:ac:8a:d8:4b:0b:
         59:dc:23:3c:c1:a4:06:b5:c6:03:8f:82:20:c8:48:d9:de:c6:
         c7:f7:eb:78:f2:40:57:53:ac:01:15:ba:ad:69:14:cd:83:b6:
         65:07:4c:bf:76:25:21:03:fd:da:74:17:3d:4a:9d:21:b9:3b:
         e6:e4:11:69:9f:03:14:e8:93:66:63:86:9a:b5:d5:52:35:fa:
         34:9a:a7:e3:69:f4:35:d6:e5:cb:9c:a2:bb:d2:1a:11:94:ff:
         c2:bf:cb:5e:c5:dc:02:91:ff:50:c6:bd:7c:89:07:81:d9:d7:
         0f:5b:0f:5c:99:c4:68:e9:5d:cd:f3:b4:97:b9:41:39:47:5d:
         26:9c:9c:dc:5a:83:a0:b3:73:82:b6:93:5c:a6:e3:98:d7:da:
         78:43:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org