Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/12B8D57E93C967714806F75E66240A298948CE22.cer
File:                     12B8D57E93C967714806F75E66240A298948CE22.cer (raw, json)
Hash identifier:          eSXyirvHQIwB4UQzTCYTFGBUWSyKYdiIkw7FAWKRv/I=
Subject key identifier:   12:B8:D5:7E:93:C9:67:71:48:06:F7:5E:66:24:0A:29:89:48:CE:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       793C679D8355B6BE80BE8A21F4B02F6FBD7E3E66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/12B8D57E93C967714806F75E66240A298948CE22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 12:42:19 +0000
Certificate not after:    Thu 13 Feb 2025 12:47:19 +0000
Subordinate resources:    AS: 263087
                          IP: 177.137.208.0/20
                          IP: 179.109.160.0/20
                          IP: 2804:978::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3c:67:9d:83:55:b6:be:80:be:8a:21:f4:b0:2f:6f:bd:7e:3e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 12:42:19 2024 GMT
            Not After : Feb 13 12:47:19 2025 GMT
        Subject: CN=12B8D57E93C967714806F75E66240A298948CE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:fb:7b:73:ff:29:ff:ff:f9:b7:94:e5:b4:
                    48:28:86:56:ae:27:b8:f1:9a:e0:d3:09:6f:f7:56:
                    53:5f:da:8d:bb:ba:ae:2c:01:e0:a3:ad:78:ea:63:
                    aa:24:27:10:e2:f5:6e:78:e7:62:55:64:59:41:fa:
                    8e:69:60:1d:1d:42:09:af:22:c0:a0:bc:1a:f9:af:
                    45:ea:fb:34:ba:96:36:54:d2:c6:28:64:d0:a1:02:
                    5a:be:bd:dc:15:6c:f8:85:75:3c:b4:cf:76:ba:e3:
                    7b:ff:6f:d2:49:84:67:f7:41:18:48:fa:9a:bd:d0:
                    c3:9b:e2:88:5b:6c:ad:9d:c2:e5:e5:71:2a:2a:2d:
                    a0:4e:c1:53:a5:18:bd:31:24:25:99:e5:de:61:e3:
                    62:f5:b4:1f:4f:c0:6b:3e:d7:40:f6:53:f5:7d:a3:
                    95:95:87:4f:fa:17:cd:f5:6b:b9:a7:2d:af:ec:75:
                    b5:94:ee:f5:ca:a8:fb:ae:8d:c6:e4:8a:e4:42:82:
                    0a:31:7e:dd:09:13:62:31:ed:fc:5a:91:9b:89:55:
                    93:e7:d7:51:d8:5a:9a:9e:5a:d5:d7:1d:cb:47:06:
                    67:d8:f9:e3:12:1c:1a:7f:be:ef:d8:89:7a:52:c4:
                    34:09:51:8f:eb:e5:d7:09:2c:d7:7b:35:b1:a3:d6:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:B8:D5:7E:93:C9:67:71:48:06:F7:5E:66:24:0A:29:89:48:CE:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/12B8D57E93C967714806F75E66240A298948CE22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.208.0/20
                  179.109.160.0/20
                IPv6:
                  2804:978::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263087

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:b1:0c:dd:7c:ef:6e:2e:9a:65:89:23:14:8e:7f:ab:bf:
         8b:04:21:91:80:13:08:54:77:7e:77:07:33:d0:e1:aa:32:e7:
         3d:f7:b4:64:52:24:62:b8:93:a9:2e:fa:32:cc:27:ff:42:74:
         6f:6d:6e:f1:a8:c1:b6:14:97:f1:e6:99:21:39:e9:07:29:e1:
         20:ca:ba:26:00:8b:ac:38:88:06:cd:d5:8b:ec:55:a2:84:71:
         e5:88:df:83:a0:ec:a9:59:f5:9c:e2:b5:6d:4e:f4:d9:81:ac:
         d4:45:19:cc:be:91:5f:fb:f1:ff:b6:c1:e7:09:9f:c1:81:91:
         12:0f:9f:23:be:9b:2d:f2:42:14:4d:fa:44:36:60:82:08:38:
         d1:75:35:61:c4:f7:45:a9:b0:ab:7d:7e:1f:7d:28:ca:f5:a1:
         e2:22:0d:39:ab:3e:ea:bf:0b:82:b6:d1:3e:5a:57:c3:f0:cb:
         79:dd:6a:4f:4c:c6:15:e4:03:bd:f6:45:a2:b0:32:63:ea:ad:
         34:2b:ec:de:4f:5a:34:d6:93:36:77:44:b8:49:3d:d2:75:f1:
         54:4c:5d:a9:0e:0e:16:75:05:6c:ed:25:ad:f6:d8:ce:46:2f:
         c8:7e:c4:6e:44:b7:42:eb:e7:03:cd:0d:08:bd:f7:2e:2c:82:
         34:ea:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org