Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1B1702BC517065A11637A946F3D5295EB223FCE1.cer
File:                     1B1702BC517065A11637A946F3D5295EB223FCE1.cer (raw, json)
Hash identifier:          pKZBJbPWr6ePQJoagT8eSJrCksdnanDGY779/179qoc=
Subject key identifier:   1B:17:02:BC:51:70:65:A1:16:37:A9:46:F3:D5:29:5E:B2:23:FC:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A3D443EC34C774A31F8D8A13B6667E7B9170BA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/1B1702BC517065A11637A946F3D5295EB223FCE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 00:36:55 +0000
Certificate not after:    Mon 17 Feb 2025 00:41:55 +0000
Subordinate resources:    AS: 264953
                          IP: 168.228.148.0/22
                          IP: 2804:3078::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3d:44:3e:c3:4c:77:4a:31:f8:d8:a1:3b:66:67:e7:b9:17:0b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 00:36:55 2024 GMT
            Not After : Feb 17 00:41:55 2025 GMT
        Subject: CN=1B1702BC517065A11637A946F3D5295EB223FCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:cf:58:f7:6b:4e:d4:42:4e:99:9e:45:53:
                    2d:72:8b:f4:4f:48:08:45:d3:2a:0a:92:09:cd:61:
                    3a:a6:ce:fa:1e:29:bf:79:11:46:cd:7c:83:97:04:
                    ef:1a:f2:87:b7:90:27:15:ec:3d:24:a6:6c:5f:4e:
                    cf:a1:d7:be:49:d9:51:3c:51:f2:cb:0e:84:c7:be:
                    fc:0c:a8:28:36:be:94:0e:4f:be:8f:3b:5e:05:bc:
                    cd:0f:4d:07:b5:cc:09:3c:6a:e6:2f:b0:65:21:f0:
                    ec:44:4d:82:f3:04:62:6f:e3:77:a5:f4:e4:dc:05:
                    5e:c1:f2:50:49:e8:a4:d9:58:97:9d:bf:03:01:42:
                    c2:1c:79:80:10:65:15:05:1f:d5:79:78:f1:4a:fc:
                    8f:70:dc:29:b9:8d:b1:91:75:aa:a4:d2:77:ca:94:
                    dc:51:ee:19:e7:d0:67:9d:fc:c7:ed:fd:03:d1:82:
                    ed:b5:7f:2d:23:29:51:88:f4:b2:22:9a:30:fb:43:
                    a6:9d:64:1a:00:11:84:8f:b2:a8:47:d7:9f:ee:71:
                    b3:5c:3b:ec:5b:c0:ba:b4:84:29:34:c9:b0:e1:41:
                    3e:81:87:ff:64:99:15:80:62:98:a9:44:7d:54:14:
                    e5:70:0e:00:c2:01:a3:92:c6:c5:91:cf:7d:82:9f:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:17:02:BC:51:70:65:A1:16:37:A9:46:F3:D5:29:5E:B2:23:FC:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/1B1702BC517065A11637A946F3D5295EB223FCE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.148.0/22
                IPv6:
                  2804:3078::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264953

    Signature Algorithm: sha256WithRSAEncryption
         99:21:8c:67:23:05:e6:7b:cf:77:bf:1d:43:2e:89:7e:a5:44:
         1a:f4:9e:23:ea:8d:f6:90:b7:eb:f1:27:b6:c8:3c:28:2b:17:
         ba:c5:ea:64:72:9b:ba:97:6d:8b:f6:81:fd:16:5e:a3:5a:98:
         bf:3b:ef:81:8f:0e:28:cd:14:bd:50:58:a6:41:5f:b8:55:b4:
         ab:c1:19:29:db:33:4e:05:d5:aa:eb:28:58:9e:ea:08:b9:f3:
         e1:ca:d3:75:39:b3:8f:b3:48:a9:e1:0b:86:fa:40:b0:ba:59:
         32:7f:11:8c:be:7b:c1:d7:d5:dc:d1:2d:f2:83:cd:5f:9b:8a:
         51:23:84:71:14:0c:3e:20:0f:21:d5:e9:a4:d6:f1:a0:ce:17:
         b1:cf:af:db:be:22:77:ea:c3:44:09:5b:02:ad:0f:fe:fe:1c:
         c3:4e:34:8e:c1:87:b3:e5:0e:95:e9:50:f4:76:31:d1:36:0e:
         98:01:e0:5c:80:58:09:69:9e:64:bd:b3:36:7c:73:69:43:52:
         7e:75:a0:ce:9b:6f:da:64:0f:71:5b:50:67:e8:5f:f3:12:ca:
         35:47:fb:3d:de:85:58:70:2c:4c:d6:90:a4:dd:eb:fd:9a:4d:
         fd:d9:75:12:81:65:c2:46:b7:2c:48:ff:9f:b5:f2:52:f8:07:
         b7:05:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org