Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.cer
File:                     1BC7F4D885BA6381BB4AB613A65BC60075643F9A.cer (raw, json)
Hash identifier:          s23de1JEsaWSvB7ZX/gCa+aArjyNFM1J9vDnfkIUNrU=
Subject key identifier:   1B:C7:F4:D8:85:BA:63:81:BB:4A:B6:13:A6:5B:C6:00:75:64:3F:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E078291925DF2F9F2C39E470D10871A362C345A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Oct 2023 01:04:45 +0000
Certificate not after:    Thu 10 Oct 2024 01:09:45 +0000
Subordinate resources:    AS: 265265
                          IP: 168.0.196.0/22
                          IP: 2804:2d30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:07:82:91:92:5d:f2:f9:f2:c3:9e:47:0d:10:87:1a:36:2c:34:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 12 01:04:45 2023 GMT
            Not After : Oct 10 01:09:45 2024 GMT
        Subject: CN=1BC7F4D885BA6381BB4AB613A65BC60075643F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:cb:ab:70:ef:1b:bd:2e:34:c7:1f:5c:2f:
                    99:3d:68:f1:cc:9a:36:bb:b1:31:8b:92:c5:16:7b:
                    56:77:67:e8:95:03:91:9a:e8:0c:52:51:f8:52:21:
                    0d:a1:e4:ff:67:81:cd:94:14:04:1d:38:54:3b:58:
                    84:5d:a4:c2:6c:c0:01:3e:dc:5c:32:2e:f9:cd:14:
                    73:e5:22:10:1f:74:61:cd:e8:81:8c:00:87:fd:65:
                    9a:bb:76:d0:d5:ef:ff:5c:5e:95:1b:9e:b9:4a:83:
                    11:bf:a3:f6:71:e0:83:8c:42:9f:be:71:a7:e7:af:
                    e6:ca:17:f2:8b:3f:3e:7f:78:81:08:55:6e:25:c1:
                    7f:52:fc:69:ff:a4:e2:a8:54:3c:78:38:2c:b5:1d:
                    32:bb:1f:4d:de:d9:09:ce:fb:d5:fc:79:bb:2e:46:
                    9a:74:01:6f:70:ef:d1:ff:58:e3:e8:5b:ca:24:0e:
                    f8:5a:d5:2f:31:d9:fc:e0:ed:d3:a3:7f:ee:95:2d:
                    37:30:d1:c1:07:58:5d:f4:3f:18:6a:2b:96:b2:80:
                    44:e3:65:b8:b4:e4:80:1e:fe:7b:64:85:9d:de:3d:
                    30:3f:2e:e1:b2:61:7e:09:4a:4c:52:48:5d:88:71:
                    f9:3a:e7:76:20:8d:e0:e7:29:ad:5a:ff:13:dc:1e:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:C7:F4:D8:85:BA:63:81:BB:4A:B6:13:A6:5B:C6:00:75:64:3F:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.196.0/22
                IPv6:
                  2804:2d30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265265

    Signature Algorithm: sha256WithRSAEncryption
         b6:00:46:87:88:70:04:1b:9f:b7:19:44:b6:41:24:0a:53:0b:
         2c:e5:a8:90:f1:6e:1f:f5:4d:05:41:67:6c:06:33:c5:7d:81:
         e1:dd:ff:f3:7f:03:8c:49:3d:a7:c0:b3:af:c0:48:e0:2c:0b:
         28:d5:9a:46:6d:32:04:56:38:1d:63:15:ef:40:11:15:6d:c2:
         13:b7:9f:2b:7b:f7:1c:90:89:7d:76:e6:d1:65:8b:2f:1a:5a:
         69:2a:04:e9:a1:a6:dc:78:98:fc:d4:c3:2a:0c:75:6b:58:8e:
         c5:40:53:22:a7:dc:4f:7a:fd:ee:6f:e0:72:39:c3:74:7b:e2:
         27:e7:e6:ff:16:a3:39:d6:d2:34:6b:2f:1d:61:9e:5a:c2:fe:
         03:a1:46:a8:2f:e6:50:32:fe:4c:4c:b0:3f:5f:d2:58:74:4a:
         53:1e:72:61:61:cb:e3:d1:ce:9b:89:f7:39:cd:aa:d3:9a:4d:
         e0:dd:60:18:77:c8:73:1e:65:59:92:7c:1c:da:58:7d:8f:80:
         d5:99:7b:49:9f:bf:67:81:84:83:a9:40:f3:10:80:cd:3f:ab:
         1d:d8:1f:4a:46:a1:ba:29:f8:52:d8:8c:19:49:b2:ef:36:73:
         6b:21:78:02:ef:0c:6b:62:83:83:f1:04:37:46:8c:32:f0:16:
         88:2f:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org