Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057.cer
File:                     1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057.cer (raw, json)
Hash identifier:          aZRPxx2jxEK+Vus1zF5sNTgjyD6Ni6d61llfemroSKE=
Subject key identifier:   1B:EB:F5:E8:C4:25:8C:3C:C7:F1:FD:06:74:71:2D:CD:A8:95:60:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07982A865A5E8437F4FB137DAB0B1DD5CC6A4197
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/0/1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 14:02:50 +0000
Certificate not after:    Thu 03 Oct 2024 14:07:50 +0000
Subordinate resources:    AS: 271586
                          IP: 190.9.64.0/22
                          IP: 2804:7dd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:98:2a:86:5a:5e:84:37:f4:fb:13:7d:ab:0b:1d:d5:cc:6a:41:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 14:02:50 2023 GMT
            Not After : Oct  3 14:07:50 2024 GMT
        Subject: CN=1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:01:3a:93:65:35:d4:25:07:cf:a4:e4:66:
                    0f:bb:2b:4f:f8:95:82:d5:ba:39:d9:30:73:aa:2c:
                    03:a3:9a:9a:eb:1b:fe:08:b1:ef:95:5d:ba:c7:20:
                    0f:5b:a0:7f:55:f5:93:2d:d4:73:fd:60:9d:99:8a:
                    f4:d9:24:43:b7:9d:d0:f5:53:a8:f6:ce:a3:27:6a:
                    88:57:4c:cf:54:46:8b:91:4c:1b:aa:41:1a:c9:ce:
                    04:cb:f0:a9:19:cc:53:3b:26:e0:f0:74:e1:ad:0b:
                    d3:9d:32:90:8e:b7:93:dd:8e:2d:1b:5f:fd:b4:42:
                    77:c2:76:d3:88:45:87:f0:c6:f3:5e:80:cd:b5:a0:
                    19:b4:39:25:5f:42:01:72:a3:cf:3d:1a:cc:25:5b:
                    f0:b3:02:1a:bf:9f:e7:a9:8a:f4:36:71:79:b2:22:
                    f7:3a:e8:71:cc:6c:bc:30:2b:b9:48:c8:83:8d:0e:
                    a0:e2:98:60:6b:5b:d3:62:09:b7:9d:96:67:e9:a0:
                    1d:c3:bd:d9:f8:72:dc:7f:22:db:7d:6a:ef:8d:e0:
                    c1:04:63:23:7f:b4:a4:36:c6:48:af:ee:6f:e9:ff:
                    cf:23:ca:8b:0d:b6:bb:14:fc:fb:85:54:38:83:53:
                    b9:32:d4:7f:4e:5a:eb:70:f5:1b:d8:0b:7f:28:6d:
                    ad:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:EB:F5:E8:C4:25:8C:3C:C7:F1:FD:06:74:71:2D:CD:A8:95:60:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/0/1BEBF5E8C4258C3CC7F1FD0674712DCDA8956057.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.64.0/22
                IPv6:
                  2804:7dd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271586

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:12:27:cb:fe:5c:2e:83:22:44:38:29:10:5c:20:f5:fd:
         38:17:4f:33:20:7a:62:80:72:29:c2:f0:be:85:79:7d:40:f3:
         81:9c:bf:12:32:ea:f6:22:a1:b6:6e:58:35:c5:3e:e7:2a:4e:
         eb:70:78:91:9a:f2:c7:f5:00:b3:22:12:56:64:09:72:86:4a:
         0e:0d:2a:a7:ab:df:a0:ea:26:a6:36:8b:29:1b:82:5a:86:e9:
         24:90:f5:a6:aa:a1:13:fa:e6:51:11:84:be:98:ec:47:d0:d6:
         2b:16:91:65:f1:2f:30:34:e1:0a:a4:bd:d2:f6:2b:19:74:0a:
         e5:7f:33:48:ec:1a:40:e0:43:1b:9e:78:18:49:6f:ab:48:ed:
         0d:8c:b1:5d:53:28:0c:2d:6c:14:5d:bb:d4:20:f4:b8:07:81:
         92:8a:70:b8:29:3c:94:50:7a:e4:f5:fb:60:b0:f2:1e:13:f7:
         40:f7:12:24:d4:99:38:2f:36:20:f2:20:36:74:d5:4c:91:f4:
         56:5d:74:e7:66:74:d4:50:40:b5:c1:05:a3:87:92:a2:59:7d:
         40:7e:d4:ca:54:d0:b4:b3:39:23:a1:10:4a:f9:e2:1c:a9:49:
         13:00:51:ff:73:23:31:02:a0:1e:8e:5b:c9:d1:9d:55:84:13:
         2e:bb:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org