Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.cer
File:                     1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.cer (raw, json)
Hash identifier:          1JgqISelJtbZQdJlDA5OeEQsNqCLXbzRstBkhB2AEsM=
Subject key identifier:   1B:EC:76:29:C7:FA:AF:B4:C8:F7:87:4D:1A:6B:BC:0A:28:2D:44:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20F9D241DBC0B71CC285F6A45DBF78816E59546D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 11:05:06 +0000
Certificate not after:    Tue 08 Oct 2024 11:10:06 +0000
Subordinate resources:    AS: 265905
                          IP: 45.161.196.0/22
                          IP: 131.196.100.0/22
                          IP: 2804:3fa8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f9:d2:41:db:c0:b7:1c:c2:85:f6:a4:5d:bf:78:81:6e:59:54:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 11:05:06 2023 GMT
            Not After : Oct  8 11:10:06 2024 GMT
        Subject: CN=1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:ec:c9:20:25:94:dd:90:f7:3c:5a:e4:61:
                    54:ee:a6:8f:82:77:3f:a5:3d:20:27:9d:61:9e:c3:
                    f0:81:46:82:78:e4:bd:dd:7c:12:ae:39:3e:4e:ef:
                    16:81:9f:4d:b8:dd:c6:41:0b:a1:db:85:58:4f:ca:
                    f2:eb:23:15:0b:94:57:79:04:b8:d9:ef:fb:70:2e:
                    26:90:ba:21:c9:d3:99:d5:24:5a:ba:66:74:3a:c9:
                    af:b7:11:04:3e:19:1c:93:95:99:79:0a:2b:6c:b5:
                    c7:4e:f6:47:46:ac:96:07:67:ae:16:88:c4:28:71:
                    3e:a6:57:d6:51:d8:6d:88:ad:68:0b:8b:c8:2d:10:
                    18:7b:88:a2:49:8e:58:25:24:f4:7e:46:49:6e:21:
                    f4:d3:f8:c4:a5:97:42:9c:40:de:6f:1f:fa:5d:cb:
                    9a:55:96:66:17:4c:d0:2a:f8:fc:88:89:d4:12:b8:
                    70:c7:1c:e7:9a:25:38:ee:dd:2d:b3:f1:0c:22:ed:
                    63:19:fc:20:a4:bb:f0:ba:dd:56:71:a6:69:af:b0:
                    85:29:32:c2:14:38:b8:b7:0d:a1:30:3e:99:45:5c:
                    be:15:13:cd:b0:95:33:48:d7:a1:0a:3c:92:11:0f:
                    aa:f0:46:16:5d:f8:5e:0e:7f:36:57:4a:5d:33:ec:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:EC:76:29:C7:FA:AF:B4:C8:F7:87:4D:1A:6B:BC:0A:28:2D:44:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/1BEC7629C7FAAFB4C8F7874D1A6BBC0A282D4437.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.196.0/22
                  131.196.100.0/22
                IPv6:
                  2804:3fa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265905

    Signature Algorithm: sha256WithRSAEncryption
         a2:76:dc:bf:27:2d:07:23:ce:7d:21:f8:0c:d9:99:f3:a7:3d:
         d2:66:a0:2b:d2:54:b7:a2:a3:e9:e9:08:ff:9d:f3:9e:53:ff:
         90:ab:1d:2c:01:ff:67:a6:23:ed:09:88:fc:20:8b:dd:37:98:
         a7:7d:b8:55:46:63:ed:c5:7f:58:25:27:1c:36:53:91:9e:6a:
         16:a7:87:bf:c7:97:f2:ca:2b:fb:c5:15:4c:95:87:b3:f8:a4:
         8b:13:72:6b:1d:37:da:90:6d:77:d3:91:13:14:6f:a0:82:c1:
         e7:2d:73:2b:2b:2e:67:85:62:62:f0:63:11:6a:4d:4d:cc:bf:
         49:ce:8a:93:44:a2:a1:86:51:b0:e8:6c:8f:17:c2:9f:58:48:
         b7:d8:9f:4c:44:b0:9a:2b:ee:1b:fc:88:1b:69:e2:2b:4a:62:
         a5:76:45:5e:14:96:74:65:14:08:13:51:e3:8a:46:3a:fb:68:
         45:cc:cc:74:1f:15:ad:15:1f:7d:f9:24:bc:d7:8f:38:30:dc:
         61:c3:9d:41:22:5c:d1:0d:c6:37:9a:03:d2:41:1e:8e:05:42:
         22:c4:3c:45:54:9d:89:93:40:6c:bc:e8:c8:7d:a2:b1:38:9f:
         14:7f:68:00:c2:71:6e:c7:a1:d2:b8:c0:58:4f:80:7f:bd:fc:
         43:ee:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org