Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer
File:                     70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer (raw, json)
Hash identifier:          pggMY91+cUGmhZm8l5ObZ7Mqyt6/wwvbEzxHKGrnRl0=
Subject key identifier:   70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0DE4BCA98E71F6C3155C30D3E8AC1E319EC9A7AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/70B3CABC94E867F7B72A9C99774813CAC6A4784D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Dec 2022 02:25:14 +0000
Certificate not after:    Sat 09 Dec 2023 02:30:14 +0000
Subordinate resources:    AS: 262607
                          IP: 131.108.12.0/22
                          IP: 170.150.0.0/22
                          IP: 177.85.112.0/21
                          IP: 2804:6cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e4:bc:a9:8e:71:f6:c3:15:5c:30:d3:e8:ac:1e:31:9e:c9:a7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 10 02:25:14 2022 GMT
            Not After : Dec  9 02:30:14 2023 GMT
        Subject: CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:f7:05:37:a5:ab:e8:15:f4:29:30:36:3e:
                    c9:4d:fc:d6:c1:db:31:cb:da:ee:b9:eb:e2:25:45:
                    5c:2b:01:cf:dd:c0:cc:59:b8:27:50:85:dd:53:55:
                    4b:cb:ac:b9:a2:26:ee:04:35:3b:66:71:bf:39:be:
                    6c:e7:c8:67:fd:22:1d:b1:a5:78:c1:e3:8a:57:e9:
                    72:56:cd:f7:2a:fe:4b:7e:c3:b2:ca:fc:8e:c6:4d:
                    06:cc:4b:3d:5a:99:c9:db:fe:51:3b:7b:ca:f2:e8:
                    40:02:6f:69:d5:85:0d:44:4e:9e:ab:52:13:d9:5b:
                    10:68:00:59:99:63:07:af:a2:d4:4c:18:14:a8:4e:
                    79:3a:32:69:e9:44:ee:c9:5a:08:37:f7:16:e6:f2:
                    bc:8d:cb:9c:c0:f4:ef:56:c9:71:eb:4c:88:c6:cb:
                    68:c1:c4:17:da:3c:58:fd:75:8c:d1:a8:a5:0e:f8:
                    cf:cf:2d:54:7d:cb:bc:0a:04:39:1c:c4:09:68:2b:
                    33:13:d3:b3:16:62:f9:e0:04:b2:20:cd:55:fc:10:
                    18:15:13:b8:9b:3d:74:f6:ce:46:7b:ae:c8:78:41:
                    2b:4b:ba:bd:27:00:2d:1f:b3:6e:31:d0:13:87:52:
                    3e:e1:b3:87:c1:c7:47:28:ca:b9:ba:10:21:1c:50:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/70B3CABC94E867F7B72A9C99774813CAC6A4784D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.12.0/22
                  170.150.0.0/22
                  177.85.112.0/21
                IPv6:
                  2804:6cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262607

    Signature Algorithm: sha256WithRSAEncryption
         5b:64:53:a8:3a:b4:66:52:4b:59:11:d5:0b:63:16:18:97:93:
         19:29:69:57:f8:18:e9:75:70:ce:b1:d2:6a:6e:cf:9f:ed:42:
         c1:fc:0d:3c:f4:af:0f:7a:9d:ce:bf:70:40:85:a9:18:21:aa:
         1a:17:20:d1:4e:9b:90:4c:72:4d:b8:e6:00:c2:cc:4d:31:1c:
         44:fc:54:2b:05:e6:cf:66:76:3c:4b:2a:80:16:d8:fb:60:68:
         95:05:0d:15:da:af:d8:5a:04:80:5a:8d:47:de:dd:b0:bf:af:
         19:78:c2:2d:70:ef:9a:97:49:97:52:77:03:52:b4:cf:9c:63:
         d6:6f:ef:15:36:95:fa:2b:ac:d0:21:ac:57:74:b4:8d:95:59:
         1f:b7:a3:bf:55:06:b8:5e:9c:45:69:8f:ca:56:da:fa:41:d5:
         b9:b7:fd:ac:a7:7c:f7:71:ee:48:06:cc:19:2a:f3:85:a6:7b:
         6e:53:c0:46:b5:89:8d:01:ec:2b:12:af:7c:6f:60:cc:0b:28:
         c8:8b:5b:1f:38:ce:1f:ef:a2:b7:9a:fa:27:91:5f:f2:e4:95:
         84:58:61:b8:b6:49:ef:aa:ff:32:51:eb:8f:a3:d7:c9:d6:95:
         86:4b:32:6f:d6:c3:60:27:0f:f9:7f:4a:06:81:16:16:3e:31:
         cd:4e:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org