Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B3B51A3925842C0C12F2E34AFA55693DCD3640C.cer
File:                     9B3B51A3925842C0C12F2E34AFA55693DCD3640C.cer (raw, json)
Hash identifier:          bUBdw2AbcVKgwGbbgOeJ19eXlZSDkxYSjdLRV7aa+xY=
Subject key identifier:   9B:3B:51:A3:92:58:42:C0:C1:2F:2E:34:AF:A5:56:93:DC:D3:64:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       553BC20B7996C69362DBDA98B676C3A2CD9F5A81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/9B3B51A3925842C0C12F2E34AFA55693DCD3640C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 20:50:03 +0000
Certificate not after:    Mon 17 Mar 2025 20:55:03 +0000
Subordinate resources:    AS: 262497
                          IP: 187.109.240.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3b:c2:0b:79:96:c6:93:62:db:da:98:b6:76:c3:a2:cd:9f:5a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 20:50:03 2024 GMT
            Not After : Mar 17 20:55:03 2025 GMT
        Subject: CN=9B3B51A3925842C0C12F2E34AFA55693DCD3640C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:f4:b1:5d:ed:cc:2a:39:46:74:45:bf:3b:
                    ec:5e:a0:be:02:81:eb:69:6a:91:dc:af:2b:77:b7:
                    fd:62:82:a8:4e:dd:42:11:22:2c:3b:28:a1:96:72:
                    41:ca:bb:26:57:7c:9d:f7:d3:ef:da:6f:3e:b6:e0:
                    ef:4b:0b:dc:e3:7a:40:7b:3f:15:97:47:8a:02:e8:
                    bc:0e:c9:a3:2f:21:66:19:86:4d:4c:47:11:76:44:
                    08:f7:b8:d8:b7:cc:e2:92:6e:75:aa:75:35:43:6b:
                    29:65:81:4a:81:20:8d:99:1b:63:8a:ed:a5:42:2a:
                    e4:63:77:5a:e2:23:41:c3:cb:bd:b2:99:57:86:75:
                    b5:47:ce:b7:66:96:f1:a2:31:e5:ef:4f:57:a6:3c:
                    b2:6b:85:56:4a:28:df:5f:e1:9d:aa:13:6b:84:b4:
                    fe:a7:2b:f1:fb:06:52:e9:6f:cd:0e:bf:7a:64:ef:
                    6f:5d:91:ec:8a:68:c5:e5:67:a3:72:a8:19:4a:e0:
                    91:67:23:ca:bb:db:3f:e8:48:25:37:82:a7:ff:e9:
                    c9:b8:ba:3f:a7:62:0d:eb:51:18:61:df:e6:d9:f3:
                    06:4c:3c:68:1d:2a:e6:3e:8d:69:2b:2a:31:7d:5e:
                    6c:ea:3d:c1:3e:67:e8:7d:a5:32:ec:3a:aa:41:11:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:3B:51:A3:92:58:42:C0:C1:2F:2E:34:AF:A5:56:93:DC:D3:64:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/9B3B51A3925842C0C12F2E34AFA55693DCD3640C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262497

    Signature Algorithm: sha256WithRSAEncryption
         b6:d4:16:12:29:f8:bc:9e:29:a0:45:a4:7d:18:06:85:53:96:
         d8:94:df:b5:b8:19:95:b3:4b:cd:a5:fe:f0:8c:c6:01:1f:dd:
         b0:e9:9f:9d:3f:5b:50:34:01:3c:b6:34:7e:78:6d:c0:c4:a3:
         44:75:b6:92:51:7e:e7:94:e3:98:7e:4c:9f:24:b0:c1:2f:fb:
         00:44:f7:23:02:89:ff:8a:bf:44:25:03:1e:3d:98:04:7b:45:
         7a:77:49:06:fe:68:4a:5b:68:cd:07:73:c0:53:ca:82:cc:33:
         8b:76:f4:f6:ca:60:1c:62:dd:c5:73:bb:de:5e:45:92:69:15:
         84:57:12:74:ed:07:9f:3d:5f:be:19:5c:56:e2:ed:1d:58:b9:
         87:9d:84:0d:66:55:ef:cd:55:c9:66:10:d0:d9:b8:5d:9a:8f:
         2b:93:80:3a:06:79:35:39:19:51:2b:2a:d5:45:c8:9b:ae:87:
         99:d3:41:1c:52:32:53:99:d1:d3:71:e5:e4:c9:50:d5:7f:72:
         ea:ed:45:65:4c:35:e9:15:10:8c:a4:0b:f8:08:b2:c7:e4:27:
         3c:72:60:49:cf:5e:ee:e5:6a:07:fb:82:84:f6:f8:c1:b2:76:
         2b:56:36:b3:e2:5f:04:1d:3e:35:3d:a6:04:10:ff:15:e5:b7:
         a8:8a:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org