Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B01D9F327708045CFA4633412D6E0759ED2B7C0C.cer
File:                     B01D9F327708045CFA4633412D6E0759ED2B7C0C.cer (raw, json)
Hash identifier:          hT+hZahwrx7lDaA7eltUAF2ipufd8+4rPG9RH+Hxmw4=
Subject key identifier:   B0:1D:9F:32:77:08:04:5C:FA:46:33:41:2D:6E:07:59:ED:2B:7C:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4604E68E9F97C8CEEFBDDDE323709DDFAD2BB50A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/B01D9F327708045CFA4633412D6E0759ED2B7C0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 13:39:41 +0000
Certificate not after:    Mon 06 May 2024 13:44:41 +0000
Subordinate resources:    AS: 263517
                          IP: 191.243.224.0/20
                          IP: 2804:1320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:04:e6:8e:9f:97:c8:ce:ef:bd:dd:e3:23:70:9d:df:ad:2b:b5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  8 13:39:41 2023 GMT
            Not After : May  6 13:44:41 2024 GMT
        Subject: CN=B01D9F327708045CFA4633412D6E0759ED2B7C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:c9:15:23:bc:ea:09:94:1c:73:99:de:8e:
                    8a:72:9e:3b:c2:c0:66:78:d1:2a:55:08:cd:2e:65:
                    d7:53:50:79:16:92:cc:cc:0c:5d:92:43:7d:8d:4b:
                    53:03:84:1b:c5:91:c3:1d:22:88:35:87:e5:07:1d:
                    d3:62:b6:60:31:4b:6d:cb:49:75:7a:94:0f:fc:ca:
                    ba:45:f1:9b:58:93:3e:65:a5:c4:7e:da:48:29:85:
                    32:ab:90:7a:16:27:22:b0:7e:47:96:fb:10:9e:ee:
                    06:be:cf:c8:13:9f:20:0b:cb:d4:af:a7:87:1a:6d:
                    89:2d:af:bb:bf:60:d4:4d:33:6e:9c:12:4d:19:6c:
                    b0:32:d7:36:d5:ac:d1:00:27:d4:53:dd:9e:98:7d:
                    f7:5d:45:57:1f:e6:f1:7f:8f:f6:0f:e4:60:e7:95:
                    bb:81:58:4c:6c:05:00:c0:4c:eb:c9:7d:1f:7f:84:
                    8d:f7:4f:3d:53:63:e4:ae:7d:db:82:bf:3a:46:3e:
                    40:4b:f1:59:9c:f1:ae:8f:3a:86:d3:47:85:36:03:
                    4f:33:3b:49:71:4e:54:3c:95:5d:ab:4f:2d:99:54:
                    4f:07:b2:7a:e3:6e:c9:98:4c:b3:a5:80:14:36:8b:
                    54:75:78:d4:32:62:1d:80:ea:68:4b:ca:4a:f3:b3:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:1D:9F:32:77:08:04:5C:FA:46:33:41:2D:6E:07:59:ED:2B:7C:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/B01D9F327708045CFA4633412D6E0759ED2B7C0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.224.0/20
                IPv6:
                  2804:1320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263517

    Signature Algorithm: sha256WithRSAEncryption
         a5:a6:b4:62:74:30:1b:da:c3:38:bd:35:5e:3c:b4:d1:0c:e5:
         90:19:79:05:83:3e:ee:7e:04:a2:9d:2c:02:a5:24:3f:7a:61:
         9f:5d:7b:43:40:62:ae:98:35:e0:19:1f:8c:61:eb:dd:da:b9:
         4b:8b:45:0c:84:ea:12:5e:1d:f9:13:83:e8:00:df:13:d9:d4:
         a5:e6:df:eb:19:6b:21:83:28:7d:3c:3f:0a:d6:a7:f9:65:19:
         9f:bb:c2:88:0f:43:3a:7a:ad:34:6e:5d:6e:cd:f8:5c:03:3c:
         df:b8:da:d5:b6:45:1b:60:4c:04:70:ec:40:b6:f1:92:be:a9:
         7e:e7:13:d4:0f:77:af:7d:0e:2e:cc:60:f5:12:09:b6:95:c4:
         ad:eb:95:50:6c:fd:5d:df:91:32:7d:9a:69:f2:d8:76:62:8e:
         83:c9:80:d4:32:ce:e2:58:c2:16:08:be:61:9d:e3:5c:75:b9:
         b6:b3:f7:58:7f:0f:52:52:5b:9e:01:3f:2a:77:e0:20:a6:87:
         05:bd:45:45:cd:ff:49:f4:ef:a9:fb:e8:3d:87:d6:65:cf:69:
         3e:30:85:64:12:0e:6e:9c:8e:06:e1:30:37:e7:d8:f4:9a:a8:
         53:47:ec:08:9a:8b:2d:bf:00:a9:3b:21:e3:b6:90:ea:2f:e0:
         05:00:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org