Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.cer
File:                     B01DA4E6B1788F2115423DAD9B220AC26F1AA123.cer (raw, json)
Hash identifier:          GITKzK0tdS9Ov2YB7ABLWlBWg8s8LcUoSvotfihDcF0=
Subject key identifier:   B0:1D:A4:E6:B1:78:8F:21:15:42:3D:AD:9B:22:0A:C2:6F:1A:A1:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C9654DEC9C139BEC9F48564F06191A989BEE3EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 04:55:54 +0000
Certificate not after:    Wed 09 Apr 2025 05:00:54 +0000
Subordinate resources:    AS: 262288
                          IP: 177.154.160.0/20
                          IP: 191.6.32.0/20
                          IP: 2804:13b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:96:54:de:c9:c1:39:be:c9:f4:85:64:f0:61:91:a9:89:be:e3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 04:55:54 2024 GMT
            Not After : Apr  9 05:00:54 2025 GMT
        Subject: CN=B01DA4E6B1788F2115423DAD9B220AC26F1AA123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:1e:13:43:e2:0e:5a:80:0f:e8:10:58:5b:
                    27:17:f7:17:d2:e4:4f:b1:94:25:00:08:b1:04:1b:
                    2b:2b:21:73:10:2f:be:14:9e:62:e6:9d:3d:ac:eb:
                    4e:08:73:ba:55:5d:ba:a9:f6:1b:ab:95:c4:53:29:
                    cc:34:36:25:c0:61:79:ee:ab:8e:e3:e6:73:09:5d:
                    67:36:65:10:cb:e7:a9:42:68:f5:51:b9:2c:14:c9:
                    fe:07:a6:cd:cb:d8:75:7b:87:a4:47:33:df:35:83:
                    15:0a:44:df:3d:d5:72:ca:3c:8d:a3:a9:c0:e5:dc:
                    8f:bf:2d:ec:4b:fa:06:29:e9:99:43:3a:9f:43:e9:
                    e9:ca:e3:b1:7e:6e:78:d2:36:69:63:d3:08:dc:0e:
                    8c:66:31:55:42:96:05:ff:90:d9:be:86:ed:9b:44:
                    21:a8:c0:ba:08:18:67:88:fd:b1:e6:2d:ff:4a:74:
                    d4:08:a2:eb:58:7f:40:24:c9:a1:5b:f2:8f:33:a4:
                    03:46:42:7c:86:bc:5f:73:08:9a:7c:80:71:6c:4f:
                    51:5a:0c:1b:09:29:e6:2f:c3:97:85:a2:8f:58:93:
                    63:50:f8:df:22:fd:46:a9:9d:70:6d:e8:86:70:bc:
                    53:60:56:fc:42:0c:c5:b1:7a:5d:f1:ac:e1:66:45:
                    79:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:1D:A4:E6:B1:78:8F:21:15:42:3D:AD:9B:22:0A:C2:6F:1A:A1:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.160.0/20
                  191.6.32.0/20
                IPv6:
                  2804:13b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262288

    Signature Algorithm: sha256WithRSAEncryption
         67:fc:8e:d2:26:6f:23:74:92:9f:1e:6e:64:23:2b:fe:a7:7a:
         91:a0:ee:b0:dc:42:4a:48:24:19:0f:94:09:b4:09:cc:ad:1f:
         61:da:2c:79:f4:4f:19:a4:e3:97:c3:d5:26:78:d2:ad:73:55:
         3c:95:46:1d:04:35:b2:31:ab:dd:0f:31:b2:a4:77:23:a0:4c:
         aa:c9:ef:19:33:97:0a:b0:c7:71:fc:3f:69:26:9d:fa:b3:0d:
         7b:94:1b:1c:a3:3b:da:8f:27:10:71:fc:a8:8b:e5:cf:97:5e:
         87:6f:57:38:07:82:34:6b:40:3d:90:7b:53:3b:67:93:ec:a0:
         72:5a:ff:1d:04:9c:9a:df:0e:7e:62:61:7b:17:af:35:5e:db:
         43:f6:8e:49:e5:8d:b1:c1:50:80:6f:2c:0c:8f:96:aa:b9:cf:
         cf:a6:bc:2a:6d:46:10:2f:e2:89:a4:6f:68:2e:cf:d2:74:88:
         93:59:6c:58:78:a4:a7:41:58:8b:94:a1:b3:5d:f6:3f:7c:bd:
         97:bb:e8:5a:11:e9:50:5a:b2:3b:9c:1b:98:b6:37:6a:b8:8f:
         df:f8:40:e7:72:10:6f:35:ed:62:ab:9d:67:60:c3:ca:70:96:
         10:18:63:e8:60:1f:6a:b7:98:6e:2b:01:17:85:85:64:a2:4f:
         4d:c4:bc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org