Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.cer
File:                     B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.cer (raw, json)
Hash identifier:          pJGPjjQFIv3Nqb08X/znOWnWGbspK1/BN9EuTNdjJ08=
Subject key identifier:   B0:1F:D3:D3:71:5C:D3:8F:11:77:ED:96:27:CE:61:9A:BD:9C:34:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53596F40D0D21B787E7EB792FFA42D7842F5C89E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 15:50:49 +0000
Certificate not after:    Thu 25 Jul 2024 15:55:49 +0000
Subordinate resources:    AS: 262532
                          IP: 128.201.120.0/22
                          IP: 177.55.240.0/20
                          IP: 186.249.176.0/20
                          IP: 2804:ec8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:59:6f:40:d0:d2:1b:78:7e:7e:b7:92:ff:a4:2d:78:42:f5:c8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 15:50:49 2023 GMT
            Not After : Jul 25 15:55:49 2024 GMT
        Subject: CN=B01FD3D3715CD38F1177ED9627CE619ABD9C34A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:30:6e:c7:16:d4:37:72:8f:db:e6:e6:d6:
                    ae:de:3c:28:cb:69:dc:31:12:83:37:e9:a3:5b:99:
                    10:aa:44:98:ac:93:25:b7:b8:86:9e:3d:98:27:fc:
                    12:cb:97:88:01:d9:98:3f:f3:3f:c1:ec:83:ef:20:
                    1b:7c:c2:7c:e4:59:1c:8f:2d:a4:23:2a:99:ae:d0:
                    32:bb:e8:64:55:fd:eb:f3:ab:c7:0e:50:c8:d7:80:
                    f5:31:9d:2c:34:b2:e8:1f:6d:ff:30:af:3a:0b:de:
                    33:73:5e:72:e6:ca:b1:e3:98:fb:85:4e:62:0d:5d:
                    18:d6:03:fb:5f:a8:4e:4b:a9:38:49:25:93:ca:d6:
                    66:89:e0:07:d3:a3:67:95:9e:dc:5b:fe:6f:7c:e8:
                    ff:14:57:07:38:42:bd:25:08:52:49:ad:64:3f:62:
                    59:78:22:20:e1:2c:d7:9a:7b:48:13:c9:e8:87:4d:
                    99:a4:c7:27:16:46:47:58:31:37:b1:97:d9:7f:92:
                    3e:ad:b5:b4:c8:77:db:d8:2a:3e:47:9b:2e:49:07:
                    85:b4:ff:52:a1:ba:e8:89:cc:b5:01:e6:3b:bf:be:
                    b2:15:7e:24:b7:67:db:25:00:5f:4d:46:34:a1:5a:
                    12:42:59:a2:f1:73:e7:17:42:c1:c5:f2:fb:dc:1d:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:1F:D3:D3:71:5C:D3:8F:11:77:ED:96:27:CE:61:9A:BD:9C:34:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/B01FD3D3715CD38F1177ED9627CE619ABD9C34A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.120.0/22
                  177.55.240.0/20
                  186.249.176.0/20
                IPv6:
                  2804:ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262532

    Signature Algorithm: sha256WithRSAEncryption
         56:3a:66:93:7b:de:0a:2d:78:62:98:76:3d:71:b9:41:4f:cc:
         9a:da:17:b9:43:15:74:bd:e3:10:44:3b:fe:be:f7:48:e2:b4:
         57:8e:6d:e6:a4:0a:61:37:43:1e:13:7e:30:5d:cf:b9:6c:af:
         02:06:c5:35:98:4b:2f:3b:0d:0a:7d:2d:ec:6e:d8:44:26:37:
         de:c7:46:1f:31:c6:07:66:78:10:c1:3a:5d:7f:df:bb:17:d5:
         32:a2:e4:86:cd:c0:5a:3b:a3:13:7f:6b:0a:3b:1b:48:fd:67:
         44:51:f1:69:20:26:f5:d2:83:55:77:f9:3a:cf:32:13:68:06:
         74:4b:25:d7:11:33:2b:d2:8f:86:c6:08:3e:da:82:38:97:0b:
         7a:f3:42:1c:0c:c0:da:db:3f:d3:b1:46:c1:98:91:48:c9:72:
         27:d8:a9:e9:d9:28:81:e8:70:01:62:52:c4:43:d7:44:49:06:
         5b:86:5d:0a:38:ff:76:db:ac:81:a5:c2:53:62:0b:d6:08:83:
         b9:4d:13:ef:5f:02:27:4c:a1:17:b5:71:88:48:47:cb:58:98:
         45:ed:6c:88:5e:4f:6d:b2:cb:c3:cd:c2:5e:e5:33:88:2a:d5:
         cb:14:45:dc:c4:70:87:77:b7:14:52:54:8e:11:91:ca:2a:a3:
         6c:a4:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org