Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B064906756E5BA94E27845B25754296D66D7BDD7.cer
File:                     B064906756E5BA94E27845B25754296D66D7BDD7.cer (raw, json)
Hash identifier:          RaHYM1L1DWbx2J77jzpRRGLdA8i7GKKQ8/wUiSn5HNk=
Subject key identifier:   B0:64:90:67:56:E5:BA:94:E2:78:45:B2:57:54:29:6D:66:D7:BD:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32729C3FF88562D151919ACABF3260A2DB2210BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/B064906756E5BA94E27845B25754296D66D7BDD7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Dec 2023 13:04:20 +0000
Certificate not after:    Sat 30 Nov 2024 13:09:20 +0000
Subordinate resources:    AS: 262498
                          IP: 187.109.208.0/20
                          IP: 2804:49a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:72:9c:3f:f8:85:62:d1:51:91:9a:ca:bf:32:60:a2:db:22:10:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  2 13:04:20 2023 GMT
            Not After : Nov 30 13:09:20 2024 GMT
        Subject: CN=B064906756E5BA94E27845B25754296D66D7BDD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:a9:5b:3b:76:db:68:10:a5:38:66:1d:7f:
                    29:b2:76:31:f2:a0:7a:d0:d5:1f:07:2a:a5:12:a8:
                    2c:c3:c8:cd:af:ff:db:9e:08:3a:96:38:e2:ce:2c:
                    ff:c1:8c:5d:03:af:40:af:03:47:fb:c7:1d:a6:1f:
                    27:eb:41:4c:96:c9:2d:fd:24:5b:55:69:67:80:38:
                    74:ad:4f:fe:53:35:54:53:48:5d:76:6b:67:41:3e:
                    f2:57:9a:28:45:76:3d:91:57:05:e1:91:95:07:6b:
                    4d:eb:5b:49:43:d8:3a:84:af:ca:09:e6:55:fa:22:
                    69:2b:87:0c:93:22:a8:f2:ca:73:c7:ad:99:81:6d:
                    00:c0:14:52:5a:70:07:6a:eb:76:6c:92:06:d0:72:
                    08:61:bc:3a:b7:3d:b3:a6:35:d5:e0:3b:2b:b0:db:
                    53:69:cc:dd:dc:28:87:ba:f0:01:e1:58:ea:ed:c4:
                    ab:16:00:25:01:44:64:15:1f:cf:ab:d9:c3:20:98:
                    99:9f:0d:77:44:3b:32:e0:13:58:98:ab:f4:56:ef:
                    70:f5:10:b2:89:45:58:33:6e:6a:1c:cd:9e:b2:ba:
                    f1:28:1a:e5:d3:16:64:40:70:e4:b8:d8:62:61:3a:
                    d3:7c:d4:3c:4e:f6:fc:4d:3d:b7:a7:48:b2:b0:34:
                    35:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:64:90:67:56:E5:BA:94:E2:78:45:B2:57:54:29:6D:66:D7:BD:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/B064906756E5BA94E27845B25754296D66D7BDD7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.208.0/20
                IPv6:
                  2804:49a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262498

    Signature Algorithm: sha256WithRSAEncryption
         7a:7e:fb:2f:55:98:7f:e2:71:b3:e4:62:f1:9d:4c:ca:be:09:
         d3:3b:0c:c0:54:b5:b7:ea:cd:04:46:7e:17:e4:4f:9e:20:95:
         3a:dc:60:a1:56:3a:83:6b:9c:a9:44:ef:64:7a:f2:a9:3d:46:
         b9:e0:81:26:20:1d:83:ac:8f:78:7b:fa:c9:59:0d:f9:b5:82:
         f9:5d:09:94:85:eb:72:16:c4:28:cd:12:81:fa:cd:6d:87:ab:
         9e:8b:73:45:a2:a8:69:31:f9:14:6e:e2:dc:09:eb:13:b6:12:
         ae:dc:56:08:62:64:7e:69:8b:27:75:15:ce:d4:cf:20:99:c3:
         4e:a3:9c:46:70:0d:2e:bd:6b:0b:22:c6:9f:1d:c3:87:7b:bf:
         78:0b:6f:ed:82:cf:43:eb:e1:68:d4:b3:29:27:b4:a9:c8:11:
         a9:d7:a4:4f:62:33:81:a0:e0:d9:f4:d4:c2:c7:9c:af:e2:23:
         61:cc:e6:44:2d:eb:f9:c3:f8:2c:96:ff:ee:e4:1c:aa:f9:c2:
         26:8c:8a:e1:15:5b:67:f7:2f:3c:bf:ca:71:26:5f:f2:0a:8b:
         09:9a:c1:b4:25:bf:06:61:00:92:bc:3c:35:a0:28:90:de:5f:
         84:60:56:d3:d0:7e:7f:a7:e4:d7:3e:3c:86:5b:39:27:2b:40:
         b4:6d:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org