Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B15EE453E74A5CC377F3B73B9D014B5D53AF0FEB.cer
File:                     B15EE453E74A5CC377F3B73B9D014B5D53AF0FEB.cer (raw, json)
Hash identifier:          460JaHBeMDMpmvIOeCkWUGZdOv9JpfAEUv5gCZGwiPo=
Subject key identifier:   B1:5E:E4:53:E7:4A:5C:C3:77:F3:B7:3B:9D:01:4B:5D:53:AF:0F:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5945F4BC26C0635F5A5D74BA01A8E5E8D690EF6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/B15EE453E74A5CC377F3B73B9D014B5D53AF0FEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 May 2023 16:00:04 +0000
Certificate not after:    Sat 04 May 2024 16:05:04 +0000
Subordinate resources:    AS: 21574
                          IP: 168.227.200.0/22
                          IP: 186.249.224.0/20
                          IP: 187.1.176.0/20
                          IP: 200.169.0.0/20
                          IP: 2804:23ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:45:f4:bc:26:c0:63:5f:5a:5d:74:ba:01:a8:e5:e8:d6:90:ef:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  6 16:00:04 2023 GMT
            Not After : May  4 16:05:04 2024 GMT
        Subject: CN=B15EE453E74A5CC377F3B73B9D014B5D53AF0FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:82:a8:e8:6c:4e:4f:7f:ec:42:5f:c9:cc:
                    33:a8:3e:62:10:9f:54:96:2c:73:fc:1e:5c:a9:7c:
                    10:6c:52:0d:10:54:36:0a:55:31:b2:7b:dc:34:03:
                    89:da:71:1b:19:e1:6b:4c:f6:46:fc:d1:f3:8f:51:
                    31:aa:29:5f:17:45:9f:a3:a8:79:30:ee:b2:49:22:
                    5d:bb:1c:2c:48:d3:49:0a:6d:1a:05:ce:d1:d8:b6:
                    e0:8f:cb:8e:79:12:56:17:5e:ca:d0:ad:f4:b7:e4:
                    6d:3c:b6:48:be:3e:26:08:2f:14:9c:38:2f:58:dc:
                    47:8e:dc:56:09:bd:1e:c2:aa:4d:20:74:8b:f5:e7:
                    0b:55:24:56:c8:64:c4:9e:38:86:91:aa:dc:d7:f9:
                    a3:83:9b:8b:09:83:6c:9a:1a:25:a0:c4:19:ff:1d:
                    fd:4d:e7:79:71:ed:d1:e4:06:1f:2f:85:69:ed:e8:
                    c4:25:38:21:ce:47:9a:e5:62:a7:a9:b6:ae:13:3a:
                    79:86:14:80:33:85:9b:91:81:7a:fb:e1:95:8a:83:
                    8c:62:da:25:8d:cc:b6:da:4f:c3:25:a8:1e:27:8c:
                    fd:21:36:26:17:e4:6f:3d:6f:4c:c1:33:33:6c:55:
                    3e:56:ab:86:cb:ff:25:0e:6d:3e:66:a7:45:58:22:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:5E:E4:53:E7:4A:5C:C3:77:F3:B7:3B:9D:01:4B:5D:53:AF:0F:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/B15EE453E74A5CC377F3B73B9D014B5D53AF0FEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.200.0/22
                  186.249.224.0/20
                  187.1.176.0/20
                  200.169.0.0/20
                IPv6:
                  2804:23ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21574

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:35:7e:73:16:2f:ef:b7:d7:a2:67:76:5a:36:97:c5:66:
         10:a9:87:9f:23:25:02:ae:4c:89:7a:bb:60:36:04:d5:34:e3:
         2c:9d:2b:52:29:ca:ce:30:5d:ea:5e:85:8c:ef:d4:20:99:0b:
         28:0a:d3:ea:32:71:e3:e0:9e:2a:b5:2e:3f:55:a6:e9:13:af:
         23:48:d2:a8:83:52:eb:a3:0f:c8:f1:e7:2f:e1:4a:77:58:33:
         01:ff:dd:e4:59:79:86:7b:3e:a6:dd:49:a6:e5:91:c2:c0:a8:
         52:e4:4a:a9:25:aa:71:3d:c3:88:cc:c6:6f:02:c2:64:8a:12:
         73:ea:e4:88:4a:58:cc:30:45:e8:24:7d:8b:55:c4:e1:12:05:
         9c:88:fc:00:f4:cc:f2:a1:76:7f:93:15:20:32:c8:2f:8e:61:
         bd:55:06:f8:31:54:bc:73:55:45:7a:eb:b6:8e:a6:ff:65:fa:
         66:a2:6c:24:b6:3c:5b:96:48:04:1a:3b:c8:dd:99:3e:7b:56:
         07:03:9d:d0:5c:aa:f3:89:fb:82:55:2e:2c:7f:1f:17:3b:5e:
         62:ac:6b:05:dc:fe:62:8f:c6:0b:ed:d6:61:fd:79:c1:81:fd:
         8b:a8:64:d5:01:97:5c:2a:22:86:f7:79:7c:17:a9:72:b5:73:
         f6:87:58:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org