Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B164735CD96C23B8379FE493DCD71D38437E7A37.cer
File:                     B164735CD96C23B8379FE493DCD71D38437E7A37.cer (raw, json)
Hash identifier:          7nw5shA415+qVcaQ4G4GFkTvgcsDge6sksU0Tjm2GjI=
Subject key identifier:   B1:64:73:5C:D9:6C:23:B8:37:9F:E4:93:DC:D7:1D:38:43:7E:7A:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60E77148FFE353B948F93822D073AFBC944C2672
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/B164735CD96C23B8379FE493DCD71D38437E7A37.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 13:25:13 +0000
Certificate not after:    Thu 11 Apr 2024 13:30:13 +0000
Subordinate resources:    AS: 267278
                          IP: 45.232.224.0/22
                          IP: 2804:4b04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:71:48:ff:e3:53:b9:48:f9:38:22:d0:73:af:bc:94:4c:26:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 13 13:25:13 2023 GMT
            Not After : Apr 11 13:30:13 2024 GMT
        Subject: CN=B164735CD96C23B8379FE493DCD71D38437E7A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:a0:d2:82:80:a9:2a:1f:ae:61:a3:37:33:
                    ac:3d:c3:f1:13:66:9e:4a:3a:d3:e3:4a:e2:0b:c6:
                    38:44:b9:bd:ab:f0:21:e2:84:9e:66:4e:90:ec:f6:
                    90:28:77:bf:74:eb:4d:0d:b5:c6:cf:5a:1e:7e:b7:
                    96:5a:2f:0b:b7:6d:38:31:f6:3e:6e:ae:13:82:52:
                    16:35:d0:58:12:73:9e:f1:4a:7b:b0:9f:20:ea:50:
                    28:7b:95:b8:5d:70:d7:8d:00:b8:0f:b7:7c:fa:ae:
                    05:a8:68:c8:d5:39:63:11:6e:40:69:93:83:7b:e1:
                    04:17:ce:46:42:c6:8c:0e:ea:1c:a6:34:16:34:47:
                    9f:eb:9b:63:26:aa:8b:c4:a9:88:93:50:cd:33:cd:
                    fb:a4:b9:09:db:75:dd:48:e4:82:5b:33:52:e1:27:
                    5f:e6:e1:97:3d:7b:36:f4:ea:1e:1b:b0:7d:f5:db:
                    a0:5c:24:af:60:fd:f4:cc:90:03:25:39:23:0f:85:
                    5a:5f:76:6f:f7:16:81:e5:30:cf:48:5f:a7:3b:a0:
                    89:ed:a7:99:6e:52:f2:17:d5:ed:b7:74:b9:30:bc:
                    83:ec:88:b7:48:e2:50:59:50:84:51:08:83:47:c9:
                    dd:9b:db:f7:89:53:b3:e1:b5:59:3c:fb:94:a9:94:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:64:73:5C:D9:6C:23:B8:37:9F:E4:93:DC:D7:1D:38:43:7E:7A:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/0/B164735CD96C23B8379FE493DCD71D38437E7A37.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.224.0/22
                IPv6:
                  2804:4b04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267278

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:87:7e:ab:ce:27:86:fd:e6:5e:e2:6f:a6:fa:05:03:65:
         c5:1d:53:17:44:98:3a:14:8d:60:b9:66:b8:51:47:62:91:b1:
         9f:92:27:44:b6:2f:1e:d2:80:2b:ea:fa:30:af:e0:02:6e:a8:
         ac:f6:2a:dd:37:5e:92:3f:ba:b8:47:e3:b9:c0:33:0b:8d:81:
         7d:f2:c3:56:5f:a4:93:81:fd:04:42:9a:2d:46:2b:fa:a4:f4:
         9a:8d:f9:38:5d:f3:a4:68:6a:e4:8b:f5:16:a1:1a:0b:42:9b:
         63:b8:af:94:3f:2b:26:de:f6:73:48:17:82:b0:e6:85:0c:79:
         ae:c9:df:bd:7e:c7:f1:4a:7a:ba:70:ba:9b:cc:54:7e:12:cb:
         ff:2b:ec:b0:b7:b0:b7:23:3a:b1:76:47:ff:66:b2:50:88:c6:
         3e:5c:cc:d2:10:c8:59:3b:ad:d3:0b:b3:73:f3:73:31:cc:5c:
         12:ba:54:1f:9e:0d:76:21:e8:c8:25:2d:1f:e4:cf:36:ea:7a:
         2c:bb:c9:48:dc:68:ce:06:c0:ff:38:a4:8d:51:e8:75:ec:c7:
         c9:16:47:40:c1:e2:df:8c:1e:99:eb:5e:0c:cf:31:2f:ab:15:
         21:69:9a:73:63:6a:1b:63:0c:8b:0e:5d:1f:f1:0b:65:a7:8e:
         0a:a6:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org