Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer
File:                     B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer (raw, json)
Hash identifier:          u7oACe8VnQS2kQyzSeSljKK7JJiyuS2hdW0KYTF5b4s=
Subject key identifier:   B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60E64C30EF7F17C7760CABF59E2450CDEAA4DDDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 20:51:05 +0000
Certificate not after:    Mon 31 Mar 2025 20:56:05 +0000
Subordinate resources:    AS: 267448
                          IP: 192.141.60.0/22
                          IP: 2804:41a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e6:4c:30:ef:7f:17:c7:76:0c:ab:f5:9e:24:50:cd:ea:a4:dd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 20:51:05 2024 GMT
            Not After : Mar 31 20:56:05 2025 GMT
        Subject: CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:b1:66:ca:f8:a3:db:a6:97:6a:b1:d1:09:
                    95:60:3e:ec:1b:72:83:84:2b:b5:41:ca:75:e3:6b:
                    96:b6:c4:1b:bc:52:40:8d:53:50:7e:70:9c:fc:4e:
                    2c:81:d1:0f:88:0a:f4:9b:0f:5d:cc:8b:18:ce:f8:
                    d4:d0:3d:5d:df:0b:75:f3:bc:21:61:4a:d9:65:28:
                    21:c7:fd:7e:ac:c8:04:26:41:e5:8b:0c:53:36:c4:
                    54:a5:19:ba:a1:10:48:9f:99:48:1f:01:b1:2e:3c:
                    c6:90:12:a5:69:fa:04:ad:77:c9:2d:c6:63:3f:df:
                    00:b5:62:1d:8f:9c:30:a4:27:17:82:39:1a:0d:48:
                    2c:06:3c:4c:d3:60:17:32:68:27:75:45:32:82:4c:
                    fd:18:e5:00:f9:09:09:00:f4:15:43:00:b7:7e:84:
                    b7:73:7c:9a:b3:d2:f5:35:5e:99:6d:4f:89:00:cf:
                    a7:a5:92:f6:67:96:d6:e9:48:f9:f1:19:35:21:34:
                    3e:04:36:d7:e1:85:a1:83:a0:90:6b:ed:70:7b:b1:
                    3f:6f:aa:eb:ee:13:3c:ed:b7:a7:40:12:94:b8:7d:
                    d7:49:57:06:79:8f:d6:25:a0:89:88:d3:14:57:f7:
                    e3:0e:87:26:8b:6c:47:1d:c5:d3:24:de:48:19:c9:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.60.0/22
                IPv6:
                  2804:41a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267448

    Signature Algorithm: sha256WithRSAEncryption
         97:fa:36:f8:d6:f8:92:f4:ed:4f:3a:1a:bb:c3:20:dd:2d:21:
         74:72:f8:4c:2c:47:c4:44:93:e3:09:55:6e:64:0b:51:de:f5:
         75:01:c4:4f:8a:30:eb:a2:e7:69:23:d1:59:e8:2d:6a:0c:cf:
         f1:4e:21:2d:d5:db:7e:94:b3:03:f8:24:b2:50:b4:b4:18:d4:
         ff:e6:06:64:8c:fe:d0:b1:12:22:cb:5b:81:e8:80:77:ef:f1:
         b5:c2:a1:31:b9:46:73:00:d6:3a:2d:81:6f:8f:53:58:ba:8b:
         3a:ce:6c:10:05:35:e4:47:1b:6a:10:44:01:f8:f0:46:13:9d:
         e1:f8:b7:b2:07:4e:69:70:62:61:fb:e1:a2:2d:ab:4b:91:03:
         2a:c2:c1:78:bf:a0:5f:3d:30:a1:39:6b:1f:51:5c:b7:2b:f5:
         c8:af:5f:dd:b4:8e:2e:45:d2:70:74:64:e5:a6:44:d4:a8:88:
         a0:37:0d:f5:c2:11:ea:22:00:5d:6c:0d:76:a8:c2:cd:e9:9c:
         43:98:39:60:3c:26:df:7d:a5:d1:c3:dc:85:f2:1d:90:68:7c:
         9d:f4:a6:f5:a7:70:25:b8:7f:72:e9:41:f7:da:70:79:85:8e:
         cb:05:d1:a7:b3:7c:db:5e:04:4a:a9:fd:aa:55:f0:01:a3:99:
         2b:13:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org