Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B1AC5634E7BDA84051622C640561EFEF38D90723.cer
File:                     B1AC5634E7BDA84051622C640561EFEF38D90723.cer (raw, json)
Hash identifier:          7doeX//ToRA358rYPN75cFfRAMbJJUkYTC5fXx+nHA8=
Subject key identifier:   B1:AC:56:34:E7:BD:A8:40:51:62:2C:64:05:61:EF:EF:38:D9:07:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66382A618377148BD63982556805C1655FDA7C23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/B1AC5634E7BDA84051622C640561EFEF38D90723.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 19:57:31 +0000
Certificate not after:    Thu 03 Oct 2024 20:02:31 +0000
Subordinate resources:    AS: 264092
                          IP: 143.208.148.0/22
                          IP: 2804:2ac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:38:2a:61:83:77:14:8b:d6:39:82:55:68:05:c1:65:5f:da:7c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 19:57:31 2023 GMT
            Not After : Oct  3 20:02:31 2024 GMT
        Subject: CN=B1AC5634E7BDA84051622C640561EFEF38D90723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:06:2c:96:55:e4:78:bb:1d:25:b4:01:fb:
                    4f:d2:f4:84:51:4c:68:ed:ca:46:55:c7:b0:dc:36:
                    f6:db:fa:db:2c:8b:77:82:d4:24:37:98:53:f4:f9:
                    7c:ff:2c:bd:12:80:e9:52:4a:64:20:ec:50:e0:4e:
                    09:9b:1f:d4:bc:5d:b5:32:2f:c5:fe:66:61:c4:ce:
                    59:a1:24:0b:b2:6b:b6:7a:9d:50:40:73:41:a9:4e:
                    02:e8:f2:c8:35:cd:cf:2d:6b:94:d0:d2:43:4a:e4:
                    dd:e9:b7:e7:8d:23:86:db:bc:27:76:ba:b4:e7:a2:
                    2d:46:f4:e4:63:32:6f:c3:91:9b:51:ee:cb:19:16:
                    ad:27:a4:c4:a8:02:98:9c:24:e3:de:5e:a4:72:45:
                    5b:79:ad:2e:1e:a9:33:8c:8e:a9:0c:af:0f:a6:01:
                    e1:7d:a2:95:57:dd:c4:77:59:f2:7c:fc:43:a3:64:
                    53:fa:60:04:b3:b5:a7:c8:58:12:f3:83:c0:2f:aa:
                    77:ff:8b:4b:a8:83:2f:04:f3:59:96:6b:df:2c:b3:
                    d3:c4:12:1a:df:4c:ce:53:f9:62:5d:ce:7d:77:be:
                    c2:a7:fc:4f:af:48:7e:d5:2a:62:3a:c3:f9:d6:5b:
                    ab:21:b9:ae:7c:e1:17:70:e7:ae:1a:de:4c:53:f8:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:AC:56:34:E7:BD:A8:40:51:62:2C:64:05:61:EF:EF:38:D9:07:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/B1AC5634E7BDA84051622C640561EFEF38D90723.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.148.0/22
                IPv6:
                  2804:2ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264092

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:24:56:e1:7a:10:19:51:be:f3:25:f5:c7:c2:5e:a6:5b:
         1f:25:55:ce:cb:14:13:14:31:60:8f:18:f6:3d:aa:aa:50:0f:
         d8:83:42:91:a3:e5:f4:9a:10:5e:5c:d8:23:37:29:48:72:25:
         c2:ec:9d:47:91:21:68:9b:59:08:50:40:1f:78:b1:31:c7:83:
         46:5a:05:32:52:8a:af:ff:2c:cd:d1:9a:a7:d3:51:2e:87:8c:
         2a:8e:03:f1:fa:33:0a:90:f9:39:13:b3:77:ad:87:14:36:fa:
         e1:25:d0:c1:ca:56:97:69:6a:3f:da:91:73:c7:13:64:a6:3a:
         52:a3:a8:61:96:6d:38:96:10:d2:ae:88:03:1c:09:3b:30:59:
         33:29:fd:dc:a1:d5:db:57:94:ef:52:b6:47:d0:7b:ef:5c:0e:
         6a:f4:bf:b1:32:ac:46:cb:90:f5:93:97:c3:19:af:14:dd:58:
         97:b3:2f:aa:0a:42:30:a3:70:01:06:94:a5:de:7d:c0:e7:04:
         a7:d0:9c:47:ad:ad:94:24:84:79:d4:f6:d7:87:c7:25:ce:29:
         f2:f8:4c:f5:59:04:d8:96:3c:26:82:a3:b5:09:01:22:f9:18:
         c8:8c:1f:18:75:6a:c6:a2:76:49:f2:26:0e:dd:6e:a0:4d:3e:
         0b:c2:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:11 2024 by rpki-client on console-ams.rpki-client.org