Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer
File:                     B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.cer (raw, json)
Hash identifier:          zEMcmnZuz3b1YD5xC6n0y2UMM4Xp2GBySN2TDV+CMww=
Subject key identifier:   B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FD399F5767097D3722B4A5A0E6374CFBD3D66AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jul 2023 18:53:58 +0000
Certificate not after:    Tue 02 Jul 2024 18:58:58 +0000
Subordinate resources:    AS: 263536
                          IP: 191.5.128.0/20
                          IP: 2804:1380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d3:99:f5:76:70:97:d3:72:2b:4a:5a:0e:63:74:cf:bd:3d:66:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  4 18:53:58 2023 GMT
            Not After : Jul  2 18:58:58 2024 GMT
        Subject: CN=B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:03:7e:66:d8:26:88:74:bc:3a:4d:c2:f7:
                    81:f4:88:c4:d5:d0:cb:da:b8:42:d7:5f:3a:75:a4:
                    1a:66:68:73:74:1e:b4:85:66:78:6a:5c:3e:36:6c:
                    de:b5:0b:98:07:e0:1a:7f:44:08:c9:f4:f4:82:65:
                    98:b0:bd:9c:84:7a:10:77:39:7c:40:93:f9:13:b0:
                    77:6d:27:58:5d:31:9e:ab:90:20:e0:f4:7f:44:a6:
                    e9:c5:17:e0:f0:2f:1e:c5:83:82:7a:aa:c4:6c:7f:
                    47:0a:18:5e:4d:49:66:75:80:39:3e:80:52:4d:ba:
                    76:64:d9:d5:6e:16:7e:8a:85:a1:9d:4a:bc:46:ea:
                    ad:f9:55:35:37:af:80:bc:1a:f1:f0:28:2f:6c:05:
                    20:19:5d:b2:5e:ed:08:37:b8:99:c6:0b:6a:c9:cb:
                    c8:97:df:a3:67:6b:38:f6:f6:1d:5b:02:fd:53:21:
                    8e:24:15:3e:0e:93:2a:91:fa:4d:73:26:58:5d:1a:
                    53:1e:22:c8:c8:8c:a6:51:f2:d4:bb:94:ea:1b:92:
                    fb:1a:23:25:31:21:a5:84:3b:23:f7:ee:1f:e4:50:
                    34:e8:de:b8:f1:71:6c:5f:42:41:89:b9:63:ff:4b:
                    bf:e5:03:14:80:3c:7f:63:9e:8b:b5:c5:94:32:02:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:C3:65:AF:79:AD:7B:D7:D9:4A:3A:36:D4:83:84:F8:DF:C6:DE:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/0/B1C365AF79AD7BD7D94A3A36D48384F8DFC6DE8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.128.0/20
                IPv6:
                  2804:1380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263536

    Signature Algorithm: sha256WithRSAEncryption
         3b:91:ee:aa:73:d7:76:c6:45:94:9a:6f:e5:f8:6e:8e:52:d1:
         7f:f0:ed:e5:8f:1d:61:10:80:7d:70:72:be:a7:e9:bd:20:d5:
         cb:28:62:ef:34:6d:2e:1d:f9:7e:cf:fc:3a:02:72:43:4a:65:
         60:d5:06:8d:f0:1f:ce:3f:9b:f9:3a:34:ff:43:ee:e4:0c:61:
         f0:6f:ad:f4:4e:7d:84:a3:e2:b5:4c:10:df:98:40:85:01:f6:
         16:5f:28:79:24:2e:66:31:72:9f:85:ca:96:f5:00:cc:db:94:
         61:35:b4:56:cb:27:23:8a:b6:e9:43:24:19:3d:6d:55:16:75:
         ef:4f:27:37:11:b5:0a:45:45:ab:86:e1:f3:01:da:24:bf:1c:
         8c:44:59:6d:4b:aa:b3:28:d9:94:24:45:54:f9:45:c3:9f:36:
         9b:c3:82:1b:c4:df:71:cd:8c:33:98:18:a7:b3:45:ae:7f:31:
         3c:d8:d4:c7:f5:b5:eb:4b:f0:eb:c6:93:ed:aa:51:16:8f:e6:
         1c:3a:dd:9b:1d:9f:5f:b1:86:45:e8:d2:a9:29:cd:5a:3c:cc:
         04:41:8c:7b:fa:90:6d:5c:2e:c7:94:f9:0c:3e:60:7a:61:01:
         33:98:c6:98:a6:e6:4b:b4:c9:0e:d4:01:85:b4:55:cd:c5:ce:
         30:23:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:11 2024 by rpki-client on console-ams.rpki-client.org