Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B2223A43B56CED025FA760E3DF204839DB8F6D2D.cer
File:                     B2223A43B56CED025FA760E3DF204839DB8F6D2D.cer (raw, json)
Hash identifier:          l17wET6H08+q3I1Ws5CjrhZBoiUbIVc8J2zR/cxfTc8=
Subject key identifier:   B2:22:3A:43:B5:6C:ED:02:5F:A7:60:E3:DF:20:48:39:DB:8F:6D:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57DB82D63B97748581E4C9AF595EC71119405ACB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8r16TstSeNp3phnENJV5BfK4jsrnUdnFbg597K9TqXw/0/B2223A43B56CED025FA760E3DF204839DB8F6D2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8r16TstSeNp3phnENJV5BfK4jsrnUdnFbg597K9TqXw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 10:12:23 +0000
Certificate not after:    Wed 01 May 2024 10:17:23 +0000
Subordinate resources:    AS: 272500
                          IP: 2804:8220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:db:82:d6:3b:97:74:85:81:e4:c9:af:59:5e:c7:11:19:40:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  3 10:12:23 2023 GMT
            Not After : May  1 10:17:23 2024 GMT
        Subject: CN=B2223A43B56CED025FA760E3DF204839DB8F6D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:a1:40:17:61:fa:c6:4c:b8:e2:9c:3c:df:
                    26:4f:44:2c:e7:41:5e:a6:61:02:78:ca:cf:7b:6e:
                    7f:1c:19:99:b5:4b:05:bf:70:5d:24:26:3a:10:07:
                    5b:9c:2e:35:8c:36:25:e5:ad:f0:16:17:a2:c0:7d:
                    95:5f:95:d8:b1:4c:f4:fe:04:1e:bc:65:0a:24:fd:
                    97:f0:9d:5d:c3:e0:1a:83:cf:7e:ad:dd:bb:b1:09:
                    70:96:2b:63:25:25:6e:41:63:6a:46:1b:3d:ea:cd:
                    09:fd:4d:b5:02:f5:c1:96:1b:bf:ef:82:86:ba:8a:
                    8a:a3:f7:28:81:ff:bc:49:8d:c4:ae:40:3f:89:5f:
                    be:b6:42:e9:31:9c:08:0d:54:68:2c:24:6d:95:a3:
                    51:3e:42:4d:9f:17:91:74:dc:b3:07:7e:20:f3:b9:
                    c6:4f:ee:3c:59:f3:d3:0e:89:d1:6b:04:33:a1:11:
                    40:45:f3:83:c8:ae:ff:be:ed:90:f2:59:0e:cc:40:
                    12:d2:a2:b2:74:b7:08:1b:a1:07:60:fb:93:0f:81:
                    c3:fe:0d:33:e6:30:28:bb:6e:f3:d1:01:c7:59:cf:
                    1c:bf:d4:f1:36:7c:1a:01:54:12:5a:6f:e2:97:31:
                    de:d5:83:86:35:05:7f:23:76:fc:3e:be:6c:aa:88:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:22:3A:43:B5:6C:ED:02:5F:A7:60:E3:DF:20:48:39:DB:8F:6D:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8r16TstSeNp3phnENJV5BfK4jsrnUdnFbg597K9TqXw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8r16TstSeNp3phnENJV5BfK4jsrnUdnFbg597K9TqXw/0/B2223A43B56CED025FA760E3DF204839DB8F6D2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272500

    Signature Algorithm: sha256WithRSAEncryption
         1a:79:7f:01:6d:fb:9f:d5:8e:c4:ec:29:53:1a:8d:e1:ef:8a:
         13:d2:88:bd:1d:ab:ef:8d:cb:7d:7d:7d:84:83:91:fa:d4:56:
         6f:b4:d0:72:24:f1:15:cc:e6:f9:0d:25:78:71:64:a7:e5:9d:
         77:b5:21:41:c2:95:d8:32:a7:1c:48:cd:0c:0d:bc:30:38:2e:
         4b:bc:06:2c:0c:2d:38:a6:f3:97:43:81:dd:2d:8b:fe:bf:83:
         7d:10:23:60:ed:57:51:dc:ca:aa:f6:ac:6c:3f:69:6b:ed:08:
         56:00:9e:04:eb:c8:60:bc:d1:90:02:0a:bd:62:a4:1d:ab:e7:
         6e:36:fd:29:49:a1:d3:a0:a2:d4:fe:7c:e8:83:86:33:ea:ac:
         60:e7:ec:bd:43:50:fa:b3:35:55:ae:24:02:14:81:73:b5:4f:
         14:07:8f:29:0c:db:b2:db:58:a7:07:23:98:48:01:bb:b4:ef:
         d1:ae:57:d2:5f:4a:6b:10:fb:da:6d:d2:60:93:55:5b:a1:16:
         1e:fd:54:f1:0b:16:d3:ae:e4:8a:83:e5:f4:8f:c4:9e:01:80:
         fa:0c:ff:49:39:c7:22:14:1a:1b:09:75:71:b0:5b:1b:0a:7e:
         6b:10:05:b4:7b:cc:91:bd:e7:bb:b4:1b:1f:3c:41:96:09:da:
         ed:b9:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:11 2024 by rpki-client on console-ams.rpki-client.org