Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
File:                     B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer (raw, json)
Hash identifier:          AtbSZTd7vu50kHEiydPuB7/RRgnlZjsDdUosCeOtPyY=
Subject key identifier:   B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30F295429DB7D64D10DD8B3E288C03C9A1AE3BC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Oct 2023 12:41:51 +0000
Certificate not after:    Mon 28 Oct 2024 12:46:51 +0000
Subordinate resources:    AS: 270544
                          IP: 187.95.208.0/22
                          IP: 2804:6d9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f2:95:42:9d:b7:d6:4d:10:dd:8b:3e:28:8c:03:c9:a1:ae:3b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 30 12:41:51 2023 GMT
            Not After : Oct 28 12:46:51 2024 GMT
        Subject: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:54:ce:d6:8d:a3:7e:f1:55:b2:96:e1:b4:
                    36:99:fa:ec:0f:49:ac:05:dd:82:a2:c5:b9:af:97:
                    01:97:25:95:64:38:48:8d:8e:72:ff:8b:05:0c:bb:
                    06:4b:6d:bc:ad:f7:94:b7:74:f9:51:44:aa:48:5b:
                    9d:77:10:b0:90:99:fc:c5:01:bc:1a:2e:55:39:86:
                    44:10:6d:1d:6d:40:9c:81:0f:31:89:df:c9:7a:48:
                    00:0b:09:84:1f:56:48:33:30:37:2d:1b:00:75:81:
                    b0:67:d5:94:fe:98:f7:a9:e0:c6:40:b0:1d:60:9f:
                    a9:4b:44:2e:b9:d0:06:70:cd:0e:70:38:a4:1f:72:
                    17:62:8a:07:58:e7:14:5a:44:d2:05:af:46:56:86:
                    39:b6:9d:8c:6a:0e:0f:a2:72:82:bd:2c:73:f4:3c:
                    05:c1:c8:60:8f:1d:29:7a:af:80:f9:83:bc:1d:e6:
                    94:93:fb:69:60:f5:f3:6a:14:e2:b5:b7:8f:af:a9:
                    08:dd:a7:47:a2:e9:4c:a9:23:7e:50:f1:e1:fb:36:
                    ed:83:54:f7:45:9e:c7:b9:e8:88:03:8b:03:f2:bd:
                    53:e9:c3:2a:ad:f4:40:dd:9f:d9:e2:fd:98:f2:8a:
                    2b:a9:4b:49:5f:66:11:f4:8d:59:0e:29:81:91:08:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/22
                IPv6:
                  2804:6d9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270544

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:be:b7:ba:af:52:87:0f:a4:e7:f3:46:b5:f5:72:3b:0a:
         40:e0:31:a6:b4:25:98:87:f9:9f:48:d6:95:d5:74:40:3d:02:
         5d:f9:96:e4:e1:a1:86:3e:a3:9d:26:46:d0:2b:da:5b:6c:20:
         74:fc:a6:c0:d4:07:82:1c:79:92:95:a9:94:d3:5f:a4:6f:5c:
         2d:60:ac:d1:19:3a:eb:15:a8:a3:21:5c:fa:3a:b8:80:d7:da:
         65:b9:df:29:bb:48:ec:52:64:b2:f2:b9:d0:39:23:1e:54:01:
         22:52:59:e5:45:89:ac:55:0e:7b:b1:ee:36:30:cc:f2:b7:a5:
         50:8b:e2:af:12:a6:dd:a4:cc:33:3a:9f:d2:f2:24:88:c1:ed:
         7f:1f:f3:ce:8c:75:13:24:f8:48:40:46:44:22:79:c2:ae:df:
         0d:50:d4:ad:32:3a:58:38:ac:fb:10:4c:70:c0:bd:bf:53:f5:
         14:79:1e:98:80:cc:52:b7:c3:a4:62:b4:31:0a:36:6f:0b:6f:
         48:70:28:06:e6:f8:d1:52:5e:0d:6e:96:9c:4e:07:33:a6:f1:
         9f:ce:54:a3:80:1a:84:04:1a:d2:5c:7a:ae:53:11:ab:b8:22:
         f4:60:31:f8:1d:90:6a:c1:ad:e1:8d:fd:e3:1a:20:b5:0c:79:
         d6:23:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org