Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer
File:                     B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer (raw, json)
Hash identifier:          12gtytdqZwa4MJdRu6O8uJ4M2TLVDr8+aENdN5JV/6M=
Subject key identifier:   B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       765059A74D8105C336115B0EFAE3DE45A95FBC53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 14:13:36 +0000
Certificate not after:    Thu 27 Jun 2024 14:18:36 +0000
Subordinate resources:    AS: 264036
                          IP: 143.137.120.0/22
                          IP: 2804:29d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:50:59:a7:4d:81:05:c3:36:11:5b:0e:fa:e3:de:45:a9:5f:bc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 14:13:36 2023 GMT
            Not After : Jun 27 14:18:36 2024 GMT
        Subject: CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:bb:c7:cd:3e:a3:71:e8:4e:74:9f:ab:17:
                    da:6b:40:23:fa:71:2b:b4:e8:eb:72:ee:98:5a:cf:
                    04:06:0d:00:73:1a:c4:e8:5d:89:f3:e5:58:f3:90:
                    c4:f2:e3:84:81:57:43:60:c8:60:bd:55:8e:f7:f3:
                    79:69:f5:6b:48:e0:c5:a3:56:3b:63:fe:0a:33:95:
                    38:5d:a6:2b:19:dd:37:d6:c0:11:ca:26:14:35:da:
                    b6:7a:4b:0f:c0:d8:7e:7b:73:e5:05:91:79:38:99:
                    a5:e0:9e:52:c2:60:52:76:b0:75:77:60:c0:0d:e7:
                    f3:0d:91:08:24:52:45:a8:1a:6d:57:49:fe:6a:85:
                    e4:67:92:de:40:2e:03:9b:c8:8d:6a:82:7c:a8:fd:
                    1f:91:87:a2:5c:17:77:e3:e6:f7:84:f6:59:b4:1c:
                    5d:23:de:4d:9e:01:bc:23:b1:f9:1c:00:45:a0:e8:
                    03:c2:0c:9b:83:e2:ec:9e:c6:eb:c6:19:c5:17:c9:
                    63:6d:bf:03:1a:f9:2e:a7:5c:0e:6c:93:5b:95:e6:
                    ed:10:65:b7:8c:47:02:38:9d:d1:2f:eb:ca:a7:46:
                    d1:1a:71:10:02:49:f6:38:eb:6e:fd:4e:9d:14:02:
                    42:d5:d7:42:3d:e3:fc:ce:71:82:c2:0c:8c:9a:d9:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.120.0/22
                IPv6:
                  2804:29d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264036

    Signature Algorithm: sha256WithRSAEncryption
         26:41:3d:69:70:a9:e3:70:f2:4c:e4:4d:89:5e:42:8b:51:e9:
         d0:f8:b7:e5:31:ff:5d:43:5e:42:93:44:f9:b3:92:67:c1:c4:
         ce:c7:db:ac:c2:be:70:14:ba:f1:94:88:5a:79:0e:e8:41:7a:
         b4:a2:36:14:c5:78:af:c9:de:21:80:90:66:78:52:4d:f3:8f:
         3b:84:32:43:4a:fd:cc:de:19:38:5f:09:c2:4e:ac:a2:ae:91:
         3d:62:0d:bb:66:87:48:45:bc:38:b5:1e:21:fe:11:f3:fc:cd:
         b9:cf:3b:90:1f:5e:1a:63:ca:d3:1a:49:3f:f3:8f:e6:0b:5b:
         3f:34:c3:d4:75:d3:40:fb:d1:f2:e6:54:01:46:57:f3:d5:55:
         82:c9:52:72:c8:fd:1d:af:65:e7:44:da:57:fb:bd:15:1b:c9:
         88:24:55:a5:ee:0c:38:41:f7:54:9e:21:28:20:3d:9b:d8:9e:
         0a:39:1a:73:4e:17:44:70:73:92:6d:a3:8a:31:f1:3f:0e:bf:
         9d:92:4c:3d:0d:e2:27:c4:34:c4:42:21:38:af:8a:e8:45:d2:
         c8:44:7b:dc:ba:38:ef:00:48:3f:16:08:3e:a1:50:80:1b:7a:
         ee:0e:b1:18:09:45:0f:d1:99:43:7d:93:af:d7:d1:fd:66:8e:
         a1:64:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org