Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B2B84AA04ABE0128F76F8B26F115F58FB7B9BBDA.cer
File:                     B2B84AA04ABE0128F76F8B26F115F58FB7B9BBDA.cer (raw, json)
Hash identifier:          8U1LtZ/EOK6jbztExuQXyiF7rNxZapLJ6l4FbXwXlMY=
Subject key identifier:   B2:B8:4A:A0:4A:BE:01:28:F7:6F:8B:26:F1:15:F5:8F:B7:B9:BB:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       299E4836D95FB085BAD62EFF16836AB61574C777
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/B2B84AA04ABE0128F76F8B26F115F58FB7B9BBDA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 14:18:34 +0000
Certificate not after:    Thu 20 Feb 2025 14:23:34 +0000
Subordinate resources:    AS: 270804
                          IP: 200.219.60.0/22
                          IP: 2804:71ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9e:48:36:d9:5f:b0:85:ba:d6:2e:ff:16:83:6a:b6:15:74:c7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 14:18:34 2024 GMT
            Not After : Feb 20 14:23:34 2025 GMT
        Subject: CN=B2B84AA04ABE0128F76F8B26F115F58FB7B9BBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ec:96:31:1e:ab:89:3f:ab:1b:6a:36:36:4e:
                    38:d0:4d:5e:8d:3a:8d:c6:38:53:e8:52:a4:2a:32:
                    e6:28:2e:03:ad:2d:e0:21:4c:d0:75:5f:14:26:c4:
                    e1:52:4a:ff:2c:12:8b:d5:51:a2:e1:0c:dd:d2:20:
                    55:da:7a:da:2c:bf:77:3f:7b:d4:a4:b4:f7:ce:13:
                    0f:45:8f:5e:86:54:86:5f:42:b9:6c:09:ad:1c:57:
                    50:dc:d9:da:84:45:30:de:c6:f5:cd:d8:61:cd:8f:
                    c0:56:70:4d:0f:4e:a1:38:e9:a5:af:72:6d:89:1a:
                    e7:f9:e1:77:e9:da:76:a6:5e:8d:13:b0:6f:83:65:
                    80:e5:f8:06:2e:ee:1e:ce:a3:71:4f:bc:a9:e2:39:
                    d0:32:70:6c:c6:33:54:c8:14:72:10:3c:02:fb:57:
                    46:52:8e:71:3d:d2:eb:2b:5d:7d:59:3b:85:72:0e:
                    5b:6e:c0:e2:dd:40:8a:74:44:54:6f:be:9d:cd:b4:
                    68:01:45:ad:9e:cb:96:7e:3d:3b:10:8f:69:4a:3a:
                    14:0f:ad:e8:a7:cc:d1:73:50:26:bb:a2:90:8d:2f:
                    12:4a:9a:7f:3e:6e:ed:aa:fa:b0:fc:98:d3:e3:d4:
                    33:b7:a3:7f:33:f1:5c:0b:3c:3a:90:f0:b9:fd:82:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:B8:4A:A0:4A:BE:01:28:F7:6F:8B:26:F1:15:F5:8F:B7:B9:BB:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/B2B84AA04ABE0128F76F8B26F115F58FB7B9BBDA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/22
                IPv6:
                  2804:71ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270804

    Signature Algorithm: sha256WithRSAEncryption
         1b:b0:97:4c:b8:ee:3b:f0:6f:94:1e:a5:4f:d3:37:ad:73:10:
         84:16:11:4b:26:6f:b2:cd:6b:b8:6c:e2:20:56:df:15:ef:6e:
         6c:b5:00:af:26:95:1f:ee:a8:ae:78:b6:df:73:d5:cb:75:5e:
         96:67:6a:fe:74:59:87:be:e3:ee:68:b7:62:a0:88:f5:52:5e:
         e4:98:ae:9f:2a:5d:db:bd:b3:27:79:2b:6e:79:8f:86:bb:91:
         53:e8:24:79:75:cd:e3:61:be:7e:16:d1:80:38:8b:be:66:d2:
         19:c3:c4:0d:73:45:55:57:fd:eb:8c:c7:be:a9:5d:01:e6:26:
         7d:68:82:eb:83:73:8f:6f:c8:f9:3f:03:ef:2a:f7:8c:7c:ef:
         32:f2:97:d9:6c:e3:85:6b:35:c3:11:fb:68:29:67:95:ec:6e:
         d0:a6:cb:93:19:f0:ac:d8:3e:18:45:fe:0b:8d:4f:01:c6:fa:
         aa:b7:c3:99:94:01:6e:65:ac:85:71:62:5f:41:5d:9c:0f:7e:
         a3:80:fb:e5:bb:51:5f:51:82:fc:8c:1b:a6:3f:d8:6d:d0:1e:
         0a:ae:46:45:bd:7c:8b:97:1c:c1:10:cf:8f:56:e0:65:3a:e6:
         1f:18:74:79:a8:f5:d3:b8:3c:7a:d0:97:0b:66:cc:60:82:ae:
         5c:1c:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org