Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
File:                     B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer (raw, json)
Hash identifier:          3htkE1TFsAny7ub0O9qLCONEqOAywnVs+X+SHi0kXRg=
Subject key identifier:   B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66DAED66472B6BCDD0E2538A15AC995654AE3391
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 18:49:45 +0000
Certificate not after:    Mon 02 Dec 2024 18:54:45 +0000
Subordinate resources:    AS: 263421
                          IP: 168.121.156.0/22
                          IP: 168.195.220.0/22
                          IP: 179.191.240.0/20
                          IP: 2804:1600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:da:ed:66:47:2b:6b:cd:d0:e2:53:8a:15:ac:99:56:54:ae:33:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 18:49:45 2023 GMT
            Not After : Dec  2 18:54:45 2024 GMT
        Subject: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:9d:78:87:48:e2:66:1b:a5:db:59:85:19:
                    93:e1:5f:a7:b2:28:ec:6b:9e:ce:6a:52:80:da:6a:
                    42:ff:51:27:59:fe:fb:d8:dd:fb:45:65:57:fd:39:
                    2c:02:ef:c3:92:25:d3:75:44:80:38:a1:ba:aa:81:
                    58:ce:cb:f4:28:5e:83:50:92:cb:f0:93:8a:0f:04:
                    0a:6c:73:15:b8:b6:c4:50:4c:e2:68:54:b6:84:05:
                    59:3d:7e:f5:62:f3:cd:2d:77:6c:ad:cf:75:43:17:
                    13:af:ce:76:31:c2:93:7f:2f:f7:fc:4c:d1:7d:52:
                    07:eb:05:d7:90:52:bb:af:de:6c:b3:64:8f:bc:d8:
                    f2:47:b2:8a:0f:05:03:f6:7e:5f:d5:ee:ff:44:3d:
                    d6:8a:d8:42:56:72:d1:28:93:f4:41:a6:3e:ed:e7:
                    fa:2b:e9:87:ab:8a:8b:cd:cb:6a:cc:19:cc:4e:4c:
                    4c:9d:f4:eb:82:e6:26:aa:4f:96:af:49:1a:c7:19:
                    2e:e6:b1:f3:45:ae:b7:66:70:bb:1b:df:60:f7:5d:
                    82:09:36:90:86:c2:24:ac:e6:b1:4d:b6:41:d2:40:
                    bc:ed:2a:99:d4:86:6b:6b:19:93:09:b0:97:b9:01:
                    43:01:3a:60:08:98:54:5d:93:f6:4e:62:ed:93:3b:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.156.0/22
                  168.195.220.0/22
                  179.191.240.0/20
                IPv6:
                  2804:1600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263421

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:e1:79:b6:22:63:62:0a:13:18:8e:ee:52:e1:96:40:15:
         7e:fc:1e:9e:48:f9:c7:65:eb:0b:29:b9:43:82:c4:94:3c:4c:
         27:37:2f:bd:ec:f1:88:93:d0:2a:79:12:81:b2:67:9c:82:be:
         d3:7b:66:cd:81:67:d5:f9:b4:59:d6:2f:23:aa:93:80:f3:10:
         1d:32:75:9c:2f:52:b7:e2:a5:56:d9:f9:d0:8e:df:1c:c3:79:
         62:c4:49:24:32:77:8e:48:13:a3:ea:e5:68:44:eb:22:6b:5e:
         32:f2:b3:6a:ad:45:02:c5:48:38:37:07:4b:49:85:fe:c5:6d:
         7e:28:55:05:0c:6a:17:96:37:c3:9d:f5:a1:60:b6:13:92:b7:
         3a:9f:30:7e:93:6a:61:50:bc:58:60:78:6f:3b:f8:cf:42:10:
         40:91:20:98:51:f1:c3:0e:28:2a:9b:0a:f6:e4:13:f7:9a:c5:
         89:e0:df:74:27:10:90:ae:84:60:9b:cd:11:39:ce:58:a4:68:
         73:7e:ba:ab:dd:4a:c2:c9:0d:83:68:96:fc:b2:f1:52:81:dd:
         47:d5:21:7e:81:8f:7a:1b:78:65:0e:43:e3:37:e7:37:c2:3e:
         65:75:71:d5:48:c0:49:be:2a:2f:cd:0d:b4:e5:72:0b:77:fb:
         c7:44:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org