Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B2F3ADD1B841F372305C743E00E6754B095A2ED6.cer
File:                     B2F3ADD1B841F372305C743E00E6754B095A2ED6.cer (raw, json)
Hash identifier:          x/fO3S8QlmUQwAZD9tWzZQa1sknhxPqrVDi3UkbM26A=
Subject key identifier:   B2:F3:AD:D1:B8:41:F3:72:30:5C:74:3E:00:E6:75:4B:09:5A:2E:D6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       03BDBB8261DD58F1303443E9D205D7CC0D6B29A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/B2F3ADD1B841F372305C743E00E6754B095A2ED6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 15:06:40 +0000
Certificate not after:    Fri 14 Jun 2024 15:11:40 +0000
Subordinate resources:    AS: 264971
                          IP: 200.219.149.0/24
                          IP: 2801:80:1920::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bd:bb:82:61:dd:58:f1:30:34:43:e9:d2:05:d7:cc:0d:6b:29:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 16 15:06:40 2023 GMT
            Not After : Jun 14 15:11:40 2024 GMT
        Subject: CN=B2F3ADD1B841F372305C743E00E6754B095A2ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:e0:40:b3:b5:38:e9:49:65:28:40:69:39:
                    5b:4a:db:1f:02:37:03:8e:33:17:d7:cb:55:ea:c1:
                    9c:33:6f:3a:22:dd:b2:33:91:fa:25:a3:12:33:05:
                    ae:f8:13:f6:96:08:88:55:17:f4:91:01:ad:ff:e3:
                    18:d4:ac:32:ba:d0:bd:04:77:78:4c:77:d7:c8:78:
                    6f:92:9a:76:8c:0a:ff:4f:a8:21:70:3a:68:c2:8a:
                    07:9e:9a:dc:2a:80:7a:1c:d8:4b:03:be:a2:01:f6:
                    a6:53:74:78:a7:e2:85:7d:81:e5:43:83:1a:b1:34:
                    8a:30:08:1e:e6:98:a1:31:2f:8f:df:46:48:20:b6:
                    8b:21:bc:bd:a6:4a:8d:3c:79:f1:13:43:a6:23:73:
                    59:58:4c:af:49:85:e2:ac:b7:95:51:3b:9e:d7:0e:
                    f3:1c:0a:24:c1:c7:4a:ee:4e:b1:b9:79:db:ca:93:
                    97:a8:0d:6f:b3:44:d2:05:f3:1c:15:a0:3a:1a:39:
                    a2:8d:f2:36:c5:4f:96:e5:17:e1:6b:de:4b:00:9b:
                    99:6f:23:88:3c:e4:4c:cf:4e:ce:fb:9d:e5:6f:1e:
                    c5:dc:47:db:a8:24:e9:db:8d:91:37:d0:43:b4:c7:
                    db:3a:62:5e:e4:02:26:48:87:e4:85:9e:0d:9c:28:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:F3:AD:D1:B8:41:F3:72:30:5C:74:3E:00:E6:75:4B:09:5A:2E:D6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/B2F3ADD1B841F372305C743E00E6754B095A2ED6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.149.0/24
                IPv6:
                  2801:80:1920::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264971

    Signature Algorithm: sha256WithRSAEncryption
         a3:0d:2a:81:b8:c3:1e:98:a8:21:2c:df:a6:da:17:f3:e3:0b:
         a9:d5:08:1a:85:29:04:03:11:e4:a6:65:7a:60:4c:54:b0:48:
         b5:4f:83:2e:e5:0c:27:df:d6:4f:03:50:7e:f3:5b:43:ce:34:
         84:79:cf:25:d3:2c:b5:20:b2:80:59:82:98:ae:75:a1:28:23:
         e2:8a:b7:ea:73:4d:e2:75:4d:93:c9:05:12:50:08:52:6a:09:
         7f:9b:90:18:a3:d3:f5:21:ac:a4:39:d3:79:8b:3e:10:41:14:
         0c:60:08:e1:98:b7:0a:96:98:6b:7d:4d:50:b2:91:ad:aa:f3:
         a8:6b:ee:52:9f:77:90:5a:10:ad:56:88:e0:b0:6d:f7:b4:8f:
         0e:c6:6a:9b:ad:99:46:8e:32:51:aa:4c:78:df:e0:e6:bb:de:
         49:9d:e0:89:35:81:80:26:2d:e7:f1:33:2d:3d:5d:19:92:4a:
         3f:a1:1f:91:eb:f9:4f:fb:0c:4d:e8:9c:7a:8f:86:24:2d:e3:
         59:9e:8e:4a:cc:90:56:7c:fa:b2:25:83:17:35:b0:3e:4c:c9:
         4b:92:45:a3:b5:52:e0:29:e5:ab:de:52:2e:d1:bd:9d:f3:db:
         86:d0:b7:8c:21:f8:47:f6:04:84:a3:dc:2d:1f:95:3c:6c:ac:
         3c:10:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org