Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.cer
File:                     B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.cer (raw, json)
Hash identifier:          DIXjqwMr5RSt2wALvvSSVsDd96wjEF2c1HFHY6ZduP8=
Subject key identifier:   B3:07:07:0B:02:20:12:B3:CA:67:F9:A9:BD:D6:7B:CF:7B:1E:15:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3DBACF9320C23385A3A431DAD32702E7AF528E92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 16:08:20 +0000
Certificate not after:    Tue 02 Apr 2024 16:13:20 +0000
Subordinate resources:    AS: 61796
                          IP: 201.159.180.0/22
                          IP: 2804:1978::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ba:cf:93:20:c2:33:85:a3:a4:31:da:d3:27:02:e7:af:52:8e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 16:08:20 2023 GMT
            Not After : Apr  2 16:13:20 2024 GMT
        Subject: CN=B307070B022012B3CA67F9A9BDD67BCF7B1E15C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:64:22:5d:44:06:4c:41:86:2d:65:3e:83:
                    46:1f:9e:4d:74:fc:6b:a2:34:6a:c6:a4:fb:4a:fe:
                    5c:61:4d:eb:e7:d3:37:7d:79:00:6e:99:25:65:69:
                    f3:96:e7:85:ce:d1:c0:6b:fd:be:a2:68:8e:2a:51:
                    e8:f4:5a:f2:76:48:20:d6:51:42:1b:ad:bd:8e:6d:
                    40:25:b6:51:8a:70:5d:d9:fe:ca:bb:a5:20:18:a8:
                    42:49:b6:97:a1:e9:6e:d7:c3:e6:2d:89:d2:57:c4:
                    d5:1a:81:fa:b0:49:c8:58:fa:35:79:22:37:21:85:
                    a8:bd:6d:f4:ba:0e:74:09:93:60:18:b4:6a:a7:31:
                    41:30:36:9a:71:2a:59:42:c2:79:95:6a:17:01:56:
                    39:e4:a7:4e:4b:da:2e:11:5a:41:1f:cc:08:38:cc:
                    f6:77:aa:14:d6:99:d0:0e:ff:44:34:96:44:66:c7:
                    33:a7:fd:16:af:ef:b0:ac:76:cf:37:a4:71:8c:97:
                    e5:f1:44:07:58:4f:df:7f:7b:43:74:ef:1d:03:44:
                    eb:9b:94:04:58:09:ea:12:d9:ba:6e:68:ff:3b:d9:
                    7c:ab:49:bf:66:82:c8:1d:2b:f5:21:7d:da:5c:bd:
                    12:9a:fe:13:6c:02:a5:13:ad:3e:53:3c:a5:b3:e7:
                    a5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:07:07:0B:02:20:12:B3:CA:67:F9:A9:BD:D6:7B:CF:7B:1E:15:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/22
                IPv6:
                  2804:1978::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61796

    Signature Algorithm: sha256WithRSAEncryption
         92:da:c5:62:c1:32:1f:33:40:d1:1a:c5:38:f6:fb:08:16:25:
         85:86:da:66:7b:cb:16:13:08:36:5d:35:1a:c6:cb:30:e2:3d:
         d5:04:dd:ad:e7:25:08:61:55:68:18:56:41:47:d8:bb:ff:43:
         ec:06:7e:05:6f:93:f5:9a:b7:7d:c9:69:66:98:f7:71:ea:28:
         1c:cd:ac:17:91:de:cf:f4:16:8a:12:33:c1:62:ea:3a:4a:0e:
         21:e9:68:52:10:81:e2:cd:bb:7e:47:cc:7f:6f:d6:f0:b5:d4:
         81:3f:8d:40:5a:9e:ec:c0:26:4b:54:ed:86:02:79:2f:b9:84:
         90:13:2e:3d:21:41:b0:6e:ca:2d:c1:06:a1:ae:88:3e:9e:50:
         ad:5e:a1:51:fc:22:42:7c:f7:9c:bf:1b:5a:06:2a:a3:63:57:
         02:2a:7f:b9:e5:b4:50:41:54:f8:a9:71:36:b8:13:27:66:00:
         e8:6e:ff:b4:f9:2b:57:ef:a7:55:7a:69:ba:d7:49:47:f5:35:
         8a:77:bc:b2:07:31:46:f6:d7:ad:05:d7:4c:86:48:b7:ba:c3:
         de:30:13:47:4d:5b:33:e0:e6:d4:fd:bc:b5:6c:fd:48:42:2a:
         2d:20:2c:36:89:ce:42:3f:3e:d5:74:5d:0a:03:f7:60:aa:37:
         2d:c8:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org