Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B34357CAF03E25405019F9A2D7F971E77D361E7B.cer
File:                     B34357CAF03E25405019F9A2D7F971E77D361E7B.cer (raw, json)
Hash identifier:          vYEmLAHbRrzsOQDNCyijzBp5n8GW4PJaJ17LyuTjU3M=
Subject key identifier:   B3:43:57:CA:F0:3E:25:40:50:19:F9:A2:D7:F9:71:E7:7D:36:1E:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       249E53E90E4AEB48CF07A866FE0CB03E45A56061
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/B34357CAF03E25405019F9A2D7F971E77D361E7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 13:05:14 +0000
Certificate not after:    Thu 18 Apr 2024 13:10:14 +0000
Subordinate resources:    AS: 61666
                          IP: 131.108.76.0/22
                          IP: 138.94.180.0/22
                          IP: 138.219.84.0/22
                          IP: 170.81.224.0/22
                          IP: 2804:1ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9e:53:e9:0e:4a:eb:48:cf:07:a8:66:fe:0c:b0:3e:45:a5:60:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 13:05:14 2023 GMT
            Not After : Apr 18 13:10:14 2024 GMT
        Subject: CN=B34357CAF03E25405019F9A2D7F971E77D361E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:39:49:be:dd:18:7f:60:49:2a:c4:cd:40:
                    e2:51:28:58:39:d8:6f:fb:21:a9:72:5e:e2:1e:e7:
                    02:c8:6d:1f:1d:99:51:5f:68:76:17:d5:f4:aa:cd:
                    4e:fe:a5:9e:05:91:6a:7a:27:40:e4:34:3f:8a:47:
                    c7:55:10:85:b1:ce:92:3f:98:78:3f:ee:0d:ac:4f:
                    39:ce:1f:e6:e3:d1:ba:b2:1d:fb:f6:86:84:64:3a:
                    c3:26:d9:5c:66:52:d3:8a:78:35:91:85:54:dc:3b:
                    3b:aa:30:07:85:ca:bf:be:7a:2c:13:d3:ea:a6:54:
                    cc:2a:8e:b3:dc:ae:60:0d:c6:e0:27:b3:d3:94:e0:
                    83:6c:27:ca:17:7d:e3:94:bd:7b:91:5d:1e:64:47:
                    7e:87:16:fb:63:fd:e4:a6:02:43:5e:bb:20:e4:84:
                    73:c8:8b:be:73:8c:5b:5c:35:ba:2d:d6:15:d9:c3:
                    c1:11:58:e0:79:1f:e3:8d:b0:b1:6c:69:1f:cb:71:
                    f8:88:f2:94:4b:68:61:88:fa:bf:8b:44:04:6d:76:
                    eb:d3:31:d5:9d:83:2a:32:3e:d9:8f:7a:35:41:b5:
                    21:3c:e3:2f:cc:be:e5:86:e0:ba:4c:23:d7:4a:9e:
                    51:8a:90:39:e2:6a:13:8b:48:05:9d:b4:03:8a:ab:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:43:57:CA:F0:3E:25:40:50:19:F9:A2:D7:F9:71:E7:7D:36:1E:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/B34357CAF03E25405019F9A2D7F971E77D361E7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.76.0/22
                  138.94.180.0/22
                  138.219.84.0/22
                  170.81.224.0/22
                IPv6:
                  2804:1ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61666

    Signature Algorithm: sha256WithRSAEncryption
         90:2b:21:4d:cf:9b:87:fc:31:f4:2e:b3:79:b2:67:31:9d:bf:
         84:01:48:aa:7e:e2:54:de:1e:9b:96:00:8f:77:f3:10:14:32:
         9a:1e:0d:37:35:1a:03:75:55:41:4d:3a:af:57:ac:e7:dd:b1:
         8f:6e:a9:8c:30:3a:b6:eb:59:d7:94:3c:12:9a:53:9c:b7:d1:
         05:29:76:d5:4c:84:c6:c2:21:21:be:e8:2a:2f:fb:ea:ce:6e:
         c9:7c:82:61:de:9c:00:cc:30:c5:8f:30:1b:5a:5d:7a:33:44:
         4d:79:c2:ef:78:69:30:63:15:dd:ac:43:67:23:7b:f8:6c:f1:
         58:6f:b6:9e:59:44:95:ff:44:2d:a8:03:8b:f0:9a:71:8e:84:
         7d:ee:b9:b0:06:0d:9a:48:78:72:3c:d8:a1:98:a1:09:f0:9b:
         6f:89:5f:01:9e:a1:db:06:e6:7d:56:8a:24:61:28:29:10:63:
         4e:54:6f:2a:5b:3e:b5:5f:1e:10:15:52:b6:09:85:e0:df:1d:
         8f:d9:93:39:c8:7e:88:95:5e:7b:95:b2:0e:a6:1e:5d:48:11:
         8f:3e:1a:1d:11:3a:8f:59:d2:39:c9:3c:2a:a7:1c:cc:62:70:
         a9:24:ea:f3:1b:28:d9:c7:dc:43:d1:be:ec:63:a3:74:8a:02:
         ba:66:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org