Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4073D20DE905063CA7B8AFAD8CBEEE03A648D04.cer
File:                     B4073D20DE905063CA7B8AFAD8CBEEE03A648D04.cer (raw, json)
Hash identifier:          xRqacq26lOMm8bd8shK1UGndS06fJLeD3GW3oweW3+8=
Subject key identifier:   B4:07:3D:20:DE:90:50:63:CA:7B:8A:FA:D8:CB:EE:E0:3A:64:8D:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F922874CFD80737DB78EAD7AD650C45DDA6736E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/B4073D20DE905063CA7B8AFAD8CBEEE03A648D04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Nov 2021 20:50:59 +0000
Certificate not after:    Mon 28 Nov 2022 20:55:59 +0000
Subordinate resources:    AS: 270653
                          IP: 190.11.212.0/22
                          IP: 2804:6f54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:92:28:74:cf:d8:07:37:db:78:ea:d7:ad:65:0c:45:dd:a6:73:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 20:50:59 2021 GMT
            Not After : Nov 28 20:55:59 2022 GMT
        Subject: CN=B4073D20DE905063CA7B8AFAD8CBEEE03A648D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:29:62:09:86:2d:4b:bd:fb:fa:f9:52:0c:
                    c9:ab:4c:ed:3d:93:3a:7e:6a:8d:ca:7a:4d:8f:d0:
                    69:6c:5a:be:f2:7e:c0:48:7e:36:b5:93:13:e6:55:
                    6a:fd:f9:99:c2:fb:cd:b4:0d:b1:b3:e1:4d:84:66:
                    38:5d:44:07:19:04:42:3c:ba:1a:34:7e:4e:03:49:
                    89:bc:4e:c2:9c:9d:c0:81:8b:1f:87:31:1b:e3:42:
                    c8:6e:4d:df:d3:94:ac:1e:49:d0:b4:a8:e6:bd:df:
                    ea:e8:31:c4:f8:28:f4:f3:34:7b:45:b0:57:79:a5:
                    e4:4a:43:0f:de:4b:72:0c:3b:ac:92:4d:ad:b4:44:
                    45:69:2f:bd:65:3b:5b:ba:2f:1d:1a:4e:94:56:c7:
                    92:58:ec:6c:0d:2b:62:47:b3:b5:43:7c:56:bb:1f:
                    f5:66:4a:fe:0d:c2:ab:b9:62:bb:d1:4a:c4:7e:c3:
                    eb:f8:d2:89:92:24:69:06:b1:61:30:38:bd:f4:b7:
                    25:b1:86:ff:30:ec:b2:04:fe:7c:95:04:75:43:28:
                    af:1c:6f:8b:78:63:a2:1b:3b:9e:04:70:91:b9:5f:
                    fb:1e:31:fe:44:a6:46:2c:91:bd:b9:38:1e:1b:5a:
                    99:ec:56:2b:bb:8f:89:54:3d:90:bb:2a:b8:ae:38:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:07:3D:20:DE:90:50:63:CA:7B:8A:FA:D8:CB:EE:E0:3A:64:8D:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/0/B4073D20DE905063CA7B8AFAD8CBEEE03A648D04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.212.0/22
                IPv6:
                  2804:6f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270653

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:d1:1a:d1:ce:41:3e:c8:e8:63:13:fc:ab:8c:c7:8c:2c:
         1d:f7:3a:bd:97:14:f3:5b:71:da:d7:c5:35:46:16:23:45:72:
         ea:5e:a6:bf:0c:7e:d4:f9:e5:e3:1f:7e:5a:cd:0d:e4:ec:29:
         1b:62:21:14:7d:ea:5b:12:24:39:a4:66:f4:1f:cf:0c:00:14:
         5e:bb:30:42:c0:7e:af:1b:8f:e6:e9:74:29:a8:2b:d8:4f:8a:
         fe:77:06:5f:ec:0a:83:0b:25:a9:8d:be:6e:37:d0:de:b8:fe:
         97:81:ce:b7:93:d4:67:97:fc:2c:bb:d9:e2:f7:29:ab:60:4e:
         75:e4:0b:16:0d:41:db:0c:3c:52:2f:f6:d6:77:e0:5f:19:04:
         7e:66:fb:7a:7c:52:de:6c:03:24:13:ec:a6:be:6a:06:3f:68:
         5f:af:a1:39:fa:39:d8:1e:27:a3:b0:0e:57:f1:24:07:e3:7f:
         f2:08:2c:e1:b0:c9:a6:d5:66:50:92:d5:5a:19:bc:63:1a:ad:
         f7:d4:55:16:c2:24:1c:41:19:07:bf:8c:b7:fc:c7:05:a7:f6:
         ea:71:b5:ac:b2:29:7e:7d:37:b1:d1:0e:19:13:0a:bb:6f:a9:
         1d:be:3a:9e:45:e4:8c:dc:14:dd:8e:c1:fa:ba:32:49:6c:86:
         6f:ed:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org