Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer
File:                     B410EA8A900BE8EFBF0B269413585DCC9799F312.cer (raw, json)
Hash identifier:          0o3l2jS+oWYa3bF5VmuYfjsINeG1nnjrZ7mruczUd6k=
Subject key identifier:   B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       660AC06C1B3B2E85736D816608CC22C190A5C091
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 01:17:12 +0000
Certificate not after:    Thu 05 Dec 2024 01:22:12 +0000
Subordinate resources:    AS: 61568
                          IP: 177.12.224.0/20
                          IP: 190.15.96.0/19
                          IP: 2804:314::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0a:c0:6c:1b:3b:2e:85:73:6d:81:66:08:cc:22:c1:90:a5:c0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 01:17:12 2023 GMT
            Not After : Dec  5 01:22:12 2024 GMT
        Subject: CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:38:7c:43:27:94:fe:45:dd:20:4b:4a:25:
                    e0:f5:33:29:53:2e:87:39:aa:af:b2:85:45:88:14:
                    a0:d2:c3:59:b6:cb:0b:a6:e8:70:d8:17:d1:c8:e1:
                    bf:90:fc:28:ca:2f:df:15:e7:dc:e6:df:a3:07:81:
                    47:59:08:7c:5e:12:35:05:24:c6:36:80:0e:59:72:
                    d0:13:71:0c:44:c9:87:a0:03:88:36:ba:03:00:04:
                    e9:e0:a6:18:8f:6d:3a:a5:5d:47:f1:9b:22:c5:e0:
                    2e:93:46:2b:29:b0:ab:89:7a:1f:ff:c7:e4:4d:e7:
                    90:b3:c4:d6:2d:ff:67:63:d2:0b:99:88:3b:88:2c:
                    ed:aa:44:ab:fb:ac:40:54:89:eb:ca:b8:02:27:05:
                    ec:b4:a8:f7:20:a1:85:63:76:89:7d:23:5e:9c:b6:
                    ac:1e:9c:04:85:73:7b:b9:cb:cd:5c:b5:ea:21:14:
                    22:ae:ae:6a:76:55:13:ee:7b:cc:58:4e:f2:07:49:
                    f2:6d:e7:1e:0e:8f:08:47:31:4a:56:97:91:6f:3b:
                    74:99:40:13:4e:3b:25:e7:e2:4d:42:c7:3a:ea:0c:
                    dc:84:41:a5:be:a9:30:d9:41:2d:8f:85:ec:3a:f2:
                    53:a3:9c:dc:fb:5e:74:f4:84:78:bc:d9:46:c7:dd:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.224.0/20
                  190.15.96.0/19
                IPv6:
                  2804:314::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61568

    Signature Algorithm: sha256WithRSAEncryption
         30:3d:03:72:a3:a3:ae:a2:ba:7e:be:ca:9a:5b:0a:a1:93:88:
         54:5b:88:bc:00:44:f1:c3:23:ec:03:38:4b:53:63:59:11:3c:
         44:ac:0e:a1:5f:15:e3:28:50:66:3a:f4:df:81:e2:98:34:39:
         cd:74:af:a4:d5:14:ef:c8:96:a3:9e:29:ea:59:11:3e:5c:08:
         b1:a1:54:0a:27:d3:7b:52:8d:b7:38:b6:50:10:f4:9c:02:00:
         07:57:d6:36:9b:f3:25:31:11:d7:62:3c:76:5b:da:91:15:38:
         17:d5:95:81:a4:c2:2f:39:91:0c:ce:46:ff:b8:4f:23:4c:d4:
         45:a2:49:03:38:5f:50:55:da:e5:93:72:9a:2f:6c:ca:11:a4:
         94:b2:2b:f2:00:0b:5e:69:75:6b:3f:b3:9a:66:ea:d9:af:18:
         cf:38:b3:25:ec:c5:28:1a:19:43:75:3b:18:7e:3f:5d:64:2f:
         a9:bf:06:40:03:37:f2:bb:47:af:a3:28:1a:d9:4f:53:07:09:
         46:0d:2a:20:ab:97:c2:ea:d7:17:0b:0e:ea:7e:57:ab:88:25:
         f5:5b:82:ef:ea:48:10:ce:27:f1:7a:41:44:b3:03:5d:b7:e8:
         02:d8:a8:22:07:54:e9:e9:b2:c9:d8:40:bd:46:5b:bc:2e:cc:
         5c:08:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org