Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B43E463417E743438818EAC8F1CF3AC0B3D2E4A1.cer
File:                     B43E463417E743438818EAC8F1CF3AC0B3D2E4A1.cer (raw, json)
Hash identifier:          93NIz2k8tUKtVU6Cexod396jIMQe5w3hiw2J93NQX6Q=
Subject key identifier:   B4:3E:46:34:17:E7:43:43:88:18:EA:C8:F1:CF:3A:C0:B3:D2:E4:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       153E267934DBC76B26CF1F7F5B29A4100E944F3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/0/B43E463417E743438818EAC8F1CF3AC0B3D2E4A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Nov 2022 11:25:58 +0000
Certificate not after:    Wed 08 Nov 2023 11:30:58 +0000
Subordinate resources:    AS: 263284
                          IP: 179.107.48.0/21
                          IP: 2804:165c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3e:26:79:34:db:c7:6b:26:cf:1f:7f:5b:29:a4:10:0e:94:4f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 11:25:58 2022 GMT
            Not After : Nov  8 11:30:58 2023 GMT
        Subject: CN=B43E463417E743438818EAC8F1CF3AC0B3D2E4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:94:09:7b:ac:83:84:66:1e:de:1d:04:21:
                    64:e2:9c:de:b0:f6:3a:86:32:d4:c5:61:66:76:be:
                    c5:41:35:c3:e1:d5:43:89:25:3e:25:7a:a0:18:42:
                    02:e2:7b:19:a2:15:7d:da:a2:c3:83:e1:ac:4f:77:
                    70:e1:23:a2:a9:3e:18:a7:c9:45:0b:d1:df:f5:5b:
                    b4:e3:48:46:a1:8e:46:86:d1:86:80:2a:41:f3:d7:
                    65:85:8e:71:c9:64:67:62:e4:cd:8d:90:5f:97:9c:
                    be:29:12:3d:07:fa:4a:16:6c:5f:2d:0c:c1:8f:cb:
                    3b:6e:c6:0b:aa:6b:73:0a:0f:36:b9:02:3b:32:aa:
                    aa:4a:17:5c:d5:be:31:69:b5:eb:0d:a2:82:a0:98:
                    f4:15:69:24:41:59:90:f9:c6:bf:ad:bb:74:1d:67:
                    e2:24:4f:f2:ba:70:ab:21:bb:19:a0:a7:3a:40:73:
                    47:3d:a5:df:18:da:63:8c:4f:43:41:2c:fe:b8:26:
                    8e:30:d2:e2:41:6f:9d:9c:87:0b:7a:41:ba:b9:38:
                    b2:bf:40:0d:fd:68:47:07:7b:18:f5:bf:32:ca:68:
                    ff:74:04:5e:7f:2a:c0:59:20:da:0c:bf:48:2a:b9:
                    a8:df:7f:e5:d7:d9:d5:2a:88:b0:24:c4:da:1f:40:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:3E:46:34:17:E7:43:43:88:18:EA:C8:F1:CF:3A:C0:B3:D2:E4:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FEHGio6WE6wMBsn2zf7D4L1wthyHWKH79BzTF33vrqQh/0/B43E463417E743438818EAC8F1CF3AC0B3D2E4A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.48.0/21
                IPv6:
                  2804:165c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263284

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:45:0e:39:84:f3:4a:81:d0:35:e0:85:69:fe:b6:8e:ef:
         4d:6b:01:45:de:2b:78:d6:e0:d9:5e:d6:5f:5c:8e:69:7d:e4:
         8b:48:e9:7a:fe:fd:83:b4:67:c5:fc:71:cc:d7:56:49:61:6c:
         75:77:9e:52:f1:ae:7f:87:b1:2a:87:90:66:95:30:fd:94:16:
         30:2c:dc:0c:f5:e7:7b:ae:c0:2e:80:cc:8d:57:3c:62:60:a5:
         53:df:de:9b:7d:ad:4c:69:66:b4:ee:81:f3:c8:3f:2b:4d:8c:
         4e:01:b3:3d:0d:6c:40:1d:e2:1b:a9:32:4e:43:60:30:f8:39:
         eb:bf:ed:3e:4e:73:82:e6:26:8d:2f:8f:3f:e9:0c:d9:cd:3a:
         05:99:0d:10:c6:b0:a6:46:d1:f1:9c:3b:dd:22:53:7d:4a:13:
         5e:5f:50:b7:a8:c3:e3:42:8d:4a:ea:ca:d7:a7:cf:7d:ca:ef:
         5e:5b:1a:41:85:6f:70:2d:02:b6:56:a8:ef:cb:9b:d4:82:e6:
         bb:10:38:49:5c:44:a3:7a:31:19:96:7f:66:31:2b:d8:6d:ba:
         37:79:2d:5c:51:7e:b6:fa:72:16:63:4d:84:31:4f:48:f8:5a:
         d4:69:2c:3a:2e:2d:fb:d7:11:df:af:29:f3:41:6b:9f:4d:b2:
         d7:51:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org