Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B47CBB78318FA889BAD37D2552068C9D1D92AA8B.cer
File:                     B47CBB78318FA889BAD37D2552068C9D1D92AA8B.cer (raw, json)
Hash identifier:          zxH4OKxMjERchkWDQhmTECtpbxRIIihwWQ3XNWDecYI=
Subject key identifier:   B4:7C:BB:78:31:8F:A8:89:BA:D3:7D:25:52:06:8C:9D:1D:92:AA:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78F588E2E30A91DB1B0BD7A6BBF5C23D8D20F6D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/B47CBB78318FA889BAD37D2552068C9D1D92AA8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 16:43:47 +0000
Certificate not after:    Wed 26 Feb 2025 16:48:47 +0000
Subordinate resources:    AS: 269681
                          IP: 45.191.120.0/22
                          IP: 2804:6844::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f5:88:e2:e3:0a:91:db:1b:0b:d7:a6:bb:f5:c2:3d:8d:20:f6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 16:43:47 2024 GMT
            Not After : Feb 26 16:48:47 2025 GMT
        Subject: CN=B47CBB78318FA889BAD37D2552068C9D1D92AA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:44:aa:ff:64:95:50:ac:06:64:fd:36:35:
                    12:9d:8d:a4:c8:0f:a1:35:fe:a5:0a:70:8d:12:23:
                    64:97:1b:be:11:a2:97:9a:14:45:bc:58:f6:e3:d0:
                    95:b7:8f:41:3a:b7:22:3d:c9:fb:b2:23:24:08:56:
                    13:a0:1b:35:6a:e5:0e:81:41:21:ab:02:42:5e:eb:
                    cc:50:d1:a9:13:43:0a:e0:08:c3:3c:a4:0f:02:5e:
                    d4:8b:26:4b:12:e5:20:bb:b0:4a:f5:47:92:a0:20:
                    df:c5:46:ca:40:95:8c:98:d0:75:11:1e:83:ce:8c:
                    e0:c4:d1:78:c5:6b:f8:1a:46:55:61:f8:d5:00:6c:
                    1f:8c:3c:1e:18:d0:ae:22:fc:59:1c:ff:d3:a7:cb:
                    48:29:7b:35:9a:08:e0:6a:63:4a:14:8a:c3:4b:f1:
                    20:85:6d:ed:3f:c6:88:be:c7:80:2c:d4:23:b6:71:
                    ad:a6:2c:d4:c0:b1:62:e4:c8:a7:39:17:77:8b:80:
                    4f:6c:07:38:37:63:09:42:b3:63:ef:01:04:20:3c:
                    ec:0d:1b:92:7f:e8:9c:fc:61:51:be:ce:05:15:82:
                    1e:5d:0d:20:ae:ac:b2:9d:ac:4f:22:22:a2:47:20:
                    39:53:63:e7:36:de:f9:b9:1d:63:88:96:5f:4c:1d:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:7C:BB:78:31:8F:A8:89:BA:D3:7D:25:52:06:8C:9D:1D:92:AA:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/B47CBB78318FA889BAD37D2552068C9D1D92AA8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.120.0/22
                IPv6:
                  2804:6844::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269681

    Signature Algorithm: sha256WithRSAEncryption
         67:54:6a:d8:cb:c5:ca:88:78:e6:40:9e:a6:fa:4d:02:dc:82:
         76:19:73:dd:0f:ba:d7:7b:71:6a:e4:0a:10:50:8d:19:a3:28:
         1f:86:1e:a6:17:bc:3a:99:45:40:46:2f:9d:1c:e9:09:73:51:
         db:eb:32:3c:e9:1a:91:e7:34:10:84:44:e6:95:29:7d:2d:1e:
         f6:f6:96:04:80:dd:9e:97:78:82:94:d3:e9:7d:04:c9:f4:13:
         10:4f:55:14:b0:af:b1:10:a4:c3:1a:f5:1a:82:56:93:08:c6:
         54:d9:c8:0e:2a:41:c2:a7:0c:0e:4a:a6:82:83:36:44:d9:ba:
         a6:89:14:d2:83:3f:bb:a0:61:b4:3a:02:03:84:42:d5:38:19:
         f2:48:3a:59:e5:4f:fe:ba:fb:0e:6d:75:ac:dd:8d:01:e3:fc:
         42:e0:f7:61:50:8b:06:89:e7:c0:77:b2:0c:1e:3d:92:01:20:
         21:28:50:74:41:a4:fa:42:6f:c6:63:57:02:e8:29:5c:ea:ce:
         6e:66:9d:ce:ac:6c:d6:46:bd:32:77:a2:1e:9f:81:90:14:c4:
         4e:14:30:5a:d3:f0:6e:07:8c:04:39:0f:e1:ff:07:bd:91:27:
         0b:92:24:34:10:5d:84:54:ca:48:48:7f:b0:92:20:a0:64:7d:
         18:4a:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org