Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer
File:                     B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer (raw, json)
Hash identifier:          +E8E+87qOITUYvkaQ5RSY0DSDncZwkv1tW4HJMgfexw=
Subject key identifier:   B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31907883BCBA57E70426F8BB13A794DE9B2D8B72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 23:05:11 +0000
Certificate not after:    Thu 27 Jun 2024 23:10:11 +0000
Subordinate resources:    AS: 264206
                          IP: 138.97.180.0/22
                          IP: 2804:242c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:90:78:83:bc:ba:57:e7:04:26:f8:bb:13:a7:94:de:9b:2d:8b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 23:05:11 2023 GMT
            Not After : Jun 27 23:10:11 2024 GMT
        Subject: CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:70:86:5b:a5:06:87:f3:7c:2d:33:a3:7d:
                    9a:1a:87:ae:0a:7f:26:c6:47:9b:d6:74:27:6c:00:
                    b4:37:33:3d:bc:76:db:8d:d2:f0:4c:b9:00:9c:f7:
                    61:9b:da:20:03:e4:5d:aa:a7:a3:4a:3c:b4:43:1c:
                    33:99:0f:da:0d:61:8f:45:69:46:10:1b:f6:14:b9:
                    d0:35:b1:e2:b4:5f:f0:47:f2:5a:d3:95:f7:b6:2f:
                    ec:2b:fd:4b:39:ee:8e:0c:09:8a:bb:a5:83:ef:ed:
                    20:f0:cd:20:4f:23:52:b2:48:23:dc:eb:ed:6b:f1:
                    a1:cd:8f:1b:bc:e5:2a:a3:60:97:15:b3:c9:01:2a:
                    05:51:8c:b3:93:3e:52:20:24:f2:07:76:f9:f0:ce:
                    40:c8:65:2f:dd:52:e7:3d:7a:8b:90:4e:5b:a8:bc:
                    5b:87:c9:48:3b:17:0c:8a:c8:fd:0d:bf:19:2c:af:
                    72:a1:c1:f5:98:be:4d:da:25:0c:fb:2a:1b:5c:68:
                    8c:a6:ad:b0:ba:ba:07:d6:5b:3a:57:db:46:59:e8:
                    bb:03:94:da:29:38:ec:1c:90:f2:12:94:0e:84:1c:
                    53:01:d3:0d:79:e7:e5:cc:fc:c2:7d:dd:79:51:61:
                    74:a1:a4:42:0c:f3:b5:9a:cd:1c:21:79:6f:64:05:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.180.0/22
                IPv6:
                  2804:242c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264206

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:dd:79:1d:a4:f1:fe:d9:86:d3:21:be:44:6a:fa:83:b0:
         81:ce:40:3d:7f:25:16:3d:f6:32:1e:ef:a4:d3:21:4e:d5:1a:
         bc:8b:74:c1:e8:82:21:c1:b3:f5:54:d1:2c:ea:ac:03:d5:0b:
         46:ad:ed:0f:86:30:1f:72:7b:d5:3d:fd:04:21:87:2e:8a:65:
         25:e0:7d:23:30:21:68:82:f7:e1:c3:9b:6a:16:05:7d:c6:bd:
         18:be:f1:88:ec:fd:b9:c1:1d:a9:b1:15:9a:0e:2e:e0:90:9c:
         2e:b6:37:69:7e:68:f3:b4:89:25:a7:05:2a:67:54:1e:26:34:
         17:84:07:b8:80:83:8a:c0:23:9a:fc:ae:0a:75:f1:a0:2d:7f:
         03:a5:04:fd:7f:7b:d3:8f:a8:43:26:f4:f6:a7:bb:26:99:d6:
         8b:54:44:17:0e:79:c5:1f:a2:82:c9:55:9f:a6:a1:20:73:73:
         88:92:cb:c8:2d:84:10:48:7f:7f:54:33:87:ff:6e:82:fd:24:
         49:54:e8:9c:11:4a:86:09:1d:71:91:3e:8b:50:1e:d7:5e:11:
         a0:ec:65:a1:6f:0e:f5:29:3b:6d:1f:9b:e7:5a:e2:f1:bc:7e:
         79:20:4a:fd:07:81:44:27:af:0c:a9:f8:5b:bf:a7:8f:cc:26:
         57:41:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org