Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4F8B40A7D93D2E3EC44FC401D6023071EEA6303.cer
File:                     B4F8B40A7D93D2E3EC44FC401D6023071EEA6303.cer (raw, json)
Hash identifier:          C3wyNFafP6s5nYBsweVVgdxQ0pLdyNYwbbY0T4UMRu4=
Subject key identifier:   B4:F8:B4:0A:7D:93:D2:E3:EC:44:FC:40:1D:60:23:07:1E:EA:63:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0241D6CC904CBBC16324438CA4955FD1362DAACF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/0/B4F8B40A7D93D2E3EC44FC401D6023071EEA6303.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 17:26:13 +0000
Certificate not after:    Tue 22 Oct 2024 17:31:13 +0000
Subordinate resources:    AS: 52783
                          IP: 131.255.116.0/22
                          IP: 138.122.132.0/22
                          IP: 170.78.116.0/22
                          IP: 177.74.184.0/21
                          IP: 177.200.64.0/20
                          IP: 2804:10f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:41:d6:cc:90:4c:bb:c1:63:24:43:8c:a4:95:5f:d1:36:2d:aa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 17:26:13 2023 GMT
            Not After : Oct 22 17:31:13 2024 GMT
        Subject: CN=B4F8B40A7D93D2E3EC44FC401D6023071EEA6303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:70:5d:c0:3b:04:7b:55:8d:52:c9:ff:12:6d:
                    57:c7:a8:0e:fa:60:67:ff:93:fb:1d:0c:7f:11:81:
                    88:f7:98:81:b1:fa:59:39:fc:41:7d:0b:73:55:66:
                    07:ea:ce:be:f1:de:ab:0f:2e:ad:9f:b6:19:5b:a5:
                    4e:d5:4b:4c:77:e3:29:b0:cb:5c:b9:80:5a:40:a8:
                    e1:37:ea:31:53:06:47:97:ef:eb:45:75:9c:8e:61:
                    c0:cd:40:75:a3:86:da:35:69:6f:7d:13:64:bd:16:
                    1b:35:81:d5:54:8f:a0:f2:61:a3:bc:9f:74:b6:62:
                    75:5c:5a:a8:cc:fb:c2:c9:86:87:19:99:28:ad:fb:
                    b6:89:7a:ae:fb:86:15:56:d4:0c:d4:95:6d:c4:e5:
                    ce:80:67:02:53:bb:6d:d0:b5:91:6c:f7:ca:9c:46:
                    43:8f:5c:87:37:6a:c4:e5:db:12:43:0f:5f:e2:e0:
                    fd:58:54:d2:1c:1d:f7:4f:75:c5:73:40:85:4b:ea:
                    f5:bd:e4:95:06:eb:52:74:a4:82:a4:57:d0:b2:99:
                    62:4a:66:c2:dc:f0:44:23:26:52:f7:ca:19:7a:5c:
                    bf:2c:32:7e:ac:2c:9d:be:0c:05:98:c9:fe:55:f7:
                    22:18:9e:f2:f5:87:c9:a4:70:e6:e8:58:48:06:89:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:F8:B4:0A:7D:93:D2:E3:EC:44:FC:40:1D:60:23:07:1E:EA:63:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/0/B4F8B40A7D93D2E3EC44FC401D6023071EEA6303.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.116.0/22
                  138.122.132.0/22
                  170.78.116.0/22
                  177.74.184.0/21
                  177.200.64.0/20
                IPv6:
                  2804:10f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52783

    Signature Algorithm: sha256WithRSAEncryption
         97:72:16:0e:d3:c4:8b:8c:2b:a3:44:24:3d:c5:f5:43:bf:1f:
         a7:da:14:ce:97:64:01:f1:63:07:31:87:09:c0:0a:5d:36:bd:
         7e:2f:b1:e6:87:2f:88:00:8e:32:c2:f6:3a:6d:24:9d:7d:21:
         e8:83:52:61:6d:49:14:a7:e6:6b:1b:2b:2a:70:3f:07:51:3f:
         78:42:db:4a:37:c2:d8:6e:6f:ac:df:06:ab:fd:62:b9:44:3c:
         b1:ba:0c:f3:00:33:e7:63:c6:36:ec:7e:30:99:db:0d:e4:fb:
         76:3f:b9:03:28:14:f0:0a:db:95:76:28:b9:9e:d1:43:69:0e:
         e2:22:9c:e2:cb:46:43:96:ea:0e:ff:d4:a4:98:fc:1f:9b:61:
         e8:f7:68:f9:7e:40:3f:40:ec:4d:e9:fc:8c:a5:93:42:f7:84:
         cd:85:16:9a:4a:02:e7:0b:b5:11:32:ef:ad:36:a6:39:af:7e:
         b7:af:c1:54:3d:09:87:a8:20:45:18:81:98:ed:6d:ef:b3:e1:
         06:44:e3:d3:55:76:b8:3e:db:1b:a7:9b:40:96:1a:d4:1d:94:
         72:f2:5b:0e:6c:61:b3:51:45:28:8b:83:35:c2:83:8e:0e:0d:
         cd:7e:3f:7e:1a:a6:bd:73:0b:21:01:59:f3:14:e4:55:38:73:
         e1:10:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org