Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4F9F72B6A691F500679BD955446A3BC66BFD50D.cer
File:                     B4F9F72B6A691F500679BD955446A3BC66BFD50D.cer (raw, json)
Hash identifier:          PZyGcvz/VBTYNHj7ESW0o3jm8MJYJt+W9di/w2ZCeuc=
Subject key identifier:   B4:F9:F7:2B:6A:69:1F:50:06:79:BD:95:54:46:A3:BC:66:BF:D5:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11DEAC3352F55AC77BB84791D7FC889C60E07C7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/0/B4F9F72B6A691F500679BD955446A3BC66BFD50D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Aug 2021 21:15:50 +0000
Certificate not after:    Tue 02 Aug 2022 21:20:50 +0000
Subordinate resources:    AS: 52985
                          IP: 191.232.0.0/13
                          IP: 2801:80:1d0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:ac:33:52:f5:5a:c7:7b:b8:47:91:d7:fc:88:9c:60:e0:7c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 21:15:50 2021 GMT
            Not After : Aug  2 21:20:50 2022 GMT
        Subject: CN=B4F9F72B6A691F500679BD955446A3BC66BFD50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:7f:c2:c9:a4:ee:6c:13:95:4b:e2:c4:3d:
                    70:5d:ca:f4:15:59:e0:e5:4b:c4:14:23:6d:ca:df:
                    85:e9:c3:06:28:98:ed:24:b5:e3:fd:35:0a:fa:fb:
                    ec:5f:10:38:13:fc:9e:b0:58:1c:85:87:c6:90:fa:
                    9b:cd:d1:5d:8a:36:0d:00:95:06:71:14:11:65:a7:
                    26:3e:bf:a5:74:3e:2d:54:b9:63:ea:68:39:1e:c4:
                    39:f2:82:b8:f1:7e:f4:dc:c7:c4:45:b2:b0:d1:01:
                    9e:7c:53:72:4c:66:e7:1b:bb:fd:b4:ec:4d:ea:6c:
                    95:14:af:c8:5d:e0:84:91:18:21:d4:4e:08:ce:24:
                    82:c9:de:13:16:25:07:68:66:a4:b4:05:0d:22:f2:
                    8b:70:0b:2e:8a:5f:d0:22:e0:cf:44:d1:0e:ac:bb:
                    a3:e0:e2:79:e4:c7:96:da:11:a8:c4:ab:54:21:0e:
                    79:22:27:81:e8:5f:35:38:12:6a:2b:a3:86:1d:11:
                    32:bb:39:84:c9:97:66:6f:2d:b5:57:57:f3:6f:11:
                    1a:b9:ed:a7:54:69:ab:81:de:5f:c1:28:99:3f:6e:
                    dc:4d:d5:fc:b2:5e:79:04:67:35:f3:c0:a4:ae:8f:
                    74:2b:22:54:e2:a7:00:31:63:07:14:ea:fb:e1:80:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:F9:F7:2B:6A:69:1F:50:06:79:BD:95:54:46:A3:BC:66:BF:D5:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/0/B4F9F72B6A691F500679BD955446A3BC66BFD50D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.232.0.0/13
                IPv6:
                  2801:80:1d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52985

    Signature Algorithm: sha256WithRSAEncryption
         10:ef:08:9c:94:4a:44:1b:7b:d5:7b:2c:90:ed:70:3c:c8:38:
         de:51:ba:25:a9:44:15:06:8d:3e:38:d8:82:2f:97:06:60:64:
         dc:12:b5:7a:76:bf:5a:97:d5:3a:94:53:3e:0d:7e:e6:d5:51:
         36:20:9b:fe:a6:b7:19:a0:d7:44:89:bf:b7:59:12:07:91:f4:
         56:4e:9f:ed:6d:35:76:84:6b:f9:e7:9e:2f:18:af:2a:4f:61:
         b4:bb:56:16:2a:14:03:bd:ed:de:fc:6d:bf:7c:a0:6f:bc:6f:
         45:2b:f1:67:0d:58:f0:1f:09:93:a3:ad:1b:a7:4d:df:ee:97:
         5c:f9:11:67:97:8e:21:ee:02:ff:2b:77:46:b7:a1:c5:29:4d:
         25:4b:98:33:74:97:c8:0c:4a:55:4a:ee:98:60:08:99:5b:b0:
         28:23:95:49:d9:47:20:00:f3:be:ff:ed:7c:8a:c2:3b:aa:0c:
         59:9b:3b:42:92:65:ea:8a:8c:23:cd:d5:37:ea:9e:55:9b:ea:
         c6:32:e7:b0:4b:d2:54:15:9c:3f:b1:5a:94:09:a5:28:a6:e5:
         1e:a3:14:0f:11:af:56:37:b7:77:12:8d:8f:4b:cd:8e:1f:96:
         71:0b:8d:86:88:66:2c:4e:40:fa:4a:db:88:34:7e:2b:3b:c8:
         12:20:5e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:38 2025 by rpki-client