Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer
File:                     B703F8762B9302F126840F9CEAA892F3910476FA.cer (raw, json)
Hash identifier:          +WRgu77yLIFMo+rN7IATiRdo9XbiHJNOPDWVBW0jwC8=
Subject key identifier:   B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3755630AFC2A32D7731387714F8D51095B4BD74D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 13:54:42 +0000
Certificate not after:    Mon 17 Mar 2025 13:59:42 +0000
Subordinate resources:    AS: 271090
                          IP: 179.48.144.0/22
                          IP: 2804:761c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:55:63:0a:fc:2a:32:d7:73:13:87:71:4f:8d:51:09:5b:4b:d7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 13:54:42 2024 GMT
            Not After : Mar 17 13:59:42 2025 GMT
        Subject: CN=B703F8762B9302F126840F9CEAA892F3910476FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:64:39:fb:f2:b5:ca:68:01:88:fe:a7:dc:
                    99:f4:95:d4:32:82:aa:3d:a7:08:72:5a:68:f0:db:
                    0b:cc:e1:6e:01:df:8f:8f:6b:05:0c:5a:02:c2:e0:
                    a2:69:57:5b:36:fc:28:79:e0:15:50:43:2d:f8:b2:
                    e4:7a:31:7b:91:48:52:b8:d4:95:40:af:c9:92:3b:
                    0e:83:6b:f2:33:eb:b7:99:de:60:1a:78:48:5a:3b:
                    d6:af:cd:34:88:14:f5:3b:6f:ce:bc:13:02:a5:d8:
                    20:2c:0b:07:f6:e1:74:1c:15:54:66:e4:c9:28:5e:
                    a0:06:8b:21:18:5c:91:ba:9c:6e:44:01:a1:b0:d5:
                    33:c1:bf:62:b2:ec:b3:30:9e:25:a2:19:df:3c:20:
                    a7:00:1d:e5:7e:4d:9c:2a:ba:be:1b:9d:91:0d:b1:
                    9e:bf:72:43:99:d0:f2:2c:42:62:a3:34:2b:c2:9b:
                    54:e0:53:5b:3b:f1:50:7f:30:91:9b:c0:13:dd:7b:
                    1a:8d:9a:98:95:58:9e:78:76:c1:0e:41:1d:84:ef:
                    55:2c:32:3c:23:1b:e7:3d:71:88:a5:00:09:34:fd:
                    e8:2f:d9:96:6b:a9:6a:16:03:c4:60:ff:01:b5:ca:
                    d1:df:d4:3b:cb:c0:61:3f:ba:02:2c:8a:92:6b:dc:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.144.0/22
                IPv6:
                  2804:761c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271090

    Signature Algorithm: sha256WithRSAEncryption
         1c:28:fa:f0:49:63:fa:91:94:64:cf:f2:e3:d8:62:06:78:77:
         d9:95:64:f3:6a:d0:f0:37:ec:3f:82:42:81:83:4b:18:0d:5a:
         23:44:ab:c6:3b:68:1b:84:db:6c:cb:47:4a:45:ff:46:c7:a2:
         91:d4:52:47:52:7a:0a:84:af:99:da:02:84:cb:9a:40:6f:b3:
         fe:af:b0:7b:30:3d:3e:1c:37:11:03:9d:68:26:93:58:b5:99:
         70:66:63:7e:40:d7:e9:e7:c7:31:7f:54:6e:66:74:f7:7c:5a:
         01:12:c3:20:7e:db:0a:44:56:06:f1:10:28:55:95:66:ab:60:
         59:72:33:20:80:41:f1:35:1a:08:f5:7b:bb:b2:5c:77:cf:26:
         35:65:d1:4f:9d:88:c2:32:42:b6:70:6d:1f:68:6b:46:9e:47:
         c5:b4:81:7c:0d:31:c7:97:34:76:0b:a8:db:61:2d:ce:1e:02:
         45:26:e7:57:0d:4e:25:42:43:95:8e:04:f1:ec:3c:9f:5a:64:
         63:e6:97:31:a0:7c:bd:40:30:54:d6:b2:5e:04:e9:b0:ba:89:
         96:5e:0b:f0:22:7d:0a:9c:a9:dd:4d:93:d0:f4:d4:15:d2:4d:
         e8:98:d1:78:7b:07:47:52:8c:8e:5a:8e:60:05:60:94:b2:00:
         72:cf:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org