Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7747E27E8B41C18923F18D1EFE622EB4DF28BF9.cer
File:                     B7747E27E8B41C18923F18D1EFE622EB4DF28BF9.cer (raw, json)
Hash identifier:          lWa7XyFwF3btZskVdlVZ4D/0UJgQadWGwHC4vTMjzxU=
Subject key identifier:   B7:74:7E:27:E8:B4:1C:18:92:3F:18:D1:EF:E6:22:EB:4D:F2:8B:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       629EB9C3182456603CBE2832E15C75C903E36273
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/B7747E27E8B41C18923F18D1EFE622EB4DF28BF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 20:29:23 +0000
Certificate not after:    Wed 04 Sep 2024 20:34:23 +0000
Subordinate resources:    AS: 270777
                          IP: 201.71.48.0/22
                          IP: 2804:7140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9e:b9:c3:18:24:56:60:3c:be:28:32:e1:5c:75:c9:03:e3:62:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 20:29:23 2023 GMT
            Not After : Sep  4 20:34:23 2024 GMT
        Subject: CN=B7747E27E8B41C18923F18D1EFE622EB4DF28BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:bc:de:96:d8:fd:10:a3:e9:b6:d8:7f:d1:
                    55:3f:05:df:88:e4:45:76:98:1b:1c:6d:7f:7b:21:
                    70:95:f5:d3:6a:7a:71:ad:6d:90:7b:0e:e0:86:f6:
                    6e:8c:54:df:28:d6:49:fc:40:9f:a1:0c:24:08:04:
                    d6:e0:ea:7d:39:da:55:f5:3d:66:b7:d2:70:00:66:
                    47:fc:93:c0:c2:76:ec:49:d9:18:e1:79:17:d6:f7:
                    97:98:ae:5e:62:13:9a:5a:58:ff:19:94:16:79:74:
                    7f:72:0b:38:af:be:db:5f:b7:e8:d7:03:da:ab:ac:
                    9f:d8:f5:2b:44:bc:2a:58:e4:62:60:c0:97:f8:3e:
                    74:f7:e3:e2:8a:e1:1d:7d:36:a4:9c:a4:8a:98:bc:
                    ab:13:59:6c:80:00:d6:14:4f:44:67:61:1c:50:65:
                    16:62:9f:6a:c2:61:e3:9a:15:f8:ef:a6:0f:f4:9a:
                    6c:82:e3:e6:d7:14:28:54:bc:a1:66:23:76:10:0b:
                    cb:2b:42:83:c1:5d:13:67:33:ba:af:6e:66:4d:5b:
                    d8:18:84:80:b8:ff:55:31:33:b9:b8:75:08:7b:48:
                    d5:76:34:03:a5:b6:22:ed:fa:f9:c3:6d:18:7d:70:
                    b0:93:55:fb:a1:3a:be:9a:a4:0b:0c:e4:3c:1d:4d:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:74:7E:27:E8:B4:1C:18:92:3F:18:D1:EF:E6:22:EB:4D:F2:8B:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/B7747E27E8B41C18923F18D1EFE622EB4DF28BF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.48.0/22
                IPv6:
                  2804:7140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270777

    Signature Algorithm: sha256WithRSAEncryption
         0c:98:a6:a3:bd:41:da:26:fc:5e:a1:59:f7:b5:25:20:05:46:
         7c:cd:8e:44:f3:f2:0f:ad:b5:88:1a:bf:3b:c5:e1:71:ee:aa:
         34:7c:e3:75:c1:c6:4d:7d:ab:55:9e:f9:31:7f:08:fc:75:de:
         55:7b:8e:5b:47:80:ec:86:b1:dc:dc:e2:e8:4c:bc:c7:cd:e6:
         82:5e:31:1f:4c:1f:d6:ca:b2:cc:0c:8a:c9:f6:82:c3:d2:42:
         98:60:af:b6:28:e1:fd:5d:54:f0:07:76:d7:48:db:4a:03:a6:
         44:82:3c:6d:e1:11:b5:ab:70:5a:2f:b2:de:b2:4f:b6:12:a7:
         d1:d1:f3:56:4d:5d:63:f3:be:4e:56:5a:37:69:99:03:65:e1:
         06:94:18:50:2f:f0:59:f2:5f:34:b7:a6:1b:79:f9:45:09:c0:
         52:ac:40:38:0b:3e:13:95:1a:e0:42:7c:18:8b:64:00:a2:17:
         ae:d1:57:30:2f:a8:4d:d4:bd:91:ba:f6:e4:87:92:b7:bd:24:
         c2:d9:80:42:c7:5b:f4:b0:d9:e5:72:1a:16:32:0d:09:ff:a5:
         c7:29:92:4d:b7:74:8b:f5:f3:10:df:1a:de:be:ea:38:f5:35:
         1d:a6:8d:a1:ee:4f:68:bd:fc:5f:5c:48:5f:e9:c6:36:20:33:
         99:b5:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org