Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer
File:                     B787B0A23C983808EDAFAA5C7934BC004F741D62.cer (raw, json)
Hash identifier:          pVklGAcJY4CEg/gj7i2CHEdBUI8zumIoDnqq2X7toFc=
Subject key identifier:   B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B391AD55FE5CC7476F49BE6763B2EACDCB28C06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/B787B0A23C983808EDAFAA5C7934BC004F741D62.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 17:43:38 +0000
Certificate not after:    Tue 30 Jul 2024 17:48:38 +0000
Subordinate resources:    AS: 52699
                          IP: 170.244.0.0/22
                          IP: 177.23.136.0/21
                          IP: 177.223.0.0/20
                          IP: 2804:c64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:39:1a:d5:5f:e5:cc:74:76:f4:9b:e6:76:3b:2e:ac:dc:b2:8c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 17:43:38 2023 GMT
            Not After : Jul 30 17:48:38 2024 GMT
        Subject: CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:cf:c6:69:fa:f3:20:97:06:ae:e5:b9:46:
                    8e:2a:a4:a6:48:95:f3:e2:8e:f1:ee:26:6a:7b:5a:
                    d3:26:de:c0:2f:a7:af:b1:8d:29:b5:84:69:92:a6:
                    4a:ee:ac:22:98:f2:2f:1f:4a:fd:de:89:3f:c3:65:
                    d9:e1:7e:a7:ad:53:ae:93:5c:35:7c:dc:fe:aa:85:
                    2a:88:73:1a:1f:5a:c4:5e:f7:d4:06:15:a0:d5:9f:
                    16:b3:62:fa:c8:01:6f:8f:97:59:6e:0a:29:a5:70:
                    09:60:ef:01:1a:47:c8:c0:fe:3f:e6:62:27:c8:4f:
                    94:ef:e6:4e:a6:67:fe:8d:2b:07:64:d9:65:a1:ad:
                    e4:37:73:19:48:c5:5d:b5:54:7b:c2:70:47:27:6d:
                    7c:30:f8:24:ba:ba:88:c2:8d:4c:4b:b6:2c:fb:bc:
                    a0:e8:91:92:6d:6b:09:0a:0a:7f:e2:c8:b2:34:20:
                    be:39:19:a9:f3:2d:c7:b2:65:25:37:31:4d:cc:d6:
                    fa:55:a9:35:ea:df:ed:97:ab:18:b6:40:a1:79:81:
                    1e:70:e3:b2:3e:7f:7e:02:b2:d1:e4:70:59:20:54:
                    81:ae:f4:e2:70:67:29:4c:12:8a:31:4f:c2:fc:eb:
                    2d:f6:5a:e1:7d:f8:23:6b:17:4f:a2:6c:65:40:c3:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/B787B0A23C983808EDAFAA5C7934BC004F741D62.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.0.0/22
                  177.23.136.0/21
                  177.223.0.0/20
                IPv6:
                  2804:c64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52699

    Signature Algorithm: sha256WithRSAEncryption
         58:2b:f1:35:ec:1e:58:b9:61:1f:3e:73:35:ad:35:61:f8:0d:
         93:7b:58:c8:05:fe:bc:ce:38:41:de:2b:f7:aa:3f:15:48:3b:
         72:a3:30:d2:8f:be:42:e6:4e:04:1b:ee:0b:38:82:eb:7b:87:
         44:1a:26:8b:f4:0d:5a:ba:39:25:a5:fd:d6:dc:b8:79:7e:4d:
         88:a0:22:69:be:d9:32:4e:71:eb:25:1c:36:af:62:ac:a6:2f:
         2b:c3:cf:ad:4f:89:92:46:5b:00:35:41:f1:d1:4f:36:42:45:
         89:a7:86:c1:fe:22:97:b6:c2:3f:67:c8:bc:59:47:3d:fc:da:
         41:58:e0:f8:38:a7:c6:56:b3:78:11:4c:2a:b7:2f:04:8c:37:
         bd:41:cb:77:43:54:fc:e7:54:68:f8:b7:3c:9e:97:96:29:ac:
         43:06:a2:ca:d6:1a:dc:75:ae:3b:71:95:c2:02:07:48:57:59:
         3a:6c:42:c4:bf:ad:8a:ff:e6:3c:5f:8a:e3:cd:c1:65:7d:50:
         52:fb:b5:77:0b:33:38:70:f4:3e:a9:8d:33:df:fb:1a:ea:0b:
         a5:74:b1:dd:b6:e0:75:49:a2:91:b0:52:3b:10:98:77:20:c6:
         41:01:ce:f2:81:21:25:b0:6b:0a:8d:02:4c:6a:7b:f0:37:43:
         8f:11:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org