Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer
File:                     B7A998992696FF1723DF042964560BDF4E6F9722.cer (raw, json)
Hash identifier:          RVJcqPcvzFERgUE313g4yAlCdpIY7yD5We/fXcIIgnM=
Subject key identifier:   B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CDDCBA2BF5CB9C900774AAFF46274CD522D71FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/B7A998992696FF1723DF042964560BDF4E6F9722.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 18:05:11 +0000
Certificate not after:    Mon 03 Jun 2024 18:10:11 +0000
Subordinate resources:    AS: 269315
                          IP: 45.184.52.0/22
                          IP: 2804:62bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:dd:cb:a2:bf:5c:b9:c9:00:77:4a:af:f4:62:74:cd:52:2d:71:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 18:05:11 2023 GMT
            Not After : Jun  3 18:10:11 2024 GMT
        Subject: CN=B7A998992696FF1723DF042964560BDF4E6F9722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:71:c3:e0:60:ae:99:55:a0:49:ed:e0:33:
                    8c:17:a5:98:18:f2:27:9e:d5:0b:5c:42:44:9a:7e:
                    1f:30:55:d2:d8:bf:07:89:3d:e4:c5:66:01:17:9a:
                    23:a5:ae:40:63:ae:36:7a:50:55:bc:1c:e3:48:57:
                    2d:e7:38:43:bc:6a:47:45:3c:99:c8:cb:1c:44:45:
                    ed:b4:98:c7:03:75:88:40:d2:c1:37:42:6b:97:89:
                    41:b7:11:42:a0:f3:f8:29:67:61:da:dd:0f:7e:94:
                    dd:28:62:f3:d7:4e:04:6c:03:28:8c:7b:7e:80:31:
                    a7:fa:8e:ee:d7:1d:ea:27:39:d9:bf:7a:7d:e4:f6:
                    60:e9:91:03:26:09:5a:52:78:47:9d:14:fc:a5:73:
                    66:20:92:c6:f8:ae:ae:e7:4c:cf:17:ea:ae:e5:8d:
                    4d:b7:9e:56:57:ae:de:1e:49:39:bf:18:11:59:fb:
                    6c:74:4c:c4:f9:f5:f4:db:98:05:9b:44:75:ca:b3:
                    28:be:a5:be:c3:c7:ec:b3:a8:84:11:2a:c6:34:d9:
                    5c:fc:16:b7:69:10:84:e4:ff:50:e4:3a:73:a8:7a:
                    08:e5:60:f5:b8:87:04:98:7c:3e:ad:1c:bb:01:71:
                    0c:57:6c:a7:2a:59:01:5a:62:2b:fc:9f:e7:3a:18:
                    94:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/B7A998992696FF1723DF042964560BDF4E6F9722.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.52.0/22
                IPv6:
                  2804:62bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269315

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:cc:ef:3c:5f:e4:3c:a7:e0:3d:ad:32:52:f4:6a:48:41:
         04:f7:cd:8b:ac:c3:48:38:24:d7:bd:ae:18:de:02:66:a6:c5:
         6f:f4:96:7c:17:f3:85:93:1a:4c:f1:5f:5b:06:49:94:93:19:
         09:49:91:c2:cb:b7:86:2f:32:85:f1:3f:f8:1c:87:0a:85:8b:
         11:bf:ce:78:3a:b7:63:cb:ee:2e:70:72:8e:0c:85:c5:f3:6f:
         a1:5b:10:3c:f5:58:0c:cd:81:fc:8e:7d:af:46:39:09:79:6b:
         ff:ac:df:ba:82:28:2b:2a:0f:9c:e3:4c:51:d5:1b:30:51:fb:
         45:84:eb:44:6b:e9:89:ff:c1:cd:f7:a4:51:61:a5:ac:eb:b0:
         5e:b6:9b:a1:58:75:ad:30:bb:a2:f2:59:03:9d:ee:34:ce:bc:
         57:0a:46:e2:c4:00:6a:4f:4f:70:e8:92:b7:c0:64:fc:86:07:
         45:c9:a9:5b:cd:2e:4e:a0:c7:62:1b:0b:aa:31:67:88:f3:fe:
         f9:41:9c:28:5f:dd:36:8a:1f:eb:77:50:51:15:11:dc:9d:74:
         fd:c9:39:91:cb:f6:84:9d:2c:fb:b8:ee:f6:2c:0d:b4:f0:bc:
         a3:d4:42:8e:2f:19:dc:94:d2:60:de:ac:07:9a:47:98:87:00:
         89:7c:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org