Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7E5C15410A519985C8FF995D3FB852C6E897785.cer
File:                     B7E5C15410A519985C8FF995D3FB852C6E897785.cer (raw, json)
Hash identifier:          iSeDhMJQuuKPRnJGiUxk6kbhWNCZTBfNgMr8yjLS+n0=
Subject key identifier:   B7:E5:C1:54:10:A5:19:98:5C:8F:F9:95:D3:FB:85:2C:6E:89:77:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02A5842C3841357EE16DBC2531555114227DB1C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/0/B7E5C15410A519985C8FF995D3FB852C6E897785.mft
caRepository:             rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Dec 2023 02:56:15 +0000
Certificate not after:    Sat 30 Nov 2024 03:01:15 +0000
Subordinate resources:    AS: 267258
                          IP: 45.232.108.0/22
                          IP: 2804:4ab4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a5:84:2c:38:41:35:7e:e1:6d:bc:25:31:55:51:14:22:7d:b1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  2 02:56:15 2023 GMT
            Not After : Nov 30 03:01:15 2024 GMT
        Subject: CN=B7E5C15410A519985C8FF995D3FB852C6E897785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:ca:24:4a:80:1c:54:f7:bb:a2:ff:e4:d9:
                    90:39:be:c0:af:0e:07:e1:6d:0a:ff:d3:37:66:96:
                    46:66:2d:25:7e:0d:bf:6b:f9:e7:4e:5e:f2:4e:e8:
                    74:0b:fa:1b:9b:c9:6e:d0:5e:0f:55:08:c0:9d:45:
                    b3:87:84:98:6f:33:fa:72:0e:90:0d:e6:74:96:09:
                    8c:c8:55:ad:3e:a4:a5:dc:e1:89:12:8c:71:43:49:
                    a4:f3:3e:38:24:06:aa:f3:ff:35:11:e6:4e:af:63:
                    d4:b4:e1:26:7e:2d:69:8b:e7:db:fc:5c:02:70:d9:
                    57:2c:fd:85:bd:7b:a7:51:81:c8:17:0f:af:b1:62:
                    6b:aa:cc:dc:75:bc:27:7c:28:93:07:c1:27:0c:f7:
                    6c:b3:a7:87:91:13:ff:e1:4f:29:8a:03:7b:83:1d:
                    26:d5:a7:20:55:95:25:51:8d:c9:99:e2:67:6e:ff:
                    14:bb:ce:be:2d:20:1b:14:5c:fe:94:6b:81:af:57:
                    78:3a:41:0f:a6:3a:2e:60:d1:95:ae:18:a1:11:27:
                    f8:d7:4a:f6:69:d1:9d:78:b4:7f:fe:53:e6:d3:07:
                    30:0e:9f:b0:5c:df:79:77:1c:bb:35:a3:61:b9:42:
                    09:e5:3d:d6:cb:e3:a9:b4:67:07:a2:6f:b8:8b:67:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:E5:C1:54:10:A5:19:98:5C:8F:F9:95:D3:FB:85:2C:6E:89:77:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/0/B7E5C15410A519985C8FF995D3FB852C6E897785.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.108.0/22
                IPv6:
                  2804:4ab4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267258

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:3c:f1:25:a5:c1:b9:63:99:89:37:cb:25:e4:b4:9a:4c:
         9a:58:53:b5:77:ac:4f:ba:7d:67:2d:a5:7c:ec:a4:80:eb:bb:
         77:6c:42:30:e7:80:90:18:92:03:f7:c0:df:ab:5e:07:6d:60:
         ad:1a:1e:98:e1:0d:46:91:70:3c:dc:2b:c4:77:08:57:a3:f2:
         e7:8c:12:cd:f2:86:34:e2:a5:ca:04:b5:59:34:8d:11:e8:f6:
         3a:5e:1f:b4:ed:ca:a2:d4:d1:a6:c1:dc:2e:6a:07:3b:af:35:
         ac:1d:75:ee:3f:8c:e8:6a:f9:3a:6b:ba:40:62:77:9d:7c:1c:
         03:27:34:55:68:1e:31:9f:31:77:f5:79:2f:f5:74:94:68:65:
         50:0d:7c:8f:e1:9b:6f:e1:e3:1b:21:94:43:5e:5a:74:86:74:
         e9:d1:b9:83:d8:fc:16:6b:32:5e:68:8c:79:2e:ad:77:86:2c:
         9d:93:ae:7a:93:34:a7:f7:d4:2d:e1:0e:84:9e:17:25:48:70:
         bc:48:a8:dd:c7:2f:7e:34:e7:fc:c9:4a:8e:d8:4d:28:8a:2a:
         55:1a:28:ab:0b:04:1b:57:15:3c:34:8e:73:d0:b7:01:15:50:
         36:53:ff:a9:78:6e:cf:f3:53:15:d0:2f:4b:8f:87:0a:be:9c:
         1f:2f:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org