Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7ECCC8C1D52BF6927029D8D2DA6D734D7192824.cer
File:                     B7ECCC8C1D52BF6927029D8D2DA6D734D7192824.cer (raw, json)
Hash identifier:          xOR51NwkZ3hFjlox+URpdoMIt6IiwBcI0EuecZdQUBA=
Subject key identifier:   B7:EC:CC:8C:1D:52:BF:69:27:02:9D:8D:2D:A6:D7:34:D7:19:28:24
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       610B8A775ACE7E967244E4A3364E4903B2D61AB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B7ECCC8C1D52BF6927029D8D2DA6D734D7192824.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 00:40:39 +0000
Certificate not after:    Thu 25 Apr 2024 00:45:39 +0000
Subordinate resources:    AS: 263569
                          IP: 45.5.220.0/22
                          IP: 45.172.252.0/22
                          IP: 45.225.236.0/22
                          IP: 131.161.60.0/22
                          IP: 138.118.168.0/22
                          IP: 143.202.244.0/22
                          IP: 168.232.216.0/22
                          IP: 170.80.208.0/22
                          IP: 186.249.216.0/22
                          IP: 200.4.116.0/22
                          IP: 2804:f30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0b:8a:77:5a:ce:7e:96:72:44:e4:a3:36:4e:49:03:b2:d6:1a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 27 00:40:39 2023 GMT
            Not After : Apr 25 00:45:39 2024 GMT
        Subject: CN=B7ECCC8C1D52BF6927029D8D2DA6D734D7192824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:a1:60:8d:78:b5:dd:84:a5:10:b8:35:8e:
                    ee:69:28:13:8a:c9:56:03:ac:7a:5a:73:73:63:0c:
                    fc:10:75:ef:61:07:ea:4c:06:b1:a0:2b:55:ec:8f:
                    e9:99:ec:00:fe:8b:d9:6d:09:7d:ef:60:69:fc:88:
                    1d:02:da:c5:b1:9b:c0:ab:cb:82:24:43:06:45:2b:
                    91:b9:f2:0a:a7:59:56:c5:b1:2d:72:67:1f:df:f0:
                    fa:6b:40:54:9b:ac:f6:6a:19:16:b8:2c:f0:0a:65:
                    39:bf:c6:53:99:df:0f:6f:3d:59:da:92:21:c3:90:
                    20:10:3c:48:9f:07:3c:19:0e:2d:a8:58:e7:7a:2b:
                    fb:5c:38:2f:2e:84:d4:ca:6b:4c:9f:8c:6f:34:49:
                    ca:6a:f1:f7:b8:49:41:74:94:e2:6c:a0:fd:9e:ac:
                    f5:3c:e6:66:2f:92:a5:50:87:e8:e4:28:74:c8:44:
                    04:3e:e9:9b:91:4e:5c:b1:43:5f:48:29:a7:7e:f7:
                    d1:2f:a5:dd:c6:46:2a:b1:de:2a:7c:f3:cb:93:af:
                    db:72:63:ee:f2:e9:e5:42:26:b9:ce:ca:55:18:37:
                    6e:bc:8e:32:ac:96:85:a8:eb:95:d3:9b:79:da:37:
                    9f:fa:f0:2b:a1:bb:01:da:82:31:1c:e1:b6:89:e0:
                    aa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:EC:CC:8C:1D:52:BF:69:27:02:9D:8D:2D:A6:D7:34:D7:19:28:24
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B7ECCC8C1D52BF6927029D8D2DA6D734D7192824.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/22
                  45.172.252.0/22
                  45.225.236.0/22
                  131.161.60.0/22
                  138.118.168.0/22
                  143.202.244.0/22
                  168.232.216.0/22
                  170.80.208.0/22
                  186.249.216.0/22
                  200.4.116.0/22
                IPv6:
                  2804:f30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263569

    Signature Algorithm: sha256WithRSAEncryption
         88:a4:18:62:3c:73:27:5b:3f:34:01:8b:ad:ae:81:20:e3:41:
         59:d5:33:13:9e:43:2f:58:29:4f:f8:89:d2:ee:04:89:0a:f3:
         18:a9:62:99:81:c5:5f:08:a5:40:86:10:15:4e:f6:e1:5b:82:
         07:f1:f0:7c:aa:18:82:93:80:16:28:24:e3:8c:62:d9:9d:c9:
         92:04:d5:31:d3:46:f4:ba:f6:83:35:46:ce:83:2a:97:d0:7f:
         e8:33:72:2b:84:76:e3:9e:4c:b2:13:e5:32:90:6e:6b:d2:93:
         f5:64:7f:6c:fe:f6:6b:78:64:52:f2:95:e7:ac:24:89:2d:dd:
         25:7e:f5:9d:27:c6:78:b0:cf:61:85:48:df:62:13:f0:7f:5a:
         ab:e6:7d:0e:ea:01:60:d9:c2:ed:e3:24:49:dc:21:52:49:bd:
         38:67:a0:80:93:fb:24:7b:40:10:8e:f4:54:e5:ad:29:2c:6c:
         77:9c:7f:dc:b9:72:88:a5:19:c8:2f:62:aa:7e:49:cc:73:9f:
         b2:bc:b1:10:1d:69:1c:2c:37:31:54:fb:3b:ab:80:3f:25:dc:
         39:21:39:29:66:7d:8f:c7:00:ca:5d:d9:be:d6:23:93:46:ab:
         9d:b9:f9:fd:e4:53:4c:29:20:93:3a:10:d3:df:83:8e:24:d1:
         73:4d:76:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org