Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7F05C04BF8B355F6546229AB542863F3458CE8E.cer
File:                     B7F05C04BF8B355F6546229AB542863F3458CE8E.cer (raw, json)
Hash identifier:          rrYJM/2aloQgYCcADo7HxYGyP08SxIEt10qhOW26+WQ=
Subject key identifier:   B7:F0:5C:04:BF:8B:35:5F:65:46:22:9A:B5:42:86:3F:34:58:CE:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A2DF0C55250CC9ED827F88F8A4CE5DF99BF8A2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/B7F05C04BF8B355F6546229AB542863F3458CE8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 22:05:29 +0000
Certificate not after:    Tue 24 Sep 2024 22:10:29 +0000
Subordinate resources:    AS: 268684
                          IP: 45.165.172.0/22
                          IP: 2804:5504::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2d:f0:c5:52:50:cc:9e:d8:27:f8:8f:8a:4c:e5:df:99:bf:8a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 22:05:29 2023 GMT
            Not After : Sep 24 22:10:29 2024 GMT
        Subject: CN=B7F05C04BF8B355F6546229AB542863F3458CE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:4f:9b:ce:31:a0:73:32:93:bb:48:17:be:
                    17:ec:33:6a:10:42:af:88:ce:5f:97:52:8b:b5:56:
                    60:e0:a7:90:c4:30:30:7e:dd:9d:fa:30:ae:88:1f:
                    02:9d:80:6b:ac:a9:0d:c8:86:26:ba:1f:45:ef:63:
                    1b:85:50:b9:e4:d5:f2:21:a0:58:fe:42:c7:61:7e:
                    b7:55:29:33:60:82:f0:3f:79:8e:73:82:35:9e:bc:
                    79:fd:68:db:29:a3:99:7c:75:18:46:0b:b9:cf:9f:
                    31:a7:da:73:ab:6e:7c:34:04:a2:34:50:39:ac:e3:
                    f0:ee:2f:ff:79:05:34:9a:4a:43:84:ce:cb:3e:da:
                    f6:8c:ea:c7:40:f1:b4:f9:0d:6f:f2:45:78:d8:49:
                    da:1a:e4:10:65:02:98:b4:14:e5:4f:9c:b9:4b:88:
                    fe:b4:e3:b0:ac:61:8c:f1:08:3c:51:ca:49:99:16:
                    89:39:3d:78:3e:3c:5c:b1:e2:64:9b:d2:83:3d:8e:
                    bd:51:6c:c9:7d:3f:26:70:45:6e:99:9f:4e:df:22:
                    87:67:63:38:08:1f:cd:d7:1a:49:d9:14:40:d9:e1:
                    a2:df:8e:80:c5:34:f3:7b:8b:8f:0b:1c:9b:a3:3a:
                    f1:c7:24:ab:34:14:7b:6d:ab:cd:a9:13:ba:44:e2:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:F0:5C:04:BF:8B:35:5F:65:46:22:9A:B5:42:86:3F:34:58:CE:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/B7F05C04BF8B355F6546229AB542863F3458CE8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.172.0/22
                IPv6:
                  2804:5504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268684

    Signature Algorithm: sha256WithRSAEncryption
         3f:34:96:c0:70:9f:1f:e5:d8:8b:81:32:f5:6c:51:fc:11:6a:
         ab:38:c5:b4:82:68:5b:1f:5b:d1:0d:63:e0:7c:21:41:c9:09:
         46:03:01:56:10:f7:9f:bc:70:79:49:7b:b2:ff:96:42:77:92:
         86:4c:1b:68:6f:45:23:80:0e:51:26:7a:0d:81:62:c9:7e:75:
         88:f1:62:8f:13:13:52:08:13:38:de:87:df:45:43:87:05:47:
         ec:d0:6f:86:3b:d4:a4:8d:2e:ea:36:35:ec:aa:35:b3:e5:91:
         e1:c8:a4:e9:b5:31:17:12:22:ff:7f:ff:a3:c0:72:31:c8:84:
         58:ea:c0:23:25:3a:ad:cc:61:47:21:83:ab:78:34:c5:92:bf:
         bb:09:68:76:c8:7f:f4:3f:07:23:65:a6:ce:73:0c:03:39:32:
         8f:f3:ee:f2:b6:f6:62:94:f2:bb:1c:30:92:83:09:85:4e:dd:
         dc:03:b9:d2:4a:2c:b3:29:82:50:41:d6:bd:ca:6c:95:6e:4c:
         b3:39:eb:b8:d0:c3:35:06:92:6c:7e:27:ae:f6:ca:ec:92:f9:
         e6:d2:90:f1:d0:f2:74:87:81:1a:14:77:52:54:c4:20:e2:6d:
         5e:d3:43:0e:1f:2a:72:89:da:1a:04:c5:3f:86:0b:cb:7e:78:
         c3:77:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org