Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.cer
File:                     B853BE29B6BEB55F7E83C4314E352AE87F81760A.cer (raw, json)
Hash identifier:          Ow/T8B5W36ENkr82H4Sl8QUr/S+bITxeCO3rG+iaskw=
Subject key identifier:   B8:53:BE:29:B6:BE:B5:5F:7E:83:C4:31:4E:35:2A:E8:7F:81:76:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58C3A32EBED9D27F64FA87727A5F333AE557ED70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Nov 2022 12:22:07 +0000
Certificate not after:    Wed 08 Nov 2023 12:27:07 +0000
Subordinate resources:    AS: 267080
                          IP: 45.228.224.0/22
                          IP: 2804:47d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c3:a3:2e:be:d9:d2:7f:64:fa:87:72:7a:5f:33:3a:e5:57:ed:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 12:22:07 2022 GMT
            Not After : Nov  8 12:27:07 2023 GMT
        Subject: CN=B853BE29B6BEB55F7E83C4314E352AE87F81760A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2e:42:b6:03:7d:43:e8:aa:2f:48:9e:cc:26:
                    dd:b9:f1:e8:7a:a9:e1:d6:46:55:5a:b8:a3:ec:1b:
                    c8:22:1f:b4:5b:18:b1:3c:c1:60:9c:dc:4c:65:66:
                    ae:0a:6d:6d:d0:af:fe:30:3a:d8:ff:d1:27:01:64:
                    4f:fc:f2:93:4f:ba:57:09:c4:80:34:a1:64:c9:ac:
                    b1:c2:58:0d:9f:05:30:87:06:e9:cc:45:ad:f8:e5:
                    0b:3e:95:99:e7:df:15:c1:b6:dd:1f:a0:5a:e3:62:
                    42:c0:0f:46:c8:b1:48:c1:1d:7e:72:ca:d2:66:73:
                    80:ab:48:00:3c:5a:16:8d:da:21:72:6c:b8:59:26:
                    50:84:eb:71:44:52:7f:36:ec:ec:45:d2:34:0a:bf:
                    56:a0:63:94:12:f6:0f:45:0a:ea:8d:27:67:c4:7b:
                    f5:37:28:14:0c:e9:db:7f:fb:c8:2f:81:d2:05:e0:
                    15:85:0f:15:1b:54:1f:71:d5:4a:2d:ac:3c:ae:e5:
                    7f:58:9c:8e:07:f2:7e:56:8e:b9:53:41:af:f3:f7:
                    f3:1f:d8:b2:21:05:0c:88:76:bb:0e:e7:a9:dc:66:
                    42:b9:97:10:3f:bd:5e:ad:b8:b3:66:11:ba:54:0a:
                    4f:46:83:ff:24:22:91:39:f2:e9:57:2a:dc:9b:fd:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:53:BE:29:B6:BE:B5:5F:7E:83:C4:31:4E:35:2A:E8:7F:81:76:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Tv1QwnhwesatwztJvK9NTTbQNbCP7jTT3pBqXSCQ1pZ/0/B853BE29B6BEB55F7E83C4314E352AE87F81760A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.224.0/22
                IPv6:
                  2804:47d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267080

    Signature Algorithm: sha256WithRSAEncryption
         b4:8d:02:d0:c1:01:2b:90:e8:36:ca:eb:18:9c:03:dc:22:97:
         da:7f:64:f2:12:50:e1:2d:f4:58:10:be:c2:4e:58:f0:4a:b2:
         fa:d0:55:4d:d8:7e:e5:3c:e1:9d:86:cb:f8:8a:f1:c5:b8:0d:
         01:28:9c:ff:3d:70:84:a1:f9:0a:76:10:0f:6c:ea:7b:de:af:
         3b:92:da:9a:ac:f1:19:4a:c7:2e:6a:6a:f5:53:13:a1:09:45:
         4f:ec:e4:8e:02:bb:62:39:4f:29:be:17:c7:c9:20:3f:bd:08:
         e3:fd:ca:83:52:38:e9:8b:ac:22:4d:6f:53:fd:75:a9:14:1a:
         3b:df:af:37:7a:b3:bd:cd:35:30:41:f7:b6:9e:f0:7e:37:d6:
         05:b4:4a:ef:d0:9a:53:35:f9:04:1f:10:3a:13:17:45:74:84:
         6e:a1:3e:03:89:6c:09:cc:0c:e8:d4:67:23:21:21:1c:a7:2a:
         84:e5:93:01:46:92:eb:76:3d:81:e0:bc:97:d1:76:a5:58:80:
         bc:db:f9:b0:7f:cd:2d:2c:dd:3e:3f:cb:dc:5a:00:f1:69:5c:
         14:ba:14:78:3a:3d:72:31:08:42:60:60:d3:ff:57:44:21:6c:
         7a:8d:98:4e:7d:80:ba:82:ba:c8:7f:2c:e9:a8:59:1b:ab:f3:
         73:1f:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org