Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer
File:                     B8BB7F90C1C5136709248077244EA66BB1F4F64E.cer (raw, json)
Hash identifier:          obPBc8E4EG7NAjS1PRk7Dse+pd9PdHlo5YFUmcq3vDs=
Subject key identifier:   B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       450D21637EBABCBA3D2DCD9DACE5EAF7C0757EA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 16:02:38 +0000
Certificate not after:    Wed 27 Mar 2024 16:07:38 +0000
Subordinate resources:    AS: 266389
                          IP: 170.81.36.0/22
                          IP: 2804:3718::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0d:21:63:7e:ba:bc:ba:3d:2d:cd:9d:ac:e5:ea:f7:c0:75:7e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 16:02:38 2023 GMT
            Not After : Mar 27 16:07:38 2024 GMT
        Subject: CN=B8BB7F90C1C5136709248077244EA66BB1F4F64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:53:f5:2e:cf:42:a0:92:22:4a:e8:18:66:
                    a2:76:58:09:ce:59:e9:24:98:22:70:14:8b:84:60:
                    a0:14:cc:7c:75:b8:cc:08:ff:57:6c:7e:7b:1d:a7:
                    64:57:d8:8e:cf:1f:9b:62:2b:1a:ed:5b:29:e0:ed:
                    6c:65:9f:50:84:6b:d1:28:f7:0f:64:ba:16:71:d0:
                    e4:f3:b7:42:da:fd:42:4d:c2:ca:71:4a:1d:72:90:
                    fe:9e:75:e9:2f:19:a1:43:cf:24:2f:c5:c9:d8:59:
                    85:e1:9f:1e:ee:16:7f:db:47:78:82:de:e6:50:71:
                    a2:22:f0:9c:a9:82:56:5d:4b:20:56:63:3d:e0:07:
                    33:52:90:16:45:aa:37:3f:7c:3f:a9:5a:f8:6e:55:
                    f7:56:c4:44:ee:b8:85:7b:26:17:43:d7:67:a7:13:
                    8c:a2:bc:4a:60:bf:d3:6f:93:42:0c:a2:ba:d4:bf:
                    12:30:7d:cb:53:35:6f:cc:4a:fb:c7:e8:56:78:bf:
                    4b:e6:59:43:62:c1:1a:b0:e8:49:5b:f3:2b:1c:10:
                    a4:85:03:d6:1a:35:5f:20:1e:c5:f5:af:ce:63:f0:
                    2b:4e:37:93:90:2d:c2:3c:ec:e7:9e:11:74:ca:7c:
                    6c:c1:e2:9e:ee:88:fc:7e:80:73:44:0f:77:0c:70:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:BB:7F:90:C1:C5:13:67:09:24:80:77:24:4E:A6:6B:B1:F4:F6:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/B8BB7F90C1C5136709248077244EA66BB1F4F64E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.36.0/22
                IPv6:
                  2804:3718::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266389

    Signature Algorithm: sha256WithRSAEncryption
         06:99:f8:3c:58:b6:5e:b8:15:03:9d:78:5f:6c:d6:77:67:2b:
         c6:1a:dd:ce:6b:ef:57:df:29:3f:e9:5d:a4:35:30:a2:1b:22:
         68:e1:2b:e1:4a:91:c9:11:bc:9c:69:f7:dd:b9:4a:ba:1e:33:
         96:85:49:b9:54:f7:c8:68:be:07:47:1b:94:6c:fc:64:a7:a3:
         29:73:1d:fc:28:a2:1a:e3:37:3c:ed:f5:a6:52:28:55:59:cd:
         04:49:5c:97:da:a0:a8:e7:8d:9b:ed:a4:56:39:5e:87:6f:d9:
         c2:e9:27:16:d1:69:d4:c6:3d:5e:2d:85:2a:ee:52:43:39:90:
         c9:8b:aa:fd:3a:03:da:57:a3:61:f4:8a:6b:7e:8f:f7:8a:bc:
         a0:0c:6c:b9:40:7c:2c:5e:67:2a:b2:82:7c:c9:79:72:89:bd:
         7f:de:c4:81:c6:a7:0f:01:51:13:43:f6:2e:24:9f:4f:d7:5f:
         de:02:27:31:b8:7a:8a:8a:c2:64:2b:8e:fd:54:27:bb:df:83:
         7e:51:59:a5:8f:5c:77:b9:2a:0c:e0:01:71:57:4a:08:7e:d3:
         27:a6:ad:26:e3:1d:22:49:7b:d7:cf:98:5e:2b:09:7b:a4:0e:
         dd:ce:42:44:d9:5b:46:57:61:72:82:9f:fe:99:0e:fc:e7:e4:
         ea:bf:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org