Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B8E2231D6540310D89D8497FFF5DD8C6B897501F.cer
File:                     B8E2231D6540310D89D8497FFF5DD8C6B897501F.cer (raw, json)
Hash identifier:          SgDV2cYhLA6DaxLUZK8rbKsBEkfyCWGfaFTkTlup3vI=
Subject key identifier:   B8:E2:23:1D:65:40:31:0D:89:D8:49:7F:FF:5D:D8:C6:B8:97:50:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       419EDF5C37895726018250583AD54A4DD88FA427
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/B8E2231D6540310D89D8497FFF5DD8C6B897501F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 19:03:07 +0000
Certificate not after:    Mon 03 Mar 2025 19:08:07 +0000
Subordinate resources:    AS: 271514
                          IP: 190.102.44.0/22
                          IP: 2804:7cb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9e:df:5c:37:89:57:26:01:82:50:58:3a:d5:4a:4d:d8:8f:a4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 19:03:07 2024 GMT
            Not After : Mar  3 19:08:07 2025 GMT
        Subject: CN=B8E2231D6540310D89D8497FFF5DD8C6B897501F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:6b:ee:91:46:51:17:e6:38:43:5e:68:c4:
                    c0:62:cd:98:44:9c:0c:89:25:b4:2e:49:5b:3f:5c:
                    11:4c:b3:49:d7:1c:f2:bc:39:bd:af:13:b8:61:3c:
                    1d:94:6f:dc:27:45:f3:6d:c8:a6:a2:de:be:f5:7d:
                    59:b0:20:16:75:f5:03:3b:15:07:9f:1d:7f:68:d7:
                    71:73:78:6d:d8:70:8f:d1:c2:c2:95:f7:75:c9:e4:
                    5d:ac:55:43:a4:f8:6e:84:d9:61:0f:6a:42:c4:78:
                    44:0b:20:68:13:b2:af:de:52:8f:fb:89:1b:d6:35:
                    6a:9a:fb:41:a3:2a:bf:11:e2:98:af:60:f3:16:fe:
                    76:46:23:59:02:32:3c:87:c4:4f:c4:f5:40:a6:b9:
                    74:e2:da:09:8d:eb:04:b2:ae:c3:ff:0d:8e:59:3f:
                    81:9a:9e:fe:3a:22:05:67:b7:a8:b6:1f:c1:80:0e:
                    95:28:ee:f1:35:0a:e6:dc:d5:96:a1:a3:8f:1b:07:
                    24:f6:3a:61:a6:1a:8a:47:de:89:93:e3:82:cf:ba:
                    6c:9d:80:af:cc:d9:4e:cb:9c:2a:19:e5:72:79:60:
                    06:a9:95:9e:2f:73:04:62:a7:28:54:bc:b5:2e:04:
                    0a:60:bd:51:5f:cd:aa:ad:be:d4:53:a8:9c:6c:2f:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:E2:23:1D:65:40:31:0D:89:D8:49:7F:FF:5D:D8:C6:B8:97:50:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/B8E2231D6540310D89D8497FFF5DD8C6B897501F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.44.0/22
                IPv6:
                  2804:7cb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271514

    Signature Algorithm: sha256WithRSAEncryption
         10:51:06:fb:9d:04:0f:9c:e8:ba:cf:5f:25:09:42:37:04:03:
         e2:6c:6f:19:fb:8b:82:08:75:e6:8a:38:0e:a7:19:a0:46:5c:
         f0:83:85:95:a2:ed:aa:f3:9f:df:2f:c2:76:44:2f:7e:04:f1:
         be:cc:bb:11:fe:27:7d:6d:5e:25:85:4f:b5:ba:b2:66:67:4d:
         32:54:d4:3c:9f:c1:ef:12:73:95:96:52:4c:f2:41:39:ba:18:
         62:cf:c5:1d:94:ea:f0:36:eb:fa:67:de:29:4a:43:2c:54:4e:
         f2:f3:d6:1d:9b:4f:1e:d1:39:5b:ec:0f:60:37:2e:47:2e:cd:
         20:a4:00:e6:29:0f:f6:35:e3:66:9c:58:d3:01:99:d1:cd:e4:
         cc:bc:22:a5:2c:41:f6:0c:27:93:60:04:b9:91:8a:bf:aa:0e:
         f7:70:6d:96:fa:ad:85:9b:cc:c0:5d:31:5b:9e:a6:fa:51:a4:
         d8:4a:53:4e:2a:ec:b3:8f:f6:fd:6f:34:12:27:4f:16:6f:ac:
         31:79:9f:ea:cc:a5:08:7c:00:06:22:3d:96:37:20:d5:49:b1:
         00:65:81:a2:65:02:7b:86:3d:66:e8:72:01:71:d3:d6:51:ff:
         62:45:03:ee:f3:63:f3:57:2c:86:ca:0e:f7:f1:23:3e:7f:5c:
         f1:1f:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org