Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B91806196E8F48D9BB75CB01CD6A3F636CBA2205.cer
File:                     B91806196E8F48D9BB75CB01CD6A3F636CBA2205.cer (raw, json)
Hash identifier:          tLy+tg05N+sNQbyfCG+atzSewqxWEvB9l7LtPYdy6rI=
Subject key identifier:   B9:18:06:19:6E:8F:48:D9:BB:75:CB:01:CD:6A:3F:63:6C:BA:22:05
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       391B60450E7AF6BADBC7DA6FEC8BA7E324B7E955
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/B91806196E8F48D9BB75CB01CD6A3F636CBA2205.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 17:37:59 +0000
Certificate not after:    Fri 14 Mar 2025 17:42:59 +0000
Subordinate resources:    AS: 262997
                          IP: 186.219.255.0/24
                          IP: 2804:9d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1b:60:45:0e:7a:f6:ba:db:c7:da:6f:ec:8b:a7:e3:24:b7:e9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 17:37:59 2024 GMT
            Not After : Mar 14 17:42:59 2025 GMT
        Subject: CN=B91806196E8F48D9BB75CB01CD6A3F636CBA2205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:07:00:ae:4e:0f:0a:d6:6b:84:df:cd:90:
                    81:94:0c:1a:ad:9d:fd:fe:d4:72:ba:ab:48:16:68:
                    f9:e0:89:a1:9a:45:15:99:67:09:f6:4b:af:7b:88:
                    c0:5f:a7:bd:0f:9a:32:6b:49:94:1f:04:1f:d1:04:
                    d4:29:03:0c:06:06:6c:6d:10:d8:30:87:1a:5c:e7:
                    8f:a8:24:af:21:b4:5e:a3:5f:b2:75:72:ed:c7:27:
                    b4:6d:ab:ec:2f:f7:e4:5f:c5:84:2a:f1:f0:77:1b:
                    41:00:e5:35:61:20:61:e8:dd:0d:cf:c3:d1:66:de:
                    a3:e3:ad:f8:45:f3:f5:02:6f:21:91:6a:c1:53:18:
                    49:ef:a5:88:98:6d:2f:c6:1d:ed:9b:e7:cf:3b:e4:
                    87:04:5b:ce:ca:d5:ca:aa:db:5c:03:40:a6:c4:33:
                    5c:0d:86:e0:0c:f0:ca:99:ee:21:af:48:06:15:d6:
                    6f:03:3e:64:b8:5a:c5:ff:f0:58:63:7e:91:1f:b2:
                    ad:26:47:c3:83:e3:30:e5:75:5d:51:ac:3d:c7:ce:
                    a5:a9:44:15:19:e3:85:89:94:e4:68:50:fa:58:8e:
                    3b:55:02:32:e3:d1:f8:c0:db:57:d6:d6:be:d4:5d:
                    4e:cc:cb:85:62:bc:d2:02:fb:fa:d9:f6:82:79:61:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:18:06:19:6E:8F:48:D9:BB:75:CB:01:CD:6A:3F:63:6C:BA:22:05
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6WrRU2JJxSuTSHDULqWbpuGxFW2fsfuqnXU3syFFufMt/0/B91806196E8F48D9BB75CB01CD6A3F636CBA2205.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.255.0/24
                IPv6:
                  2804:9d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262997

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:b1:2a:7f:ed:47:d1:be:ad:3a:c5:bd:25:13:e7:d8:16:
         e2:0d:49:0d:0a:ee:06:cf:82:89:7d:f2:e2:7c:d2:f4:1e:8e:
         08:ba:8a:80:fb:bc:56:3b:56:6d:94:80:c5:98:6f:58:2b:68:
         a4:b1:b3:7a:4e:bc:d6:0f:37:bf:b3:af:43:f7:83:32:57:44:
         a6:5f:65:a0:17:e6:8f:6d:a5:bc:8b:91:0a:e4:d2:7e:f3:a7:
         1c:79:8a:6c:ad:06:86:02:78:b3:fc:09:82:00:19:0c:89:77:
         88:b7:3f:44:c7:33:d3:e7:bf:33:14:7f:6b:a7:8f:ef:bb:5f:
         d2:c0:e2:0e:06:dc:ef:54:f9:e1:99:e4:99:62:8a:2c:e0:9e:
         91:da:94:8a:7b:41:1b:4d:d4:5f:0d:93:32:25:05:8a:a5:0e:
         8e:e1:73:d2:83:22:41:c3:2e:f5:43:00:df:dc:3f:a2:f3:7e:
         1b:48:1a:0e:0f:33:ba:f0:c8:40:af:9b:62:fa:95:ae:a4:71:
         ad:e7:37:4a:4f:cc:8d:4c:39:fb:38:cf:ce:d6:d5:ba:05:d7:
         b0:b7:a4:a5:d2:4a:6e:39:a5:5a:cd:9f:98:de:de:6b:e9:12:
         a3:e3:cb:df:9d:7f:f2:37:82:e3:34:6e:03:8d:5b:4a:3a:8f:
         35:35:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org