Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B9230901E8518858475596651A1A02C3407F0B17.cer
File:                     B9230901E8518858475596651A1A02C3407F0B17.cer (raw, json)
Hash identifier:          v4E9ijQmDjHWLsc1mqQN8YAYD+dqIXVqPRS9fAAC9RQ=
Subject key identifier:   B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38EAB9AF3DCE03E3D2975E98801E562A097903D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 15:05:54 +0000
Certificate not after:    Thu 27 Jun 2024 15:10:54 +0000
Subordinate resources:    AS: 263476
                          IP: 191.242.104.0/21
                          IP: 2804:126c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ea:b9:af:3d:ce:03:e3:d2:97:5e:98:80:1e:56:2a:09:79:03:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 15:05:54 2023 GMT
            Not After : Jun 27 15:10:54 2024 GMT
        Subject: CN=B9230901E8518858475596651A1A02C3407F0B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:e4:7d:1e:d8:f0:23:2f:3d:3e:06:bc:2e:
                    94:0d:b3:95:24:ce:17:c8:fb:29:ab:1c:94:f4:68:
                    b5:57:9d:9b:35:07:20:86:77:4e:a3:09:0d:4d:20:
                    f2:16:48:59:ad:c6:49:35:f5:77:1e:ae:b1:f9:dd:
                    21:ef:c5:8a:03:85:e4:49:fd:f7:01:f1:4a:f4:a7:
                    cb:39:c5:c1:19:49:68:0f:2f:12:1c:05:16:02:23:
                    54:4f:f4:3b:89:91:60:a0:f5:7d:ed:75:10:70:9d:
                    4f:8f:fd:11:37:2d:76:c6:2d:8f:21:ee:7b:d4:76:
                    be:87:31:c9:9c:34:7c:ce:7d:af:77:3e:2c:fe:0b:
                    05:89:cc:8f:25:00:38:18:dc:14:d8:e9:cb:d4:58:
                    0b:06:f5:90:46:9d:9c:9b:db:9c:dc:37:8a:e5:00:
                    de:cd:db:aa:dd:cc:0c:ca:97:b5:a7:36:20:45:1a:
                    c2:ad:d5:f8:c3:36:16:29:91:51:a1:b2:45:6d:ff:
                    d2:e0:30:a5:11:af:07:56:8f:22:e2:74:d8:d3:30:
                    b0:df:04:65:51:62:3e:6a:f8:62:51:4d:8b:e3:9e:
                    4a:d9:68:a2:5a:fd:d2:04:a1:3b:5c:21:56:24:9e:
                    32:01:00:b0:5b:41:50:c5:03:ba:7f:63:09:2e:93:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:23:09:01:E8:51:88:58:47:55:96:65:1A:1A:02:C3:40:7F:0B:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/0/B9230901E8518858475596651A1A02C3407F0B17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.104.0/21
                IPv6:
                  2804:126c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263476

    Signature Algorithm: sha256WithRSAEncryption
         b4:c0:0c:52:19:d9:2d:aa:60:86:ca:56:8f:31:95:28:78:01:
         5c:2b:e6:0d:0a:d1:32:68:0b:11:57:ce:13:a6:65:49:1c:e2:
         64:a9:b6:d4:47:6d:35:38:36:46:4e:8e:a1:ec:f5:02:b8:2f:
         5b:cc:3f:51:2c:b3:b8:25:0f:09:0b:37:d5:a5:7c:28:2c:26:
         26:c4:4d:7d:b0:7a:26:ad:9b:e5:56:0c:e1:fc:60:53:3a:45:
         bb:3f:84:c4:60:a3:51:5f:39:c2:77:4d:43:5c:83:8e:f6:38:
         91:bb:07:e3:66:6a:96:21:a6:8c:c8:f8:bc:03:b8:a3:b6:2a:
         7f:1f:ec:da:02:2b:f6:ec:9b:30:e0:29:fb:b6:72:64:30:0a:
         0b:4d:15:91:06:d8:63:a2:e9:f7:d1:34:06:87:44:0a:17:87:
         d2:c4:87:d0:f4:ea:1c:e5:53:4e:ae:fd:f7:10:7b:15:e5:54:
         ed:5c:25:04:03:9d:f6:a4:f8:46:82:fe:fe:d2:46:4d:46:82:
         ef:11:21:dd:29:78:2b:ff:c7:db:2b:56:d4:70:36:93:26:19:
         e4:c2:d2:50:da:1e:43:f5:0b:0b:a8:c5:a0:da:8a:89:b4:9f:
         32:b9:d3:07:62:ad:24:e2:f2:6c:4b:7d:87:cb:a5:d6:5e:ab:
         14:81:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org