Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B943234B1E0E8C07131A6F16CBB8380FD702B69B.cer
File:                     B943234B1E0E8C07131A6F16CBB8380FD702B69B.cer (raw, json)
Hash identifier:          NJ2p4BzXG3+wpBHjTsbFhdGVQMeV0lJrgxe99MpK10Q=
Subject key identifier:   B9:43:23:4B:1E:0E:8C:07:13:1A:6F:16:CB:B8:38:0F:D7:02:B6:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40402F0AEE2F32888A13433D2F1DEF2AA6C1F131
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/B943234B1E0E8C07131A6F16CBB8380FD702B69B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 20:18:51 +0000
Certificate not after:    Fri 03 Jan 2025 20:23:51 +0000
Subordinate resources:    AS: 267500
                          IP: 201.182.60.0/22
                          IP: 2804:4270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:40:2f:0a:ee:2f:32:88:8a:13:43:3d:2f:1d:ef:2a:a6:c1:f1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 20:18:51 2024 GMT
            Not After : Jan  3 20:23:51 2025 GMT
        Subject: CN=B943234B1E0E8C07131A6F16CBB8380FD702B69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:df:eb:55:c3:33:10:78:6b:e2:3a:1a:a7:
                    b3:54:e1:37:6d:86:23:b2:a5:bb:50:f5:95:f1:f3:
                    62:8e:74:70:e4:61:30:0d:b7:4d:25:c5:6d:e1:7a:
                    6e:34:04:37:d0:8e:50:d8:e7:b6:20:59:68:61:bc:
                    14:a6:3b:66:a3:76:c3:5c:b6:bb:6d:0d:dd:3a:27:
                    4b:d5:57:b6:05:f9:a6:a7:eb:fd:ed:48:2f:6f:2a:
                    b5:38:38:ce:85:67:b8:52:f9:f5:ef:94:55:48:17:
                    ce:fc:42:f0:86:dd:cf:e4:5e:03:4d:98:6a:dd:c2:
                    eb:6d:0c:3d:98:8a:b8:41:5d:53:91:59:8c:ee:ee:
                    b0:bc:d1:50:2f:9c:64:60:98:1d:2c:c0:35:6f:d7:
                    0a:c1:eb:16:67:34:f9:48:c3:93:ac:7f:97:61:c2:
                    d3:8f:25:e4:8c:d8:38:74:99:2f:b0:06:e2:8d:c6:
                    bf:c5:b0:0b:06:d5:dd:ff:06:a7:52:fa:56:09:15:
                    1c:85:2c:64:e6:c0:0e:83:66:c0:18:d2:b3:fa:7d:
                    4f:48:93:9a:a0:ac:0f:0c:35:34:b7:fa:e2:35:28:
                    5a:ae:e3:34:29:c3:72:31:26:6e:ff:50:e0:59:ae:
                    ab:d4:70:eb:51:7c:b5:7b:89:53:b8:cf:a2:8a:e6:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:43:23:4B:1E:0E:8C:07:13:1A:6F:16:CB:B8:38:0F:D7:02:B6:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/B943234B1E0E8C07131A6F16CBB8380FD702B69B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.60.0/22
                IPv6:
                  2804:4270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267500

    Signature Algorithm: sha256WithRSAEncryption
         8b:55:06:73:13:6d:ba:7c:27:7e:3c:3c:cc:8b:68:4e:a3:94:
         94:7c:89:fc:69:14:fc:3f:a5:03:14:40:44:e0:5c:6f:d5:15:
         93:ba:13:5b:be:d3:36:e4:ad:5b:f2:e8:93:74:52:94:a0:90:
         25:3b:92:58:02:83:67:14:46:53:30:71:1e:83:ba:4d:7a:74:
         a9:0e:e0:fc:9a:95:3b:75:e6:57:48:19:c0:72:95:02:26:88:
         0b:04:ff:1b:6d:18:16:7a:3b:ca:dd:45:b7:6c:5d:df:40:b2:
         0c:d3:b1:9d:cc:21:4e:91:63:d2:c9:78:73:81:75:1c:47:ae:
         84:3d:50:fc:9b:9f:fd:bf:a4:e1:fa:64:93:45:96:ad:fd:3b:
         7e:1a:6c:9c:30:06:87:25:2a:1e:f6:54:a9:fb:80:a4:63:1b:
         5a:ea:f2:e2:7f:d2:78:29:2f:c4:55:85:a8:40:b8:79:cd:ce:
         4a:81:bb:c3:9b:39:9d:8f:f6:22:70:28:7d:b4:91:8d:44:1f:
         fa:f4:60:c0:1a:47:3d:2b:07:c9:01:a6:66:3c:67:4e:4a:99:
         b6:6f:96:f0:29:d4:0f:1a:99:c5:d9:d0:ba:86:3c:00:9e:40:
         c3:0a:32:c8:ac:90:9c:2e:cc:c9:d0:1c:e0:28:60:dd:0a:79:
         8a:37:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org