Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B96CDA5B1678A62C00D19F10C5FDFC6273A5E476.cer
File:                     B96CDA5B1678A62C00D19F10C5FDFC6273A5E476.cer (raw, json)
Hash identifier:          vZYNog4pX4BCxGTdYzZ7ZFabJyx4TPfSs0kV8/H0Gd8=
Subject key identifier:   B9:6C:DA:5B:16:78:A6:2C:00:D1:9F:10:C5:FD:FC:62:73:A5:E4:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D65AB59BDBB8AE599A661394FBB30EE4E2D9915
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/B96CDA5B1678A62C00D19F10C5FDFC6273A5E476.mft
caRepository:             rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Feb 2022 13:56:29 +0000
Certificate not after:    Sat 25 Feb 2023 14:01:29 +0000
Subordinate resources:    AS: 28191
                          IP: 186.193.176.0/20
                          IP: 189.90.32.0/20
                          IP: 2804:c2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:65:ab:59:bd:bb:8a:e5:99:a6:61:39:4f:bb:30:ee:4e:2d:99:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 13:56:29 2022 GMT
            Not After : Feb 25 14:01:29 2023 GMT
        Subject: CN=B96CDA5B1678A62C00D19F10C5FDFC6273A5E476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:e2:84:07:d4:45:2c:71:e6:a1:85:ec:14:
                    1d:61:a2:d2:ab:5e:19:c1:15:f3:79:b6:2b:c7:cd:
                    25:54:01:0d:5e:15:58:59:1f:2a:7c:b9:28:7a:2f:
                    6e:66:9c:b8:95:82:ea:db:11:49:a9:1f:9c:22:5d:
                    9e:09:8d:4b:4a:d3:81:e6:f2:5b:2f:5c:f7:a0:7b:
                    86:0a:dd:cc:de:3a:d3:f7:04:08:f3:e2:b7:ad:cb:
                    4c:0b:39:51:57:ff:2a:be:5c:8c:33:3c:9e:de:63:
                    4c:34:30:bf:95:cc:99:01:f1:ae:0c:06:41:f0:93:
                    6e:16:b3:00:19:37:3b:ff:ba:bc:bc:6d:c6:50:db:
                    43:50:fb:58:e6:7e:90:d8:e9:f3:64:d5:f2:68:da:
                    5e:6d:e7:bb:86:94:5f:00:c9:00:9b:a7:37:92:6e:
                    62:64:6f:79:74:a4:c1:44:8a:ce:bc:b6:fd:0a:d3:
                    6c:0c:c0:83:41:97:2a:87:17:81:d2:f2:d7:dd:67:
                    69:41:ef:c2:78:87:6e:55:ae:ca:0b:e0:86:54:e6:
                    95:1f:a8:d7:cc:a6:79:f9:fb:66:76:54:26:0b:91:
                    44:0f:22:52:46:38:a4:7f:8c:ec:de:29:2d:90:c0:
                    06:bd:b8:fc:bd:f8:a3:da:01:b2:35:c6:46:7d:95:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:6C:DA:5B:16:78:A6:2C:00:D1:9F:10:C5:FD:FC:62:73:A5:E4:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/B96CDA5B1678A62C00D19F10C5FDFC6273A5E476.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20
                  189.90.32.0/20
                IPv6:
                  2804:c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28191

    Signature Algorithm: sha256WithRSAEncryption
         b1:cf:a1:4b:ec:a5:96:21:f0:44:63:2b:94:a5:de:8a:6a:6c:
         7c:b7:d6:2c:2c:18:1a:df:bd:6f:79:11:35:cb:09:f0:e7:9b:
         bf:9d:67:37:81:c5:32:28:de:b7:13:19:38:87:4c:79:8a:60:
         8e:89:25:e7:03:7e:51:25:7f:c5:d8:1a:94:8c:d2:b2:ee:f4:
         3d:49:cf:c1:c5:fa:73:71:b8:64:08:e9:24:38:42:e3:d3:07:
         2a:77:93:99:e7:bf:2f:35:4a:f8:f8:64:93:44:2d:fc:53:f3:
         c9:8a:a1:4a:7a:f2:dd:c7:7d:4e:22:87:17:20:e7:03:d7:aa:
         29:78:3c:36:46:9c:1b:a0:cf:a2:91:97:0f:43:a2:ea:12:cd:
         ae:30:02:2c:b5:e5:8c:2b:1d:e1:33:43:1b:97:0f:0f:98:44:
         19:cf:43:89:35:cf:7b:a6:15:65:bc:a2:8a:47:be:a4:c6:da:
         39:02:75:44:a7:8b:72:eb:8d:79:69:8f:06:db:75:66:71:8d:
         0e:94:3f:93:9e:be:ff:85:c3:5d:e7:40:fb:a4:52:33:de:fc:
         ef:31:1b:6d:b1:e4:93:26:a1:61:b5:66:ed:30:f1:87:f1:fa:
         1d:04:fe:20:97:54:0e:76:aa:44:5a:0e:17:02:3c:40:54:07:
         5d:58:c9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org