Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.cer
File:                     B96FEADF9316E231DB8131B9B3B6E87DC86A4517.cer (raw, json)
Hash identifier:          nuYD2ydzwvMP5pjH9rlL6Ms0fe0eZ00CdsEGphB6DBk=
Subject key identifier:   B9:6F:EA:DF:93:16:E2:31:DB:81:31:B9:B3:B6:E8:7D:C8:6A:45:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34799F1DD74F82F046FE27ACFD1EED15840EE422
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jun 2023 05:48:59 +0000
Certificate not after:    Sat 22 Jun 2024 05:53:59 +0000
Subordinate resources:    AS: 264429
                          IP: 131.221.132.0/22
                          IP: 170.245.116.0/22
                          IP: 2804:1e70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:79:9f:1d:d7:4f:82:f0:46:fe:27:ac:fd:1e:ed:15:84:0e:e4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 24 05:48:59 2023 GMT
            Not After : Jun 22 05:53:59 2024 GMT
        Subject: CN=B96FEADF9316E231DB8131B9B3B6E87DC86A4517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:9a:f6:6b:f8:e9:4b:b2:d4:0f:47:df:f2:
                    e3:3d:80:f9:8b:bd:44:a6:f9:02:a0:60:e1:66:6b:
                    fa:75:05:52:a3:5a:3d:10:01:83:d7:6f:8f:f0:65:
                    a1:39:1a:b8:1c:3b:ff:ee:72:06:8c:34:cb:93:26:
                    ca:dc:77:84:1d:37:ab:e0:b4:e2:dd:3d:d9:7e:a5:
                    dc:c7:f1:a6:62:ad:47:61:ee:59:f4:27:b2:9e:dd:
                    39:fd:99:e4:09:b3:3b:d6:fa:7b:73:76:05:97:83:
                    75:22:d3:56:6c:aa:26:a7:16:66:0f:c6:81:e8:18:
                    81:5e:b7:e1:4a:f9:06:a9:3a:e2:72:15:31:06:09:
                    c1:e9:21:f5:d4:ed:b1:91:60:76:a6:4d:36:cb:03:
                    1e:19:92:44:cc:96:e1:4a:50:d8:81:e6:f9:92:db:
                    8a:a4:d3:4a:07:11:97:24:36:fc:61:d7:10:dc:c2:
                    3b:aa:10:fc:80:26:5c:68:40:f9:0d:f9:2c:78:82:
                    0a:ba:f7:46:5f:b4:f8:57:24:30:04:c3:23:c8:6b:
                    61:2e:6f:d6:71:61:4f:1a:44:c7:ab:57:0e:18:e4:
                    70:fa:57:a8:e3:90:2d:4a:8a:54:12:66:61:8f:b5:
                    5f:09:6a:ff:4c:63:44:5c:89:c5:3b:91:87:b7:43:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:6F:EA:DF:93:16:E2:31:DB:81:31:B9:B3:B6:E8:7D:C8:6A:45:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.132.0/22
                  170.245.116.0/22
                IPv6:
                  2804:1e70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264429

    Signature Algorithm: sha256WithRSAEncryption
         b2:7c:2e:4e:be:0b:1d:68:b2:14:ee:62:2c:19:83:4a:b2:f0:
         e8:82:c1:16:50:5b:ff:7f:6a:8d:38:6a:5a:2c:40:34:ca:71:
         93:4a:c6:b0:f8:20:70:09:06:04:4f:e7:d8:80:2a:06:b6:0c:
         f1:5f:e1:10:5f:4d:57:fc:7e:36:64:70:df:1f:ec:05:e3:2f:
         b7:66:10:5d:d8:80:b7:40:22:99:1f:ea:b6:59:fc:98:29:af:
         26:2a:26:e1:fe:88:c9:c6:f1:f4:32:fd:71:26:2f:70:8c:e2:
         f5:01:6c:50:1d:a0:ce:fb:13:da:72:3e:d6:aa:fc:25:b3:ca:
         6c:83:20:38:69:51:14:7b:08:b4:6c:62:bd:d2:a3:4e:21:bc:
         f8:f9:b9:c5:c6:af:0d:5f:8e:57:10:e3:80:16:57:25:c9:3c:
         da:d2:24:86:12:b1:22:6b:34:d7:3f:14:b7:92:74:96:f9:cc:
         47:5d:d6:f6:b3:14:30:fd:ac:a7:da:6b:5b:57:e4:7a:00:d9:
         24:ca:d8:d8:fc:4c:9a:bd:04:4e:e3:a6:0d:cb:d5:be:5f:86:
         fd:00:c9:cc:85:89:9a:34:ff:c0:d0:47:0b:6a:ce:eb:07:c8:
         9a:71:9f:24:33:f4:15:12:2c:5a:0e:d6:87:d9:5e:40:32:62:
         77:0d:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org