Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer
File:                     B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer (raw, json)
Hash identifier:          HNmU+ebqj58eg5Kmgt05vt9lP7KRM1k1Q3Hwac9sdIA=
Subject key identifier:   B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B6D2259C342CF63D6C24B94D3F2F44540E4524C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 22:13:29 +0000
Certificate not after:    Wed 25 Sep 2024 22:18:29 +0000
Subordinate resources:    AS: 52756
                          IP: 170.245.134.0/23
                          IP: 177.11.252.0/24
                          IP: 2801:80:1c10::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6d:22:59:c3:42:cf:63:d6:c2:4b:94:d3:f2:f4:45:40:e4:52:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 22:13:29 2023 GMT
            Not After : Sep 25 22:18:29 2024 GMT
        Subject: CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f8:ff:65:15:15:3b:41:4a:90:ba:8c:c6:89:
                    5a:d8:0c:a8:4f:e8:ba:88:9e:bd:88:4e:94:ba:4e:
                    d3:a1:aa:e8:31:0d:88:b6:57:1a:11:b1:eb:ac:cf:
                    39:67:c7:41:d8:9d:67:52:23:52:27:66:d2:63:98:
                    d5:8c:39:57:e3:bd:93:5e:c2:2b:66:d0:c1:eb:be:
                    24:63:5f:56:a7:6f:d9:a1:74:33:a2:a3:f2:7c:d5:
                    e9:bc:ed:bd:85:75:b7:67:2a:4e:7d:0f:4a:04:7a:
                    d1:9f:b6:c0:07:31:09:66:43:f2:64:9e:07:5e:c6:
                    db:4a:1e:fe:0f:51:7e:df:e0:9a:16:e8:50:fc:a4:
                    75:5f:19:cb:2f:de:3e:b9:10:f1:13:c0:61:e1:fb:
                    2e:da:7d:80:c5:7b:0d:54:e8:27:d7:4c:bd:95:f7:
                    d1:81:d0:d4:ee:c1:4a:36:d6:89:b0:e3:2e:f5:79:
                    ee:63:26:b7:ab:f6:f7:4c:d4:c6:e0:f5:41:32:c3:
                    2f:55:ea:7d:ef:97:55:e9:e3:55:c1:3b:c2:44:73:
                    19:41:f5:f7:53:35:a7:bf:97:6b:bb:8c:ef:2e:f1:
                    bd:86:21:8d:2c:ee:48:0e:b4:3d:a0:bb:5e:d1:eb:
                    dc:f9:b0:a2:e8:84:be:47:a1:d9:f8:b2:31:a2:58:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.134.0/23
                  177.11.252.0/24
                IPv6:
                  2801:80:1c10::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52756

    Signature Algorithm: sha256WithRSAEncryption
         9a:eb:57:01:55:13:55:4e:93:b2:2c:1a:13:47:a4:34:af:ee:
         ae:21:65:3d:49:d6:ae:e3:08:e9:1b:1c:ce:d2:87:7c:70:7d:
         52:53:47:94:bc:aa:61:2b:61:c7:ef:cc:8d:80:e9:be:c9:c3:
         11:13:0b:c0:f0:46:0c:14:3c:95:82:1c:18:66:ae:66:7b:c9:
         a0:92:c2:4f:dd:f7:03:db:ef:26:f0:dc:d1:74:0a:d6:aa:80:
         de:14:c1:0f:ef:e0:f6:a9:d1:13:5a:81:dc:c5:4b:ff:eb:0a:
         0d:37:a3:38:d4:8f:79:ac:55:d1:07:db:4f:f4:bd:46:ea:34:
         e0:34:0d:0f:6a:9e:71:63:6f:9f:4b:d8:98:b2:02:5d:17:d9:
         83:e0:1f:7e:21:40:c2:d1:93:e2:e0:3d:06:38:36:08:45:f9:
         b1:2b:f5:e2:31:25:a3:66:6e:25:28:7c:c0:1d:67:ea:e3:10:
         85:02:c7:15:43:98:fa:3f:81:58:75:01:14:8d:6d:d8:5e:35:
         71:ac:30:45:f0:ff:25:09:81:51:ee:40:ba:41:a6:57:a2:b8:
         40:0a:5f:7f:a8:bc:ca:7a:9a:e2:00:d7:46:49:63:ea:eb:66:
         42:56:3b:18:88:f6:6c:87:52:b3:41:27:7d:45:96:4b:6f:23:
         5b:92:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org