Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.cer
File:                     B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.cer (raw, json)
Hash identifier:          4EmNb8PtW02nvZabEyD9LuSRt6C/1JvZYM6izNriKZw=
Subject key identifier:   B9:E1:CA:F4:DA:2C:CD:BE:E0:92:35:BF:DF:A9:00:FB:6D:8E:4F:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4102F36463AC09051D6C6172BF1ED0135AF5A58F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Aug 2021 12:49:55 +0000
Certificate not after:    Wed 10 Aug 2022 12:54:55 +0000
Subordinate resources:    AS: 267988
                          IP: 45.166.196.0/22
                          IP: 2804:5648::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:02:f3:64:63:ac:09:05:1d:6c:61:72:bf:1e:d0:13:5a:f5:a5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 12:49:55 2021 GMT
            Not After : Aug 10 12:54:55 2022 GMT
        Subject: CN=B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:01:e9:1d:b7:e4:94:8c:6a:04:f1:c4:73:2b:
                    41:12:3f:83:72:5b:d8:66:a0:3f:5a:f2:70:05:0a:
                    20:03:06:3f:5a:06:0c:56:64:f8:28:38:66:e1:72:
                    b0:22:a0:b7:0d:ff:ef:e0:7b:2f:e4:51:88:97:cf:
                    82:62:02:5b:8a:4e:48:51:d0:6d:0c:45:55:6a:a2:
                    98:ff:6c:e5:c2:12:3e:fd:84:6d:8a:d2:bd:37:3c:
                    0e:12:9f:d5:52:06:99:3e:d6:b3:a1:65:ba:2b:35:
                    ed:20:f1:0c:ef:c6:8a:3f:55:55:99:0e:4a:0f:c4:
                    19:69:0a:ed:26:d5:c7:d6:f7:a8:8c:95:c5:6b:70:
                    d7:66:22:94:4d:42:6a:16:c8:d4:18:05:6d:b6:38:
                    c3:97:f8:5c:ae:36:4b:92:42:de:15:59:4b:de:f9:
                    a9:91:0c:c0:60:ec:57:4e:d9:d8:8e:f9:3a:81:79:
                    36:37:6f:9b:c3:66:5a:f1:b1:16:7c:9d:35:1f:78:
                    f3:a4:7d:62:db:f0:9b:d8:a4:6a:bd:0a:68:68:3f:
                    a5:ac:04:f2:1a:48:f2:f9:88:0d:5a:58:50:2c:b2:
                    73:62:0e:8c:36:6d:2e:0d:76:85:21:33:33:bd:ce:
                    6e:76:6a:3f:45:01:41:d4:e5:8f:5d:c7:d9:2c:ff:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:E1:CA:F4:DA:2C:CD:BE:E0:92:35:BF:DF:A9:00:FB:6D:8E:4F:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.196.0/22
                IPv6:
                  2804:5648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267988

    Signature Algorithm: sha256WithRSAEncryption
         24:56:a6:d9:f6:35:19:2f:7c:84:5a:f8:97:62:24:b2:76:c5:
         80:da:01:51:3a:06:3a:49:b4:58:3f:7d:e6:81:13:3c:2e:6f:
         55:22:85:2f:2c:d0:bd:94:dd:75:3a:4c:45:52:16:c8:f1:cc:
         2f:f3:9a:8a:64:e8:ac:89:5e:f8:cc:48:be:83:77:f8:83:69:
         7c:14:78:74:68:d6:e6:0c:27:15:31:4c:ea:72:3e:9f:8e:ca:
         f5:c8:59:f7:42:32:67:f7:50:ec:65:52:bd:cf:8a:e6:9d:38:
         99:e1:69:5b:1a:ed:fa:f4:ae:ff:a1:da:95:fc:09:78:fe:39:
         15:f8:c2:1a:5e:b4:3f:62:ae:83:73:aa:38:66:7e:24:d3:97:
         ec:1d:32:3c:f7:c4:f6:d5:63:80:c8:2d:50:6f:d3:eb:d6:bb:
         61:26:53:cb:21:69:ad:cd:b6:04:d4:63:49:c5:b5:a3:3e:b0:
         32:6d:6d:4e:01:76:c2:88:ae:16:94:68:d0:65:38:92:b7:7e:
         8a:bd:88:5a:00:67:1b:61:bf:82:6c:1c:70:d7:5d:7f:30:09:
         f6:d2:14:9a:8b:97:4f:a2:c9:79:df:e6:23:72:80:fa:59:5f:
         dc:58:57:89:77:81:75:9a:af:71:a2:8b:e7:1a:91:08:d1:43:
         55:0a:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org