Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4.cer
File:                     C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4.cer (raw, json)
Hash identifier:          Dxsq6LS7UK6km+j4Dn/0LcVbiWq/qKtJmBUOJonPdyQ=
Subject key identifier:   C0:BF:8A:62:3C:4C:DF:E1:EC:E5:96:14:E9:F6:A3:12:1A:23:B4:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D76C3327FBAEE89DC7EA604A15CC3E3416188A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FpDeUSzMqecgGSGwDuFYzjtwZh7CRRSZXpW3GqMKBqDK/0/C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FpDeUSzMqecgGSGwDuFYzjtwZh7CRRSZXpW3GqMKBqDK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 13:43:44 +0000
Certificate not after:    Mon 06 Jan 2025 13:48:44 +0000
Subordinate resources:    AS: 270893
                          IP: 189.84.100.0/22
                          IP: 2804:7310::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:76:c3:32:7f:ba:ee:89:dc:7e:a6:04:a1:5c:c3:e3:41:61:88:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 13:43:44 2024 GMT
            Not After : Jan  6 13:48:44 2025 GMT
        Subject: CN=C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2b:91:1b:49:16:74:78:67:0c:c9:d1:55:7b:
                    39:88:79:92:60:e4:29:67:11:18:16:31:83:00:0a:
                    ca:77:4f:b5:0d:6f:06:4d:9b:90:f0:33:e7:bb:49:
                    ad:84:c4:25:32:46:b2:95:51:d9:bd:b0:72:99:64:
                    de:99:79:8a:e4:10:18:14:04:3b:13:d9:78:44:53:
                    d5:cf:1f:19:1b:e3:94:0c:fc:ee:fb:80:f9:12:4c:
                    cb:f0:f1:d2:b0:f1:be:86:88:ee:b1:5a:72:8b:54:
                    e7:1c:43:3a:0c:f7:55:a9:3b:bc:df:30:66:95:2a:
                    9c:61:b3:d8:22:f7:f2:05:d4:29:5e:ed:ca:34:2a:
                    11:07:ac:b1:23:c6:92:09:6e:f3:0a:5e:c7:d2:c5:
                    fe:6c:d2:1e:c2:a5:ca:8e:d8:1d:00:be:f5:4a:d0:
                    ac:b6:c2:2f:a1:c3:f9:eb:6a:a1:85:f3:17:c8:b1:
                    a5:f0:76:a2:32:41:80:8e:03:38:8e:47:aa:63:6a:
                    de:40:ae:01:48:5a:bc:19:37:de:fa:f7:11:e2:b4:
                    4a:df:3c:4d:c8:0d:b9:09:21:07:21:47:8d:6a:8a:
                    0d:76:2d:52:14:7a:e4:9a:2d:1f:50:2c:49:43:6d:
                    cc:7a:c6:53:b6:6a:1f:1f:8a:2b:60:0b:70:3f:ed:
                    09:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:BF:8A:62:3C:4C:DF:E1:EC:E5:96:14:E9:F6:A3:12:1A:23:B4:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FpDeUSzMqecgGSGwDuFYzjtwZh7CRRSZXpW3GqMKBqDK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FpDeUSzMqecgGSGwDuFYzjtwZh7CRRSZXpW3GqMKBqDK/0/C0BF8A623C4CDFE1ECE59614E9F6A3121A23B4B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.100.0/22
                IPv6:
                  2804:7310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270893

    Signature Algorithm: sha256WithRSAEncryption
         47:f3:a3:38:f5:c8:23:ca:ee:dd:c3:59:4a:59:6f:df:8d:e2:
         8b:23:a3:63:73:0c:81:79:92:d4:f7:40:09:6f:b1:1a:7b:a2:
         3b:d1:3c:2b:a6:45:ea:8b:57:51:8d:c2:a3:58:0f:b0:ab:2d:
         38:5d:04:ec:b0:81:3d:23:bf:ab:e0:be:b3:01:39:22:72:d4:
         82:50:50:6c:ba:3c:38:73:d5:18:82:a8:ae:ab:86:85:78:ae:
         b3:7c:50:d2:91:58:63:e8:01:26:05:ae:13:4a:53:fb:73:81:
         1a:78:58:42:3a:47:cc:9c:4d:54:7e:84:64:d0:4f:1d:8b:d6:
         ac:52:ed:b2:5b:e0:c7:01:dd:4c:11:cc:ec:a7:3b:d4:ad:60:
         86:f7:e1:b8:31:9b:43:57:cd:f7:f0:49:99:9f:a4:32:68:99:
         cc:39:8c:9d:54:3b:0c:e4:d4:e2:06:a9:77:5b:a6:2c:31:d5:
         6f:21:df:84:a5:84:a7:95:cb:36:21:08:4c:e5:14:4a:85:05:
         fd:d2:d3:2c:4c:9f:50:70:4c:e6:b5:d0:a5:e5:43:6c:c2:34:
         7f:62:a7:6b:55:f5:ed:f6:8a:e5:dc:cb:98:07:af:47:99:c3:
         10:28:24:46:58:a0:b6:cc:80:82:53:6e:88:07:dd:70:9e:01:
         27:14:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:35:11 2025 by rpki-client