Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.cer
File:                     CBBBC79B07882F9E7450A29909CCEB031ABB96D2.cer (raw, json)
Hash identifier:          3xw8yCkvPUyzT7jlBP+U68/aBnz2AZD8a/SDAkxZnB0=
Subject key identifier:   CB:BB:C7:9B:07:88:2F:9E:74:50:A2:99:09:CC:EB:03:1A:BB:96:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05DFFC303F85C196E123CA771561F3B9B85B63B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 13:15:39 +0000
Certificate not after:    Wed 26 Feb 2025 13:20:39 +0000
Subordinate resources:    AS: 269216
                          IP: 45.181.7.0/24
                          IP: 2801:80:36d0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:df:fc:30:3f:85:c1:96:e1:23:ca:77:15:61:f3:b9:b8:5b:63:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 13:15:39 2024 GMT
            Not After : Feb 26 13:20:39 2025 GMT
        Subject: CN=CBBBC79B07882F9E7450A29909CCEB031ABB96D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:c0:30:10:e8:df:f3:c9:61:42:9f:39:6e:
                    bb:91:c0:fc:d6:15:69:bc:5e:a3:40:fc:3a:dc:6a:
                    57:59:8d:5f:b2:0d:2e:ab:3a:07:06:f8:74:1f:56:
                    2f:2b:d1:f7:00:8a:b9:b6:8b:f4:50:db:31:08:12:
                    39:9b:9d:fe:b1:4d:48:a1:74:0f:21:39:f8:49:b7:
                    b0:e1:1c:93:ed:17:a5:8e:9e:30:18:0f:e6:43:7d:
                    6d:f2:17:fd:f1:ff:68:72:38:c4:63:8b:35:5d:8a:
                    29:e8:47:1c:0d:73:08:95:5c:da:d6:46:ca:fa:94:
                    c9:b2:c6:9f:c1:98:57:78:31:9b:41:b1:78:de:6f:
                    b2:e1:e1:06:49:ea:93:3c:87:91:8f:e1:c8:a2:8d:
                    27:a7:ee:29:38:54:04:57:6f:08:dd:4c:e8:72:e4:
                    00:9f:8d:bb:7e:8e:6a:e8:6a:14:98:c3:01:72:a9:
                    27:2a:56:13:5b:22:6e:da:91:13:10:17:5e:98:3e:
                    e4:60:8c:07:40:65:1a:0b:72:c2:ec:e8:de:f9:a0:
                    1f:49:40:2b:7e:ad:e1:3a:29:93:a7:15:78:92:cf:
                    b9:51:44:bd:ba:b6:16:f9:e4:78:e8:f4:c4:4f:49:
                    6e:04:a9:6a:19:80:c1:0d:26:df:ce:32:6e:80:be:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:BB:C7:9B:07:88:2F:9E:74:50:A2:99:09:CC:EB:03:1A:BB:96:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/0/CBBBC79B07882F9E7450A29909CCEB031ABB96D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.7.0/24
                IPv6:
                  2801:80:36d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269216

    Signature Algorithm: sha256WithRSAEncryption
         09:05:af:1d:bb:31:9f:d8:2e:e1:8f:da:93:fc:80:bf:2f:7a:
         71:16:0c:1d:b2:54:55:10:5f:37:f1:0f:ca:8d:b3:12:4a:e8:
         0b:66:ba:dd:23:a3:57:21:77:a8:fe:16:a9:d0:58:6d:60:3d:
         e1:8f:5f:67:6d:0b:d4:ff:1b:c2:61:de:9c:8a:3f:f2:d5:67:
         09:2e:e6:d2:14:70:0b:89:78:7e:67:10:39:b5:a0:7c:06:a4:
         e6:73:85:35:02:f7:88:3f:e9:aa:bb:a4:bc:88:dd:fe:87:1c:
         cc:4e:b0:2c:e0:ef:1b:37:4a:9e:39:79:db:49:09:ec:ef:60:
         b2:e6:2d:af:20:c0:63:44:8e:47:cf:bf:ab:f2:08:20:83:58:
         1d:f4:df:a4:6f:73:fc:ca:a4:5b:c5:d5:6a:fd:4a:05:41:ef:
         2b:50:f2:28:df:08:13:bf:d7:32:6a:d2:0a:2e:58:23:8f:52:
         49:da:f9:b2:07:f2:95:96:1b:21:8d:04:ef:77:20:cd:ff:6b:
         e1:14:a4:44:2f:13:15:5a:a0:5e:3a:86:c0:3f:4d:37:df:70:
         9b:8d:68:13:24:4d:5c:25:e1:61:33:af:24:21:d0:e0:de:d2:
         96:4e:eb:58:82:ed:fb:bd:e8:82:02:96:43:59:6a:dd:4f:10:
         e3:9a:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org