Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.cer
File:                     BAD135C743E93C3F949E8A52ED31CA21537430CA.cer (raw, json)
Hash identifier:          KfeKIyUoQYich8/bHKgynS/7f2YwRIEOVa0mIu35ubY=
Subject key identifier:   BA:D1:35:C7:43:E9:3C:3F:94:9E:8A:52:ED:31:CA:21:53:74:30:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C15E31D8E036D8AFB06552FD5A1836A67365519
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 13:20:36 +0000
Certificate not after:    Wed 25 Sep 2024 13:25:36 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:15:e3:1d:8e:03:6d:8a:fb:06:55:2f:d5:a1:83:6a:67:36:55:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 13:20:36 2023 GMT
            Not After : Sep 25 13:25:36 2024 GMT
        Subject: CN=BAD135C743E93C3F949E8A52ED31CA21537430CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:d7:3c:dc:81:7f:3e:65:9e:dc:56:18:14:
                    eb:42:1b:d2:0f:c2:39:d2:7c:78:c8:c5:0a:a0:53:
                    05:7d:1b:86:16:22:85:f8:3a:68:85:76:51:96:67:
                    08:e2:d3:a5:4f:3a:aa:18:3c:b7:8f:10:81:df:be:
                    77:69:35:b8:01:6c:6e:30:00:a6:e9:e8:3c:d3:31:
                    8a:33:f7:f8:08:54:86:61:0f:75:4e:bf:fd:3a:b9:
                    ed:3c:01:09:3e:f0:d4:29:af:d0:45:4c:5d:a4:9b:
                    bf:45:a5:7f:70:84:cc:a2:fa:8a:b9:4b:42:96:b4:
                    c1:1e:41:81:18:59:41:ab:e7:c0:54:e6:ac:30:6e:
                    a1:c3:16:f9:ef:a7:8c:f4:e8:c1:e7:7e:55:8e:8e:
                    ae:e1:cf:f5:10:f2:8f:b2:e6:20:01:ef:d1:68:b5:
                    4e:76:68:02:3b:0d:61:f1:d3:dc:3b:2d:64:f3:0c:
                    86:3d:63:39:43:f5:da:c3:78:8e:17:39:44:b3:b5:
                    f8:47:09:68:01:de:f0:8b:d4:27:da:cf:31:73:d6:
                    c6:75:59:4a:49:ba:78:5b:7e:76:0a:3a:5b:a2:b9:
                    8f:b5:95:9c:20:4c:75:3e:76:73:75:73:d5:0c:f2:
                    32:50:db:c7:bd:1f:c8:09:e6:12:c4:45:50:b7:9e:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:D1:35:C7:43:E9:3C:3F:94:9E:8A:52:ED:31:CA:21:53:74:30:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:08:44:b5:7c:fd:f1:6f:45:59:ce:a9:51:86:75:38:46:
         e0:34:7f:86:48:7b:26:9b:fe:4a:17:82:99:4f:65:b7:87:a2:
         fa:ad:51:ff:b5:78:22:37:ab:73:9e:00:21:1a:04:be:83:88:
         ff:61:ed:c0:c7:11:82:e7:a7:65:0d:55:4d:d9:9b:45:67:1d:
         01:60:59:df:3b:4e:8b:cb:79:3c:49:e3:83:49:92:93:61:73:
         a2:aa:4d:6c:0d:5b:77:4a:bd:78:0d:d9:27:36:3c:33:3c:e7:
         3e:45:96:52:f8:2c:15:5a:95:7b:91:0b:48:a3:b6:a0:05:ca:
         bf:a8:42:5d:33:c9:9c:55:f4:54:e7:bd:e8:8d:85:cd:2d:06:
         e9:16:5e:0d:12:c2:ab:c5:21:72:a5:58:ec:ac:a0:e4:51:9b:
         d3:56:84:b6:6f:19:43:be:20:14:14:68:35:c3:f8:c5:e4:e7:
         48:33:e4:2f:cc:67:eb:5f:34:99:92:46:bc:50:4c:3f:e1:d1:
         f6:97:a3:f2:b7:94:22:e0:97:62:c8:62:09:dd:00:3d:e8:c7:
         90:3e:62:13:f4:2e:e3:c3:35:b3:ec:e6:d6:af:50:07:e1:49:
         27:03:02:ee:13:ef:e9:19:fa:74:a5:97:b5:7e:96:26:0c:c5:
         16:04:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org