Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BEAC1291202FD076C4DE7F2C2EAB9A502F414672.cer
File:                     BEAC1291202FD076C4DE7F2C2EAB9A502F414672.cer (raw, json)
Hash identifier:          EEQsLIhH0wbMCG9iBrqskWFVopWlnjXAswftQYx6cuA=
Subject key identifier:   BE:AC:12:91:20:2F:D0:76:C4:DE:7F:2C:2E:AB:9A:50:2F:41:46:72
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       419053F9AB76258FE276BC8D2CD26C010B9748AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/BEAC1291202FD076C4DE7F2C2EAB9A502F414672.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jan 2023 08:17:31 +0000
Certificate not after:    Wed 03 Jan 2024 08:22:31 +0000
Subordinate resources:    AS: 270355
                          IP: 190.89.48.0/22
                          IP: 2804:6ab8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:90:53:f9:ab:76:25:8f:e2:76:bc:8d:2c:d2:6c:01:0b:97:48:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 08:17:31 2023 GMT
            Not After : Jan  3 08:22:31 2024 GMT
        Subject: CN=BEAC1291202FD076C4DE7F2C2EAB9A502F414672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:8a:55:cc:bb:1f:67:50:89:56:1a:e9:75:
                    f1:53:e1:8f:1d:c3:09:ad:33:10:1f:d1:90:35:1d:
                    8b:0a:94:03:bb:0e:cf:ed:21:7e:39:05:46:ab:20:
                    79:b9:e2:ca:16:cf:29:eb:80:12:33:d8:eb:52:b0:
                    32:64:9e:66:b3:84:aa:e8:11:d0:bc:d0:3b:5b:cc:
                    56:f7:b3:30:a6:86:5e:9c:ae:2d:38:78:7d:36:a3:
                    6a:53:76:3c:0f:77:c6:ed:18:31:d1:c7:9b:fa:8e:
                    1c:1f:ab:ea:9e:b0:c0:72:b1:3f:9d:ba:b1:4f:2c:
                    ad:86:7d:e2:24:ff:52:38:cb:43:73:23:be:43:fb:
                    c2:c2:f4:e7:1e:07:1e:71:cf:bc:67:98:66:ad:7c:
                    e9:16:3a:48:56:a6:30:b7:3e:77:82:95:af:69:73:
                    e6:21:9a:2c:20:3c:a0:16:7f:ed:83:ad:1c:07:87:
                    92:93:4a:3a:e8:29:4f:16:5d:16:98:1e:6e:b8:0b:
                    e6:70:37:7d:4c:15:4f:e7:20:6f:bc:be:31:44:4d:
                    05:ac:a6:a9:13:f5:61:2d:68:bc:8f:ac:17:c8:13:
                    c5:88:29:91:44:e5:6b:2b:c2:d9:5f:1a:ef:a1:f3:
                    34:e2:8d:7a:53:fc:d6:a6:80:7f:ce:ca:c1:78:0e:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:AC:12:91:20:2F:D0:76:C4:DE:7F:2C:2E:AB:9A:50:2F:41:46:72
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/BEAC1291202FD076C4DE7F2C2EAB9A502F414672.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.48.0/22
                IPv6:
                  2804:6ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270355

    Signature Algorithm: sha256WithRSAEncryption
         6b:f7:fe:0e:ee:af:9a:04:4e:9a:b1:00:c6:48:e5:b5:49:99:
         d4:16:60:ae:f4:01:9b:8b:1a:8e:67:e2:2f:22:31:7e:fc:fb:
         6e:af:f1:cc:62:28:8a:48:bb:8a:b5:62:0a:c4:46:c5:ea:9a:
         8f:6f:b1:25:57:13:5c:1e:80:fd:97:a6:0d:6e:40:d7:8c:a9:
         46:9c:c0:c0:8d:5c:82:53:4e:52:14:25:45:ec:de:c0:4e:70:
         d5:2f:ce:ca:50:42:ac:79:ac:0a:c7:44:11:27:e3:20:94:8c:
         10:5b:f9:b5:a0:6b:1a:a9:76:1d:16:97:10:3a:45:b2:db:c2:
         59:a0:ee:c4:f0:5a:ae:0a:e5:61:75:26:5c:e3:70:11:a2:5d:
         20:38:2a:ad:c3:5e:94:96:79:67:ef:73:44:a7:9a:c2:2d:50:
         bf:b5:99:95:31:30:2a:8e:31:40:32:0d:54:8c:4f:9a:7f:2f:
         e9:7d:60:65:96:d8:31:87:37:1c:aa:7c:9a:5d:e2:8d:58:f2:
         9a:03:cd:b9:5f:99:1a:4a:16:04:76:41:97:1b:d5:c4:39:cc:
         6b:ea:be:d3:b0:bc:81:bf:6a:b7:f2:76:bf:06:78:bf:dd:be:
         eb:29:e5:94:9f:83:ff:da:62:9f:fe:0b:a6:8d:00:14:38:ae:
         21:c1:72:1f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQZBT+at2JY/idryNLNJsAQuXSKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMDQwODE3MzFaFw0yNDAxMDMwODIyMzFaMDMxMTAvBgNV
BAMTKEJFQUMxMjkxMjAyRkQwNzZDNERFN0YyQzJFQUI5QTUwMkY0MTQ2NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJW4pVzLsfZ1CJVhrpdfFT4Y8d
wwmtMxAf0ZA1HYsKlAO7Ds/tIX45BUarIHm54soWzynrgBIz2OtSsDJknmazhKro
EdC80DtbzFb3szCmhl6cri04eH02o2pTdjwPd8btGDHRx5v6jhwfq+qesMBysT+d
urFPLK2GfeIk/1I4y0NzI75D+8LC9OceBx5xz7xnmGatfOkWOkhWpjC3PneCla9p
c+YhmiwgPKAWf+2DrRwHh5KTSjroKU8WXRaYHm64C+ZwN31MFU/nIG+8vjFETQWs
pqkT9WEtaLyPrBfIE8WIKZFE5WsrwtlfGu+h8zTijXpT/NamgH/OysF4DrtNAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+rBKRIC/QdsTe
fywuq5pQL0FGcjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yR1FjalNiM1B4Nk0xbXAzelJuSGFoOXpNUUFiWU1DYVFW
S2l0cWpzb3RhUS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yR1FjalNiM1B4Nk0xbXAzelJuSGFoOXpNUUFiWU1DYVFW
S2l0cWpzb3RhUS8wL0JFQUMxMjkxMjAyRkQwNzZDNERFN0YyQzJFQUI5QTUwMkY0
MTQ2NzIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5ZMDANBAIAAjAHAwUA
KARquDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIBMwDQYJKoZIhvcNAQELBQAD
ggEBAGv3/g7ur5oETpqxAMZI5bVJmdQWYK70AZuLGo5n4i8iMX78+26v8cxiKIpI
u4q1YgrERsXqmo9vsSVXE1wegP2Xpg1uQNeMqUacwMCNXIJTTlIUJUXs3sBOcNUv
zspQQqx5rArHRBEn4yCUjBBb+bWgaxqpdh0WlxA6RbLbwlmg7sTwWq4K5WF1Jlzj
cBGiXSA4Kq3DXpSWeWfvc0SnmsItUL+1mZUxMCqOMUAyDVSMT5p/L+l9YGWW2DGH
NxyqfJpd4o1Y8poDzblfmRpKFgR2QZcb1cQ5zGvqvtOwvIG/arfydr8GeL/dvusp
5ZSfg//aYp/+C6aNABQ4riHBch8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org