Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.cer
File:                     BA0388E1CA5924A916BB11653DD42285A7776A4B.cer (raw, json)
Hash identifier:          wfUx9ttNBWxWf75y18mRHM1KoMtWMp7hSuidA+0NnBM=
Subject key identifier:   BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F5718CEE9EDC0843D5E813328506CDE51D3CC71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2023 20:44:45 +0000
Certificate not after:    Thu 28 Nov 2024 20:49:45 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:57:18:ce:e9:ed:c0:84:3d:5e:81:33:28:50:6c:de:51:d3:cc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 20:44:45 2023 GMT
            Not After : Nov 28 20:49:45 2024 GMT
        Subject: CN=BA0388E1CA5924A916BB11653DD42285A7776A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ed:da:18:f3:0d:6e:df:e3:e7:03:f6:05:46:
                    9c:02:a5:c0:32:d1:65:ae:83:8b:1a:29:b0:3f:aa:
                    03:ef:71:b2:6f:64:4c:2a:62:35:e3:c3:34:84:ca:
                    65:d6:4c:79:41:b9:4a:06:3b:4b:d0:5a:3c:4b:84:
                    d3:7d:c8:5c:dd:13:e8:8c:51:20:c0:63:74:da:93:
                    a0:04:42:cd:8a:81:bf:e1:0a:e8:22:6a:f6:fa:59:
                    9f:05:29:70:6f:b4:56:b2:69:89:f7:4f:24:f9:c3:
                    b8:0f:44:77:c4:80:87:9b:32:97:00:b4:bb:57:eb:
                    07:53:f4:30:3d:0e:ea:6d:56:8d:11:77:ab:a0:6b:
                    ad:15:ca:4f:59:45:51:40:8f:67:5a:31:ac:44:19:
                    99:de:3d:86:8d:a5:87:01:bf:28:dd:d2:20:11:13:
                    10:8e:1c:13:34:00:42:b9:0f:34:82:1d:da:af:c4:
                    e4:72:d5:3a:93:2a:13:ad:b3:d4:61:4b:c1:ea:7c:
                    71:b9:e6:2d:43:3f:af:df:21:a3:ee:dd:9f:a1:e0:
                    e4:46:5c:07:5c:47:3a:6b:3d:b1:a5:9d:96:79:dd:
                    30:ae:70:2d:66:cd:e4:4a:4c:b5:4c:51:71:74:54:
                    20:96:ac:bd:a0:4c:73:45:0b:cd:04:0f:0c:cf:3c:
                    a4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:03:88:E1:CA:59:24:A9:16:BB:11:65:3D:D4:22:85:A7:77:6A:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/BA0388E1CA5924A916BB11653DD42285A7776A4B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         9b:9b:7a:cc:1c:95:17:fb:85:10:76:89:42:46:3c:f0:a0:ba:
         91:10:1d:46:a9:4c:90:9f:85:5d:03:85:31:48:08:40:57:0d:
         61:50:a0:31:89:b9:28:0c:15:99:c6:95:8b:bd:90:1e:ad:d7:
         a8:65:78:d5:67:ab:57:c8:ae:ee:fd:44:2c:24:82:52:d7:41:
         3b:1d:0d:64:7f:8a:7f:64:b2:f7:97:d7:e7:73:19:a5:e0:d9:
         1c:08:b4:56:e7:4a:b0:05:e7:61:9f:41:91:6c:97:ad:f5:53:
         eb:68:19:8e:d5:d4:e8:a6:ff:a6:c3:9e:e4:09:98:64:4c:30:
         70:d4:2d:23:37:9f:0f:d9:32:b2:a7:65:e5:e0:a8:c7:3f:05:
         27:5d:9a:72:ba:db:6e:50:0c:85:f6:15:53:a3:f6:1b:bc:f7:
         db:79:18:f5:ea:01:00:94:db:b4:c2:db:e2:b6:7f:29:ec:16:
         2e:9d:f7:ee:5f:14:65:e9:28:7f:ff:7d:37:b9:22:a9:f8:bf:
         f3:ee:5c:1e:41:1b:8f:98:65:8d:ff:17:1d:8e:e1:31:55:4d:
         39:63:c7:2b:bb:62:a4:6f:38:be:54:c7:f1:06:be:fe:b9:76:
         71:60:12:dc:7d:92:37:da:b3:e4:26:fe:7d:48:55:1a:4b:a1:
         98:e4:04:32
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUH1cYzuntwIQ9XoEzKFBs3lHTzHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMzAyMDQ0NDVaFw0yNDExMjgyMDQ5NDVaMDMxMTAvBgNV
BAMTKEJBMDM4OEUxQ0E1OTI0QTkxNkJCMTE2NTNERDQyMjg1QTc3NzZBNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7doY8w1u3+PnA/YFRpwCpcAy
0WWug4saKbA/qgPvcbJvZEwqYjXjwzSEymXWTHlBuUoGO0vQWjxLhNN9yFzdE+iM
USDAY3Tak6AEQs2Kgb/hCugiavb6WZ8FKXBvtFayaYn3TyT5w7gPRHfEgIebMpcA
tLtX6wdT9DA9DuptVo0Rd6uga60Vyk9ZRVFAj2daMaxEGZnePYaNpYcBvyjd0iAR
ExCOHBM0AEK5DzSCHdqvxORy1TqTKhOts9RhS8HqfHG55i1DP6/fIaPu3Z+h4ORG
XAdcRzprPbGlnZZ53TCucC1mzeRKTLVMUXF0VCCWrL2gTHNFC80EDwzPPKQPAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6A4jhylkkqRa7
EWU91CKFp3dqSzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BbVBqRUdlQ3ludDJiU1R1OHgxNEdWdWRXZnBXa2tmQWRX
dmdmdUZaV3JLZC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFk
V3ZnZnVGWldyS2QvMC9CQTAzODhFMUNBNTkyNEE5MTZCQjExNjUzREQ0MjI4NUE3
Nzc2QTRCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItp2wwDQQCAAIwBwMF
ACgEVnQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBbfMA0GCSqGSIb3DQEBCwUA
A4IBAQCbm3rMHJUX+4UQdolCRjzwoLqREB1GqUyQn4VdA4UxSAhAVw1hUKAxibko
DBWZxpWLvZAerdeoZXjVZ6tXyK7u/UQsJIJS10E7HQ1kf4p/ZLL3l9fncxml4Nkc
CLRW50qwBedhn0GRbJet9VPraBmO1dTopv+mw57kCZhkTDBw1C0jN58P2TKyp2Xl
4KjHPwUnXZpyuttuUAyF9hVTo/YbvPfbeRj16gEAlNu0wtvitn8p7BYunffuXxRl
6Sh//303uSKp+L/z7lweQRuPmGWN/xcdjuExVU05Y8cru2Kkbzi+VMfxBr7+uXZx
YBLcfZI32rPkJv59SFUaS6GY5AQy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org