Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.cer
File:                     BA05FA500E415B56175D97B8CD9EC5C3A4A25285.cer (raw, json)
Hash identifier:          BBvuhcCpxopB5rM43clBqDi85NPOTcPcqne1FS3PrtM=
Subject key identifier:   BA:05:FA:50:0E:41:5B:56:17:5D:97:B8:CD:9E:C5:C3:A4:A2:52:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BEB3820B6EAD003405781A64AE56193D935796F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:53:59 +0000
Certificate not after:    Sat 10 Aug 2024 02:58:59 +0000
Subordinate resources:    AS: 266159
                          IP: 160.19.44.0/22
                          IP: 2804:3b98::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:eb:38:20:b6:ea:d0:03:40:57:81:a6:4a:e5:61:93:d9:35:79:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:53:59 2023 GMT
            Not After : Aug 10 02:58:59 2024 GMT
        Subject: CN=BA05FA500E415B56175D97B8CD9EC5C3A4A25285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:70:78:51:34:9c:d8:b6:b5:eb:cb:72:c3:4e:
                    7d:d9:27:0b:68:c3:3e:e3:c0:dc:3d:87:9e:e9:fb:
                    77:8d:60:3c:62:db:14:19:fe:31:d2:ea:db:f3:ea:
                    41:d3:3c:80:c2:de:dc:a5:08:32:1b:ac:bb:fe:de:
                    16:72:18:c6:5e:c9:7f:27:43:fb:c1:b2:be:6e:16:
                    db:0d:a3:e8:3c:21:85:9f:2a:80:88:a6:9a:61:c3:
                    13:3a:57:6e:b8:aa:ea:36:5b:fe:36:01:36:8e:84:
                    02:5b:45:e0:d3:81:2c:1b:61:88:b7:e9:22:98:47:
                    ac:28:e3:14:7a:eb:b9:1d:06:ef:2c:b3:fb:23:8a:
                    b9:a4:e0:67:0b:79:88:87:6a:2a:75:e1:6e:54:47:
                    92:ee:22:5c:c4:b3:73:9e:bb:19:d9:2f:37:28:76:
                    6f:c4:72:c3:56:f5:d4:b7:3e:73:0c:3d:20:c0:6c:
                    51:3c:3f:d8:ff:e5:f5:50:35:39:bb:d4:d4:e6:ee:
                    5a:dc:f3:cf:a2:3a:71:fc:a2:d4:08:27:35:a4:2a:
                    2d:ba:d4:6a:49:b3:9e:cf:d4:fe:65:6b:39:a6:f8:
                    f7:c3:c2:f5:52:d5:ae:52:00:31:87:5c:6c:40:d4:
                    7a:86:e5:91:f6:fb:44:fd:c2:de:2e:7e:69:f1:c4:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:05:FA:50:0E:41:5B:56:17:5D:97:B8:CD:9E:C5:C3:A4:A2:52:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.44.0/22
                IPv6:
                  2804:3b98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266159

    Signature Algorithm: sha256WithRSAEncryption
         a6:55:80:70:f4:0e:93:18:c9:b0:0c:5d:19:ad:8d:2b:ff:4c:
         e6:36:0d:c3:68:79:37:b3:f0:dd:f7:e3:81:dc:67:d1:9b:8f:
         9b:e0:33:5f:82:3c:a9:20:cd:2a:bf:5e:2b:f7:c9:5a:f5:dc:
         ce:eb:85:ee:29:a5:dd:c1:64:55:0a:81:fe:c7:a0:e8:6d:7d:
         85:fc:81:48:65:9b:f3:1e:d5:a9:45:b6:da:dd:40:d9:6d:57:
         39:bc:36:4f:ad:e2:f1:e2:42:ee:a9:05:cd:01:0b:2d:06:6f:
         ed:be:ae:ef:cc:50:f3:ab:e1:e2:50:10:9c:42:6b:39:4a:cc:
         97:e5:c8:0b:b9:b5:44:12:2a:2b:74:f3:93:c7:c7:2f:49:d9:
         7b:83:bd:2a:92:db:15:30:26:9e:94:a1:ca:7d:f9:81:62:a1:
         0f:2a:fd:5c:91:09:50:0f:69:b0:97:fc:0c:34:09:4b:19:0c:
         b2:26:9d:7a:c7:38:2b:90:f1:ad:4f:35:89:48:de:15:c7:95:
         98:00:1e:6b:3a:3e:35:26:8c:93:f2:9a:b8:af:69:3a:28:5c:
         10:15:b1:9c:c5:9a:33:15:80:bb:d3:45:50:4c:44:9e:4d:86:
         55:ee:f7:ca:aa:ab:59:8c:d1:4a:5c:ea:8e:c2:ba:50:5f:f1:
         a9:69:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org