Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer
File:                     BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer (raw, json)
Hash identifier:          X4rvxZHUSHJyq5U2g2DOBxJsPt0/OeMLWi7WTv0AniI=
Subject key identifier:   BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EC3428CB8688BA924D54C4931CE3428C8E4C13B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Aug 2023 18:15:10 +0000
Certificate not after:    Thu 22 Aug 2024 18:20:10 +0000
Subordinate resources:    AS: 262903
                          IP: 177.23.208.0/21
                          IP: 177.86.104.0/21
                          IP: 179.109.56.0/21
                          IP: 186.251.56.0/22
                          IP: 2804:1644::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c3:42:8c:b8:68:8b:a9:24:d5:4c:49:31:ce:34:28:c8:e4:c1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 18:15:10 2023 GMT
            Not After : Aug 22 18:20:10 2024 GMT
        Subject: CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:4f:64:ab:8f:a2:e9:5c:bb:1d:6e:c4:d3:
                    30:ab:17:2b:9e:e3:1d:3b:dc:28:35:da:de:43:ad:
                    6f:a3:31:8e:63:63:d4:66:c3:91:33:af:c7:e0:eb:
                    db:9a:de:8d:69:9e:74:c1:d0:bc:0e:44:fb:ca:53:
                    a7:91:aa:3c:d8:8e:cc:15:40:e5:19:1b:dc:cd:b3:
                    73:a6:e5:42:c7:38:3b:06:26:16:d8:30:2b:60:eb:
                    c8:0e:29:0e:17:56:08:75:8d:f1:de:ce:32:5b:cb:
                    0e:ef:54:e1:7e:21:c7:a3:90:ff:ea:c5:ca:9a:c8:
                    a3:bd:e4:a8:61:52:e5:dc:70:fe:cd:28:ab:4c:87:
                    a1:c5:31:9b:b4:d0:fd:eb:02:f4:d4:79:2f:ad:13:
                    41:08:5c:28:e7:39:95:1c:cc:54:a0:b0:91:57:99:
                    af:de:84:2a:d8:d7:e9:f6:00:70:c1:08:11:01:cf:
                    48:02:73:24:34:71:ac:67:a4:5b:06:70:91:4b:b4:
                    6a:7f:ab:f7:d8:2a:02:e7:31:74:22:c3:1f:ae:1f:
                    42:32:67:81:ae:98:58:3a:67:65:07:5a:0a:1d:ee:
                    b2:28:8a:31:26:6e:1e:bb:ac:b4:42:43:91:9a:46:
                    6e:7e:07:93:4b:b6:e7:71:82:51:0d:55:96:93:79:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.208.0/21
                  177.86.104.0/21
                  179.109.56.0/21
                  186.251.56.0/22
                IPv6:
                  2804:1644::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262903

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:01:f8:3c:e9:97:a6:0b:8d:1b:d1:9c:83:c7:27:92:56:
         04:b1:32:d3:72:02:49:b8:e5:45:17:7a:36:e1:3a:64:75:93:
         c4:80:bd:e3:01:7e:95:84:10:cb:0f:e7:d0:fa:4e:5a:85:c5:
         8f:d9:fc:36:69:39:5f:a2:70:d4:47:de:0c:2e:41:41:28:28:
         b1:d5:d2:75:7d:7a:b8:75:e1:fe:57:42:d9:4d:10:82:d3:33:
         f3:96:1b:4c:b8:51:fc:16:4a:50:75:32:67:45:89:4a:10:8b:
         54:1c:a2:7e:6e:da:26:c1:22:f3:fb:b3:60:ca:51:7c:86:75:
         44:de:c9:43:c3:70:26:ce:5e:96:d9:f3:b8:ea:23:01:a3:04:
         33:0f:f6:76:e9:3e:04:89:6b:a9:65:9b:26:28:f3:bf:39:d5:
         1e:c0:c7:3d:92:75:26:18:d3:30:15:c3:bb:51:04:a9:48:db:
         00:4a:86:31:37:57:c3:f2:40:f4:a0:17:86:09:9f:47:36:f8:
         de:fc:da:d3:dc:01:79:ce:cf:ae:c2:77:47:d2:e0:e1:b4:8a:
         90:e7:41:f8:3a:c5:d3:29:0d:c5:b9:35:65:83:1b:49:eb:ef:
         62:15:55:5a:85:6e:5e:fd:75:0c:77:bc:b2:71:7d:2a:72:b5:
         7a:eb:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org