Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA3E8C893EE89FF5E4B11E3F246F1AF0DA1F16A6.cer
File:                     BA3E8C893EE89FF5E4B11E3F246F1AF0DA1F16A6.cer (raw, json)
Hash identifier:          PAz0Kx+MowPOn/a+DLRfFZ/BMzhA/xdcLcPIQzX6wS4=
Subject key identifier:   BA:3E:8C:89:3E:E8:9F:F5:E4:B1:1E:3F:24:6F:1A:F0:DA:1F:16:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FDB58B7630D3A27D8DBE83B68D28940F07FCF7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/BA3E8C893EE89FF5E4B11E3F246F1AF0DA1F16A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 09 Oct 2022 13:32:51 +0000
Certificate not after:    Sun 08 Oct 2023 13:37:51 +0000
Subordinate resources:    AS: 269252
                          IP: 45.181.220.0/22
                          IP: 2804:61b8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:db:58:b7:63:0d:3a:27:d8:db:e8:3b:68:d2:89:40:f0:7f:cf:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 13:32:51 2022 GMT
            Not After : Oct  8 13:37:51 2023 GMT
        Subject: CN=BA3E8C893EE89FF5E4B11E3F246F1AF0DA1F16A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:55:77:2c:3b:62:57:89:1e:88:cc:1b:7e:
                    55:f9:fc:99:65:db:39:99:3e:f0:db:40:dc:a6:45:
                    85:8a:a3:31:5d:7f:50:35:60:32:c0:0d:55:13:73:
                    6a:72:0e:02:13:ed:b8:c5:e8:3d:cf:d6:6e:54:2f:
                    38:ea:a7:04:3d:3f:2c:c7:a6:a5:c9:96:ba:c1:99:
                    f4:4d:c1:9f:53:60:af:1d:ac:3c:2f:2f:76:73:b2:
                    c8:a0:20:c0:38:ff:d2:24:39:9a:7a:f5:34:0b:6f:
                    c7:bd:44:93:c1:45:74:4d:a2:06:01:33:53:e1:3d:
                    16:26:de:14:87:51:95:ff:fe:e3:49:91:16:25:db:
                    51:fd:1f:54:a7:13:ed:00:e3:03:c5:98:6e:01:13:
                    61:67:82:39:4d:01:79:b0:c5:2f:2e:79:02:a9:54:
                    8e:c3:77:f5:d4:6f:b5:a0:b8:ad:fc:63:10:85:bd:
                    4b:18:51:0b:94:a5:b1:45:79:27:a6:85:5d:9d:93:
                    6c:4d:c7:e5:f3:8d:98:69:1a:31:b2:c0:e5:10:52:
                    f7:f3:11:4f:ae:4f:7b:65:42:f9:1b:7f:8f:b5:17:
                    13:6c:5c:9e:42:a3:a8:ac:a9:88:4f:a4:55:71:50:
                    f4:2a:f6:33:e9:85:d5:89:93:4e:7f:f6:32:51:25:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:3E:8C:89:3E:E8:9F:F5:E4:B1:1E:3F:24:6F:1A:F0:DA:1F:16:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/BA3E8C893EE89FF5E4B11E3F246F1AF0DA1F16A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.220.0/22
                IPv6:
                  2804:61b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269252

    Signature Algorithm: sha256WithRSAEncryption
         92:5f:69:5f:ba:85:21:2b:7d:8e:be:39:44:92:ee:9e:19:3a:
         27:54:f7:8f:2b:ec:cf:7b:25:b7:e5:d8:26:95:93:f4:6b:31:
         75:80:7b:e1:23:1e:64:20:33:5a:9d:40:0b:c1:15:72:4a:1f:
         08:e3:92:31:80:61:6b:85:9b:76:76:a4:53:82:bf:d3:0f:26:
         aa:eb:6e:d7:ae:ea:bd:80:2e:e5:bb:94:a0:dd:c2:52:da:66:
         bd:49:7c:93:80:20:24:e1:63:04:1a:a4:bb:7b:3c:7a:6d:6d:
         d1:ab:2a:20:ab:5a:c2:a1:0a:1c:3b:5f:e2:85:59:8e:0f:e0:
         5d:27:b6:b6:bd:39:dd:26:51:f7:cb:37:b9:14:d2:ef:41:20:
         d0:45:8b:fe:1e:2d:78:ac:ae:ff:e1:cb:67:3f:06:bd:29:10:
         d0:6b:1b:b7:cb:6d:5d:50:eb:29:bf:17:82:16:94:ab:54:5c:
         e4:60:a9:b7:c4:ee:9c:e6:c6:f4:aa:39:0e:7a:3d:9f:d7:c8:
         01:c2:f8:87:89:b6:6d:6c:92:ff:af:83:06:95:ff:1c:db:e8:
         57:da:d2:f2:8d:69:ee:83:23:ae:85:7a:c5:c8:d9:7d:d0:23:
         4a:13:24:1f:db:db:8a:0b:7b:61:ad:4f:1e:de:bd:92:1c:a0:
         00:fb:83:b7
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUT9tYt2MNOifY2+g7aNKJQPB/z3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMDkxMzMyNTFaFw0yMzEwMDgxMzM3NTFaMDMxMTAvBgNV
BAMTKEJBM0U4Qzg5M0VFODlGRjVFNEIxMUUzRjI0NkYxQUYwREExRjE2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpg1V3LDtiV4keiMwbflX5/Jll
2zmZPvDbQNymRYWKozFdf1A1YDLADVUTc2pyDgIT7bjF6D3P1m5ULzjqpwQ9PyzH
pqXJlrrBmfRNwZ9TYK8drDwvL3ZzssigIMA4/9IkOZp69TQLb8e9RJPBRXRNogYB
M1PhPRYm3hSHUZX//uNJkRYl21H9H1SnE+0A4wPFmG4BE2FngjlNAXmwxS8ueQKp
VI7Dd/XUb7WguK38YxCFvUsYUQuUpbFFeSemhV2dk2xNx+XzjZhpGjGywOUQUvfz
EU+uT3tlQvkbf4+1FxNsXJ5Co6isqYhPpFVxUPQq9jPphdWJk05/9jJRJbu3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6PoyJPuif9eSx
Hj8kbxrw2h8WpjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CWFE2TkFWUlpic3k1RGhnWDJrYVVMTUZNUG9tTG8zVUNa
MnRSRXFFazNINi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CWFE2TkFWUlpic3k1RGhnWDJrYVVMTUZNUG9tTG8zVUNa
MnRSRXFFazNINi8wL0JBM0U4Qzg5M0VFODlGRjVFNEIxMUUzRjI0NkYxQUYwREEx
RjE2QTYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi213DANBAIAAjAHAwUA
KARhuDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEG8QwDQYJKoZIhvcNAQELBQAD
ggEBAJJfaV+6hSErfY6+OUSS7p4ZOidU948r7M97Jbfl2CaVk/RrMXWAe+EjHmQg
M1qdQAvBFXJKHwjjkjGAYWuFm3Z2pFOCv9MPJqrrbteu6r2ALuW7lKDdwlLaZr1J
fJOAICThYwQapLt7PHptbdGrKiCrWsKhChw7X+KFWY4P4F0ntra9Od0mUffLN7kU
0u9BINBFi/4eLXisrv/hy2c/Br0pENBrG7fLbV1Q6ym/F4IWlKtUXORgqbfE7pzm
xvSqOQ56PZ/XyAHC+IeJtm1skv+vgwaV/xzb6Ffa0vKNae6DI66FesXI2X3QI0oT
JB/b24oLe2GtTx7evZIcoAD7g7c=
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:27 2025 by rpki-client