Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer
File:                     BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer (raw, json)
Hash identifier:          e0JxZdfnMc3dMTQvpm6bMx5s0I5ZfkuKzk0zC6tZxYw=
Subject key identifier:   BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15D7CBB5F1E753D2DE40AF5820851C6DD394FD35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 19:14:47 +0000
Certificate not after:    Wed 26 Feb 2025 19:19:47 +0000
Subordinate resources:    AS: 268921
                          IP: 45.175.204.0/22
                          IP: 2804:5ca4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d7:cb:b5:f1:e7:53:d2:de:40:af:58:20:85:1c:6d:d3:94:fd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 19:14:47 2024 GMT
            Not After : Feb 26 19:19:47 2025 GMT
        Subject: CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:7d:44:4b:5c:f5:92:dd:45:bb:c5:4f:76:
                    9d:c6:56:f0:ed:d4:99:84:3a:6c:90:38:cb:4d:18:
                    8a:fb:d1:33:00:8d:df:67:53:f3:24:d1:27:11:75:
                    0c:31:ae:ea:ab:26:9b:bb:3d:b9:bd:d2:05:a9:3c:
                    ff:07:91:a3:2c:b4:79:f5:9e:14:20:87:ed:35:75:
                    b7:15:8e:a9:73:f2:a9:d3:d9:25:7e:de:b7:e5:e6:
                    5a:d4:47:08:bb:7b:54:f6:07:a7:be:6e:f6:1b:7e:
                    4f:25:13:a4:ac:3b:98:48:97:13:9d:ef:97:8d:1e:
                    4d:4e:0c:d5:6c:4c:9b:1e:36:9e:0a:39:0a:50:1a:
                    7b:91:fc:24:99:f2:5d:f5:d0:d0:f4:2e:de:b5:aa:
                    ff:57:b2:b4:80:44:45:82:6d:eb:54:09:78:3e:0e:
                    ad:28:45:11:c4:32:d8:5e:7a:b7:f2:30:92:c9:4b:
                    c1:64:f4:5a:4f:ee:55:38:5f:73:39:da:7c:1c:63:
                    a4:7c:af:22:64:02:8b:86:b7:83:98:12:af:87:bc:
                    78:d6:e8:c9:a1:b0:c2:eb:f6:94:2e:54:b8:db:a1:
                    44:41:a8:0a:b4:c5:b2:5e:84:d9:c2:b9:ef:db:51:
                    61:0d:75:3c:0a:ac:8a:0f:f3:a4:88:f8:be:e3:d4:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.204.0/22
                IPv6:
                  2804:5ca4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268921

    Signature Algorithm: sha256WithRSAEncryption
         73:a5:89:ca:45:c9:09:3e:fb:14:7e:d1:b3:32:08:c7:cc:5b:
         d7:b3:db:c3:c9:50:99:12:27:50:4b:72:20:64:3f:ca:c9:e0:
         71:cb:ef:e1:04:dd:5a:59:44:70:22:07:ff:6c:02:bc:41:9d:
         07:6d:04:10:9e:46:18:ed:aa:0c:23:40:2a:50:40:4c:b7:60:
         72:bd:a2:53:5f:fb:b1:dc:b4:f1:9a:a3:c0:fd:97:4d:5f:96:
         01:08:5e:c7:dc:30:e4:d0:21:e9:f6:9b:d8:53:50:c1:ba:cb:
         90:1c:bd:ac:95:19:be:67:37:e9:1e:da:88:8f:fd:76:76:47:
         3f:9d:95:e4:5e:60:d2:89:2d:3b:a7:05:68:45:e1:94:d0:8f:
         c0:3a:2b:b4:79:60:1a:9b:a8:ac:26:a4:56:c4:19:ac:f5:77:
         c8:54:d6:d0:7b:9a:56:d1:7a:11:cd:45:c6:50:bb:97:3a:7b:
         fb:bb:fe:cc:37:ef:5b:61:77:c0:2a:b6:de:78:97:1d:64:82:
         9c:4e:47:74:81:32:62:5b:c1:30:47:c2:01:61:f5:49:28:1a:
         89:9c:ba:82:29:a2:4b:10:d1:07:2a:c1:fb:66:97:16:66:95:
         3e:a9:62:2a:61:85:f3:7c:ee:9a:0e:fb:d3:84:79:04:9b:98:
         f8:e0:6c:d6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUFdfLtfHnU9LeQK9YIIUcbdOU/TUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjgxOTE0NDdaFw0yNTAyMjYxOTE5NDdaMDMxMTAvBgNV
BAMTKEJBNDExNUYxMEY1N0I1RUQwRDA4ODVFMTlCRTAzQjc3NkExNEFGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3X1ES1z1kt1Fu8VPdp3GVvDt
1JmEOmyQOMtNGIr70TMAjd9nU/Mk0ScRdQwxruqrJpu7Pbm90gWpPP8HkaMstHn1
nhQgh+01dbcVjqlz8qnT2SV+3rfl5lrURwi7e1T2B6e+bvYbfk8lE6SsO5hIlxOd
75eNHk1ODNVsTJseNp4KOQpQGnuR/CSZ8l310ND0Lt61qv9XsrSAREWCbetUCXg+
Dq0oRRHEMtheerfyMJLJS8Fk9FpP7lU4X3M52nwcY6R8ryJkAouGt4OYEq+HvHjW
6MmhsMLr9pQuVLjboURBqAq0xbJehNnCue/bUWENdTwKrIoP86SI+L7j1H+PAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6QRXxD1e17Q0I
heGb4Dt3ahSvYTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HaVdKTEtRazRzZzNiQ2MyeTRYUWM2V1VhR2kza2ZBaG5X
NDdYZEpCWEVmdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR2lXSkxLUWs0c2czYkNjMnk0WFFjNldVYUdpM2tmQWhu
VzQ3WGRKQlhFZnQvMC9CQTQxMTVGMTBGNTdCNUVEMEQwODg1RTE5QkUwM0I3NzZB
MTRBRjYxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItr8wwDQQCAAIwBwMF
ACgEXKQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBp5MA0GCSqGSIb3DQEBCwUA
A4IBAQBzpYnKRckJPvsUftGzMgjHzFvXs9vDyVCZEidQS3IgZD/KyeBxy+/hBN1a
WURwIgf/bAK8QZ0HbQQQnkYY7aoMI0AqUEBMt2ByvaJTX/ux3LTxmqPA/ZdNX5YB
CF7H3DDk0CHp9pvYU1DBusuQHL2slRm+ZzfpHtqIj/12dkc/nZXkXmDSiS07pwVo
ReGU0I/AOiu0eWAam6isJqRWxBms9XfIVNbQe5pW0XoRzUXGULuXOnv7u/7MN+9b
YXfAKrbeeJcdZIKcTkd0gTJiW8EwR8IBYfVJKBqJnLqCKaJLENEHKsH7ZpcWZpU+
qWIqYYXzfO6aDvvThHkEm5j44GzW
-----END CERTIFICATE-----