Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.cer
File:                     BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.cer (raw, json)
Hash identifier:          ryNxe7QocTSP338RgjpY1s8nd2Gk99CUSIcZHAwCye0=
Subject key identifier:   BA:45:0E:F2:12:FC:16:CA:8B:9C:EA:80:BF:02:70:94:CF:FB:0B:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       128F9A7A99F82362F34A7B241D8556795FCF2C03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Aug 2022 19:45:14 +0000
Certificate not after:    Tue 08 Aug 2023 19:50:14 +0000
Subordinate resources:    AS: 266619
                          IP: 45.7.216.0/22
                          IP: 2804:3ec4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8f:9a:7a:99:f8:23:62:f3:4a:7b:24:1d:85:56:79:5f:cf:2c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  9 19:45:14 2022 GMT
            Not After : Aug  8 19:50:14 2023 GMT
        Subject: CN=BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:41:4f:dc:e0:7f:98:01:62:9f:96:fb:cd:
                    02:2d:1f:0e:6b:af:2a:ad:9a:6e:49:79:75:06:32:
                    69:dd:70:0e:57:67:ac:bd:41:37:dd:b0:16:db:e4:
                    4c:7f:fc:7e:5b:5d:97:da:80:cd:a7:23:04:72:42:
                    b9:b0:23:dc:ee:6a:f8:dc:37:4f:37:02:bc:6c:11:
                    fe:2d:5a:7d:e7:8d:b6:77:5d:35:4b:63:52:f9:37:
                    7b:48:a8:d6:60:9d:e2:39:c2:f9:ce:ec:9d:27:42:
                    fc:e1:67:d6:70:5f:14:52:3a:4e:dc:8e:1a:bc:2a:
                    c7:92:0c:38:1c:ab:b4:55:a0:5f:19:af:33:85:a6:
                    44:dc:a1:76:f3:e3:6e:ad:24:d5:62:84:4e:34:f5:
                    2c:d7:79:d4:87:e9:f2:37:aa:0a:25:02:56:f7:7b:
                    c6:cb:61:48:09:4a:b1:41:b3:ab:a5:c0:49:d8:2d:
                    69:bf:26:09:b6:ed:55:41:93:81:e6:f7:7b:fe:16:
                    4b:35:a4:bc:2d:5d:27:ae:80:c8:4b:e7:40:64:2b:
                    b8:7c:10:3f:65:60:b1:3f:c0:ee:b0:ad:d2:de:92:
                    0d:b1:b5:c4:2f:67:42:57:8e:09:61:18:c3:6f:8d:
                    20:ee:9f:63:95:3d:31:36:52:3e:98:73:74:f6:f0:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:45:0E:F2:12:FC:16:CA:8B:9C:EA:80:BF:02:70:94:CF:FB:0B:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/BA450EF212FC16CA8B9CEA80BF027094CFFB0BA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.216.0/22
                IPv6:
                  2804:3ec4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266619

    Signature Algorithm: sha256WithRSAEncryption
         86:bb:54:63:3d:31:96:50:50:f3:73:6b:bd:d0:be:50:e6:1a:
         0f:e0:9e:29:4f:4b:c6:47:58:cd:b9:db:d5:fe:cb:7f:cf:9a:
         8a:be:9a:17:17:c6:0e:8b:78:43:bc:4a:20:cd:5c:12:88:60:
         f6:c7:7d:c4:09:16:dc:db:7c:1c:a6:38:04:ee:12:3d:8c:c6:
         46:17:25:4b:00:ae:50:9f:dd:64:10:90:ca:f9:c9:c7:36:b5:
         9b:9f:cf:22:1d:3a:c5:63:4c:15:a0:40:7e:e3:3b:88:89:7f:
         01:48:a0:cd:07:27:8a:54:a5:8d:83:20:ef:d5:0c:32:1d:6f:
         a7:2a:2b:14:7e:22:ea:6f:bf:50:1d:45:7c:2a:43:e9:45:1c:
         9a:bb:41:67:23:5e:2e:58:20:75:1d:eb:39:c8:58:7e:9a:ca:
         5b:60:26:bf:70:b6:ab:f3:6c:e9:db:f1:1d:87:3b:9f:51:6c:
         06:c1:6f:7a:41:05:79:61:b5:16:1e:f5:da:31:af:54:75:bb:
         ca:68:bc:8d:1a:27:65:a7:80:ba:fa:8f:12:70:58:b5:65:b6:
         b8:6b:85:f9:47:ed:59:98:e0:ac:5e:25:1d:d7:08:44:5a:b7:
         39:0d:45:80:90:db:54:33:79:4b:0f:99:88:87:65:29:6e:6b:
         dd:a5:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org