Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.cer
File:                     BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.cer (raw, json)
Hash identifier:          9hDpOlHD9MZ8SBgw4JEJ7YT21N5pjiDy9zWUeyz229A=
Subject key identifier:   BA:4E:F3:88:A4:6A:F3:E0:3A:8B:6D:2D:69:A4:1E:F3:8A:C6:DB:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52F71598DF24FE385227EF4FA728CA4963469C38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Dec 2023 16:27:53 +0000
Certificate not after:    Thu 19 Dec 2024 16:32:53 +0000
Subordinate resources:    AS: 267242
                          IP: 45.232.36.0/22
                          IP: 2804:4a78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f7:15:98:df:24:fe:38:52:27:ef:4f:a7:28:ca:49:63:46:9c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 21 16:27:53 2023 GMT
            Not After : Dec 19 16:32:53 2024 GMT
        Subject: CN=BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:a7:53:17:64:ae:dd:46:ba:fa:6d:de:a1:
                    d1:7f:69:f0:45:9f:bf:11:75:c8:e1:4d:13:cb:dc:
                    54:e7:f5:eb:7f:e6:c1:95:23:66:c9:65:34:fe:1c:
                    23:39:6c:6a:cb:eb:91:23:2f:b1:d2:1d:8d:b7:98:
                    59:55:ed:79:1e:6d:62:d0:2f:f2:d5:fe:fd:34:5f:
                    43:d9:cd:85:5e:78:0a:33:83:22:40:8f:42:cc:3c:
                    37:3b:d7:3f:43:b2:50:03:fd:9b:5f:29:68:5e:1e:
                    66:28:fc:4c:53:76:02:c4:b7:a5:e9:d2:9d:01:e8:
                    54:f8:ae:67:81:da:2a:64:60:51:2d:4c:4e:a0:a5:
                    79:3c:49:7f:7a:9a:29:38:fd:c7:0a:a2:00:a5:2b:
                    68:be:40:58:a2:e0:92:88:37:56:eb:b9:2b:73:40:
                    c6:40:60:41:98:73:95:e3:75:44:a5:d6:4f:a0:fe:
                    5b:4a:b2:77:43:4a:12:7d:51:e6:8a:a5:c3:55:1b:
                    4b:19:3a:df:05:d0:df:57:c7:61:be:a7:1c:72:ce:
                    fe:52:be:77:f5:84:7f:f7:48:3f:ad:48:f2:d9:34:
                    89:7a:22:45:56:f2:60:18:ec:d4:e5:20:b5:a6:32:
                    9e:c3:3b:1d:8c:1b:3c:2c:a8:e6:96:05:72:08:e2:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:4E:F3:88:A4:6A:F3:E0:3A:8B:6D:2D:69:A4:1E:F3:8A:C6:DB:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/0/BA4EF388A46AF3E03A8B6D2D69A41EF38AC6DB13.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.36.0/22
                IPv6:
                  2804:4a78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267242

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:2c:ff:5b:f1:0a:b5:6c:ce:4e:4d:cc:e3:a3:65:08:fc:
         31:b1:13:37:0a:d0:76:ef:34:bd:72:9b:15:e5:80:49:77:d1:
         0a:9f:48:e3:54:15:aa:e9:1c:10:ac:7e:9a:96:c8:2d:10:3f:
         de:71:66:72:0b:1f:1d:44:18:d3:c7:98:a7:3f:25:50:10:3f:
         f0:6c:22:b3:1c:6d:6d:02:12:e4:8c:bb:b6:77:3a:e9:2c:9f:
         38:cb:47:a6:b1:26:d8:e7:33:c2:0f:1d:a9:71:7d:b0:8d:e8:
         10:7e:cc:83:61:77:a3:06:0f:34:28:ec:f5:c6:d5:1a:6e:5c:
         d9:32:d0:4c:89:a8:7a:91:69:48:c5:15:bf:ca:da:79:92:66:
         38:ce:87:48:8a:97:ba:fa:f7:ba:18:ba:25:26:dd:a1:3c:16:
         40:48:11:32:65:1c:2c:b4:a2:16:8f:dc:4a:e8:20:87:61:d7:
         77:e0:37:e0:b3:e3:c1:5c:4a:69:4f:35:be:61:f6:2f:24:1a:
         b7:5b:18:18:cd:c0:1c:7b:05:18:1a:51:08:66:b4:7e:39:bf:
         c1:ea:ef:a2:c0:87:89:c2:c8:c7:fb:29:9e:d6:95:b8:cc:68:
         de:53:48:53:8d:c7:bc:e7:8d:94:da:2b:2d:e7:76:b4:0c:a3:
         fb:79:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org