Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
File:                     BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer (raw, json)
Hash identifier:          ou12A4hM7D7KNHTOZ+2oKAFIsVMnZ1GTNp2zKxXEvL8=
Subject key identifier:   BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4491C1F4D2C37595183BF514ECD4D1D0E8A7E7BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 18:19:44 +0000
Certificate not after:    Tue 03 Sep 2024 18:24:44 +0000
Subordinate resources:    AS: 265080
                          IP: 170.233.120.0/22
                          IP: 2804:3278::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:91:c1:f4:d2:c3:75:95:18:3b:f5:14:ec:d4:d1:d0:e8:a7:e7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 18:19:44 2023 GMT
            Not After : Sep  3 18:24:44 2024 GMT
        Subject: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:e4:37:5a:4b:38:38:ae:23:12:af:d7:22:
                    2b:e2:b7:bf:02:71:91:a7:07:2c:1f:7f:c0:4d:82:
                    7c:96:6c:fd:06:48:56:c0:0e:ea:d7:a8:cd:33:f7:
                    00:e7:09:f3:ac:5b:45:52:35:bb:39:3b:4f:ce:44:
                    9e:19:8e:05:db:d7:79:13:c4:12:8c:f0:8e:c0:d8:
                    32:71:2c:e4:bf:8d:4b:5b:ef:64:39:d3:2f:0b:cc:
                    a5:45:2c:b8:96:b9:eb:77:c9:87:43:5b:c4:16:25:
                    25:8c:22:06:21:27:d2:18:87:78:11:62:e3:58:5e:
                    2b:98:04:62:7f:f5:08:91:ee:67:4c:f2:da:e7:e4:
                    9e:fb:6c:a4:ee:a3:93:bd:b2:e5:73:40:2f:69:b4:
                    ac:b4:1f:14:e0:ba:0e:0a:32:cc:61:77:87:ae:da:
                    cc:2e:aa:6c:71:81:ea:d2:40:1b:38:b0:dc:30:d8:
                    6a:11:b0:fd:fe:78:08:86:a2:80:44:2b:b0:2b:6b:
                    9a:3b:d4:d0:6c:b6:4a:0f:38:c1:26:2a:78:70:a8:
                    7c:69:e3:ae:65:d5:f6:01:13:9f:50:28:ba:c0:c1:
                    97:69:17:26:ae:f9:0f:8b:3b:71:f0:6c:62:86:db:
                    49:2e:7b:c5:f2:b8:88:a3:72:16:08:15:ca:d1:e5:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/22
                IPv6:
                  2804:3278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265080

    Signature Algorithm: sha256WithRSAEncryption
         35:2c:9e:06:95:70:07:c0:14:10:ea:78:47:b5:ea:1c:ed:2b:
         25:04:11:4e:b3:be:89:5f:81:a4:ec:98:7c:8e:3d:05:59:79:
         09:02:b5:00:9a:da:99:44:2a:38:7a:d3:c6:7d:ce:e2:a3:1a:
         51:b9:b6:69:8e:e2:56:4e:cd:14:cf:72:ff:1a:7e:32:36:3a:
         9f:bf:8e:1a:55:de:86:87:b0:c6:c6:85:97:f6:0f:9a:15:56:
         b3:d2:80:36:a8:11:b6:84:6e:d5:18:a5:08:00:0e:70:a6:4b:
         79:fd:35:20:ad:c5:67:09:89:be:19:58:83:6b:6f:bf:bb:90:
         54:a5:54:b2:e1:ec:03:ce:7e:8c:52:cb:45:47:31:38:44:57:
         84:bc:fd:74:79:aa:1c:ff:97:79:b8:ed:55:63:a1:e1:ff:e5:
         b9:f2:6b:4d:a7:bf:16:67:09:0d:bf:2d:3f:c0:82:06:d3:9f:
         b0:c2:bb:6c:69:5b:42:1a:6f:73:41:b4:1c:1d:eb:35:b0:aa:
         35:8d:b1:f7:0c:db:d0:57:93:22:fd:06:0d:94:45:b0:a6:e1:
         7c:95:5b:3e:c4:e3:eb:a0:02:95:ea:1e:77:da:22:1b:97:6d:
         ee:09:4e:da:d5:8f:15:e3:01:8c:f3:7c:88:5b:63:d1:b1:fa:
         48:31:1b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org