Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.cer
File:                     BA58EA98FCDCC73FCA332747FF11D3A152683827.cer (raw, json)
Hash identifier:          36CPfw9ah0+TZcfa3XYtTdlZLx2dvz0kkcGl7UjHRa0=
Subject key identifier:   BA:58:EA:98:FC:DC:C7:3F:CA:33:27:47:FF:11:D3:A1:52:68:38:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       794CF150E055A940148C65D979BCC0213B644EA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 19:39:47 +0000
Certificate not after:    Thu 07 Nov 2024 19:44:47 +0000
Subordinate resources:    AS: 61917
                          IP: 45.188.152.0/22
                          IP: 167.250.56.0/22
                          IP: 179.124.132.0/22
                          IP: 2804:16cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4c:f1:50:e0:55:a9:40:14:8c:65:d9:79:bc:c0:21:3b:64:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 19:39:47 2023 GMT
            Not After : Nov  7 19:44:47 2024 GMT
        Subject: CN=BA58EA98FCDCC73FCA332747FF11D3A152683827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:98:42:67:38:4c:5a:54:fd:bd:a9:f4:80:02:
                    1d:e2:53:bf:6f:db:2f:02:87:b1:b8:19:1d:ef:c2:
                    ee:68:34:7a:25:f2:a8:b3:dd:63:8e:a8:ad:45:0a:
                    4a:10:25:78:8f:34:e7:30:8f:8b:40:7a:12:8c:a4:
                    61:00:b2:9b:61:27:b8:67:f3:a1:89:dd:73:e2:04:
                    e5:bd:d2:06:10:ff:a7:a4:9d:96:4a:cd:f1:6e:ae:
                    4d:3b:ea:73:52:3f:f7:8c:9a:60:c7:8b:2a:9c:f6:
                    a8:ed:58:65:b2:ad:3d:5d:1d:d8:b0:d8:66:3c:df:
                    ac:91:e8:62:40:1c:b2:da:48:ed:fc:4d:a8:80:dc:
                    25:17:28:cc:92:50:0d:dc:d6:5d:7e:5f:0f:e8:7e:
                    bc:c9:49:91:a5:0f:2d:15:59:a3:bb:c7:7e:23:22:
                    90:64:35:c6:e6:c1:44:81:9b:20:30:b1:26:5e:22:
                    a0:8b:8e:5a:61:00:ba:74:d1:1a:d9:73:80:1a:a7:
                    9b:13:a3:f0:da:fb:c9:a1:e2:9d:eb:b4:f2:0e:81:
                    cb:9b:60:19:c7:bb:b9:2d:20:8f:95:c3:33:63:32:
                    58:63:47:eb:c1:f7:e4:93:29:73:82:52:04:76:a1:
                    8c:d3:a7:b8:8f:f7:0b:3e:bd:f8:a7:c6:8e:29:49:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:58:EA:98:FC:DC:C7:3F:CA:33:27:47:FF:11:D3:A1:52:68:38:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.152.0/22
                  167.250.56.0/22
                  179.124.132.0/22
                IPv6:
                  2804:16cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61917

    Signature Algorithm: sha256WithRSAEncryption
         79:08:4f:3e:3b:7a:1f:55:4c:9d:06:6e:c9:40:86:b6:95:90:
         16:87:42:81:df:83:77:2d:2c:af:94:f3:4c:d2:b5:a1:c8:86:
         c1:b9:94:b2:19:52:50:f8:96:8b:e9:d8:a9:9a:fd:41:34:af:
         e0:bc:d9:38:bc:98:df:5b:ce:6d:68:71:98:32:dc:4a:46:a4:
         7b:9e:bc:2e:03:0d:30:f2:4b:c0:4d:44:7f:91:fc:86:18:eb:
         b9:64:f7:53:50:08:6f:d0:1f:b5:7b:fa:78:75:5b:74:05:39:
         ad:9d:8f:e4:d6:76:bb:4a:53:46:ef:12:ce:8c:aa:77:e2:ee:
         2a:ce:7d:2f:ce:07:b4:e0:3a:4b:3a:74:1e:cd:7f:c1:85:4f:
         87:05:27:78:91:20:03:df:4b:02:59:7f:b1:d1:a9:7e:b9:b6:
         01:08:47:37:e5:d1:bd:01:bd:d5:90:2b:c0:b5:b8:07:f4:6e:
         03:af:53:34:3c:ff:e5:b0:79:ae:9e:99:8d:bc:6f:a0:47:06:
         d8:b6:46:57:b7:1a:19:61:5a:21:fe:7e:80:cf:e4:49:b2:6f:
         60:c4:2c:19:a8:a5:b8:b6:5a:c4:7a:08:9e:b1:20:27:95:ce:
         40:e3:d8:31:89:21:55:bb:14:7c:a7:af:87:00:f5:ba:6d:30:
         02:97:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org