Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.cer
File:                     BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.cer (raw, json)
Hash identifier:          rNxWcrmMmFzPdMy80DIA/XyYxvKKf4sPKOmXJiz0wrE=
Subject key identifier:   BA:65:05:BD:1E:1E:44:E5:EC:57:6C:32:3E:8F:56:20:F1:5D:BA:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08784B6912EB3A9DFEFFC1E1EDA5E610BFC68F13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 23:49:08 +0000
Certificate not after:    Mon 22 Jul 2024 23:54:08 +0000
Subordinate resources:    AS: 262661
                          IP: 177.128.216.0/22
                          IP: 179.96.168.0/21
                          IP: 2804:1548::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:78:4b:69:12:eb:3a:9d:fe:ff:c1:e1:ed:a5:e6:10:bf:c6:8f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 23:49:08 2023 GMT
            Not After : Jul 22 23:54:08 2024 GMT
        Subject: CN=BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:7c:58:f5:e4:df:11:35:e8:80:8c:bc:f2:
                    b3:69:c4:57:40:1c:57:d8:3f:e5:8d:7b:3f:2e:38:
                    d1:54:a2:2e:a8:46:a6:9e:20:66:fa:bd:d5:98:0a:
                    77:72:63:a8:59:24:9d:41:6f:76:1e:5d:e9:1c:bc:
                    e5:4b:6c:88:f5:ce:2b:14:32:3c:fe:62:7d:6a:05:
                    b3:3b:a8:4c:3e:09:6c:86:86:c4:58:c9:32:8d:a4:
                    01:a2:bf:e3:02:09:6f:f3:f2:27:b4:45:b6:6f:00:
                    06:21:be:02:83:c9:55:5b:9f:cb:74:1f:b5:98:29:
                    4f:13:4c:ca:cf:0d:bd:2f:89:ea:ca:21:e9:42:62:
                    52:87:d5:af:bd:18:35:11:dc:4e:49:68:6a:aa:77:
                    7e:9c:69:5d:f2:2d:8a:80:24:e3:f9:fc:1c:32:98:
                    1d:12:93:f1:62:60:71:70:a1:d3:01:33:15:80:30:
                    b0:01:af:d9:93:15:9f:31:1f:3d:79:d8:c7:f5:2f:
                    89:59:14:e6:8e:4e:6d:14:d7:85:a3:c5:83:bc:f5:
                    8e:d6:63:84:a4:61:5e:8c:d8:73:dc:43:fc:6d:2c:
                    b6:1a:e5:c4:9c:a9:32:d4:93:93:2c:fa:d5:79:67:
                    47:d0:f7:40:d3:21:46:f9:27:3a:c9:09:e3:8b:4a:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:65:05:BD:1E:1E:44:E5:EC:57:6C:32:3E:8F:56:20:F1:5D:BA:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/BA6505BD1E1E44E5EC576C323E8F5620F15DBAFD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.216.0/22
                  179.96.168.0/21
                IPv6:
                  2804:1548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262661

    Signature Algorithm: sha256WithRSAEncryption
         a6:d4:10:10:80:c7:e9:eb:2a:4d:75:94:29:d5:15:c5:e0:4c:
         b7:04:3c:de:ce:9e:5d:87:d6:88:d2:21:cc:22:80:4d:24:28:
         cf:fc:f1:10:93:f3:69:b9:25:c7:94:38:d4:b1:0b:7d:17:48:
         1f:b4:2c:19:24:e4:79:2b:7e:1e:03:f8:c4:61:bc:b4:e2:5e:
         dc:a8:0c:99:5d:e7:4f:ec:a5:41:17:7a:7f:de:07:09:2a:08:
         3b:f0:74:f7:b0:6f:ef:92:e1:02:d7:85:56:69:3a:0d:6b:a9:
         22:d6:59:7f:36:f4:fc:0a:6f:db:1d:5a:3e:98:74:24:6d:9e:
         de:8a:45:d5:dc:03:ff:4d:73:31:b3:2a:8e:d0:76:72:9b:1e:
         ef:4a:c5:b1:43:e2:3f:18:26:00:29:13:93:73:2c:ec:e2:0c:
         0d:9d:57:ec:84:c0:1e:bf:ae:b2:47:24:b7:14:5e:39:7f:88:
         57:04:54:ae:cb:33:4b:5f:06:d6:9a:00:e3:16:92:70:15:8f:
         8c:5a:68:f3:fc:fd:c3:1c:0d:84:91:9f:5e:b2:c2:ce:c8:87:
         14:14:2f:8f:63:fd:87:24:fa:f9:0a:a0:f4:41:db:4c:51:26:
         dd:39:8f:d1:4c:04:a5:12:0a:0f:76:22:66:e1:2a:a9:41:48:
         d8:01:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org