Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA82C1B0ED761C92CA6954E090D7561748C5935C.cer
File:                     BA82C1B0ED761C92CA6954E090D7561748C5935C.cer (raw, json)
Hash identifier:          dEomQmEImpty/XiyHToXwfiKAZ5U5wR5YvKZnHXvDeA=
Subject key identifier:   BA:82:C1:B0:ED:76:1C:92:CA:69:54:E0:90:D7:56:17:48:C5:93:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       600ADCE89F1807221A7C2238B12FB6552615A91B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/BA82C1B0ED761C92CA6954E090D7561748C5935C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Mar 2023 18:03:01 +0000
Certificate not after:    Wed 06 Mar 2024 18:08:01 +0000
Subordinate resources:    AS: 264887
                          IP: 168.227.184.0/22
                          IP: 2804:2f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0a:dc:e8:9f:18:07:22:1a:7c:22:38:b1:2f:b6:55:26:15:a9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 18:03:01 2023 GMT
            Not After : Mar  6 18:08:01 2024 GMT
        Subject: CN=BA82C1B0ED761C92CA6954E090D7561748C5935C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:51:31:6e:95:c6:03:58:bf:e9:21:66:79:30:
                    76:6f:d9:4b:36:d3:2d:dd:0a:a2:3c:f4:03:98:8f:
                    b6:ed:65:f3:0e:f2:0b:6f:5a:fd:df:0a:7a:55:cb:
                    e6:b6:b0:5a:d6:a0:c3:0f:23:c8:0b:ac:1e:c7:34:
                    69:69:7a:a5:ce:d5:0f:0c:fe:36:61:d0:20:d4:08:
                    a2:9d:54:2c:b5:3a:06:47:77:4d:ba:be:40:c1:d2:
                    a5:9c:51:72:b8:47:77:3e:24:64:56:22:77:51:89:
                    09:a8:5b:6f:ea:45:13:e9:5c:86:61:4a:63:f0:28:
                    a8:83:df:ff:b7:b3:7b:6e:24:19:7f:10:10:df:2f:
                    69:6f:b9:08:82:42:b3:b9:7b:24:f5:95:eb:67:e3:
                    d2:59:60:90:0a:7a:a5:48:f7:43:e3:15:b7:f2:cb:
                    36:21:58:6f:8e:b1:f7:5d:85:b5:88:b0:04:a1:dd:
                    e0:66:57:64:9e:61:9a:9e:51:dc:1e:44:fd:78:c4:
                    da:e1:99:81:11:db:c5:84:fe:43:09:20:20:21:73:
                    c8:5a:79:8a:57:8e:8e:d7:10:dd:7f:d7:e9:d2:46:
                    d5:08:3f:ea:a4:eb:89:b5:9d:bf:c5:72:f0:55:e8:
                    51:be:5a:8c:45:e5:1a:98:22:ed:19:c8:24:d3:8c:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:82:C1:B0:ED:76:1C:92:CA:69:54:E0:90:D7:56:17:48:C5:93:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/BA82C1B0ED761C92CA6954E090D7561748C5935C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.184.0/22
                IPv6:
                  2804:2f60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264887

    Signature Algorithm: sha256WithRSAEncryption
         65:77:a4:84:c7:30:cf:47:ef:3f:6d:b0:9f:bc:3e:cb:0f:2e:
         ed:c7:77:73:49:50:c2:cf:ba:f2:74:0a:96:a9:b5:c0:36:05:
         99:fa:82:e8:32:98:65:a4:70:b7:a5:bb:55:44:5b:72:98:0e:
         35:fa:f0:f2:91:8e:ab:50:68:b2:38:4f:fa:71:98:a8:98:e0:
         b9:39:f3:40:e2:b4:f3:f5:f6:89:04:54:06:5c:b4:50:d3:1b:
         cf:ea:bd:a4:e0:a7:d6:eb:b0:fd:31:34:21:ea:dc:98:0c:02:
         09:5e:41:f1:c2:57:e0:e1:ed:5b:67:86:c0:06:b0:83:35:43:
         17:cf:c5:52:67:f9:47:a3:3c:a7:05:ee:dc:ea:07:10:09:85:
         39:a0:d4:3e:44:39:e5:56:11:c8:5d:91:9e:52:1d:d9:a7:13:
         f4:2c:73:c7:a0:f1:7b:5f:df:97:48:22:67:4c:69:6c:ea:69:
         1f:e6:38:c2:f5:69:93:17:1d:95:2b:4f:4c:7a:3b:1a:14:35:
         46:62:57:55:b6:d3:82:a7:36:41:47:ec:05:cb:ba:f9:0c:bc:
         a5:63:2a:96:d2:4a:69:36:1b:f3:e7:30:29:92:b2:ca:38:a8:
         8f:cf:13:9b:33:4c:67:d8:d0:d0:76:ec:dc:91:8e:43:e9:4b:
         7c:39:77:9c
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUYArc6J8YByIafCI4sS+2VSYVqRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDgxODAzMDFaFw0yNDAzMDYxODA4MDFaMDMxMTAvBgNV
BAMTKEJBODJDMUIwRUQ3NjFDOTJDQTY5NTRFMDkwRDc1NjE3NDhDNTkzNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjUTFulcYDWL/pIWZ5MHZv2Us2
0y3dCqI89AOYj7btZfMO8gtvWv3fCnpVy+a2sFrWoMMPI8gLrB7HNGlpeqXO1Q8M
/jZh0CDUCKKdVCy1OgZHd026vkDB0qWcUXK4R3c+JGRWIndRiQmoW2/qRRPpXIZh
SmPwKKiD3/+3s3tuJBl/EBDfL2lvuQiCQrO5eyT1letn49JZYJAKeqVI90PjFbfy
yzYhWG+OsfddhbWIsASh3eBmV2SeYZqeUdweRP14xNrhmYER28WE/kMJICAhc8ha
eYpXjo7XEN1/1+nSRtUIP+qk64m1nb/FcvBV6FG+WoxF5RqYIu0ZyCTTjPZlAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6gsGw7XYckspp
VOCQ11YXSMWTXDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84ZGVVRHQxQ293WWs4Q1RFRGRFOTdOTDF6Wlc4RVVXNHlD
aUJGaEI5NEhZTC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84ZGVVRHQxQ293WWs4Q1RFRGRFOTdOTDF6Wlc4RVVXNHlD
aUJGaEI5NEhZTC8wL0JBODJDMUIwRUQ3NjFDOTJDQTY5NTRFMDkwRDc1NjE3NDhD
NTkzNUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjjuDANBAIAAjAHAwUA
KAQvYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECrcwDQYJKoZIhvcNAQELBQAD
ggEBAGV3pITHMM9H7z9tsJ+8PssPLu3Hd3NJUMLPuvJ0CpaptcA2BZn6gugymGWk
cLelu1VEW3KYDjX68PKRjqtQaLI4T/pxmKiY4Lk580DitPP19okEVAZctFDTG8/q
vaTgp9brsP0xNCHq3JgMAgleQfHCV+Dh7VtnhsAGsIM1QxfPxVJn+UejPKcF7tzq
BxAJhTmg1D5EOeVWEchdkZ5SHdmnE/Qsc8eg8Xtf35dIImdMaWzqaR/mOML1aZMX
HZUrT0x6OxoUNUZiV1W204KnNkFH7AXLuvkMvKVjKpbSSmk2G/PnMCmSsso4qI/P
E5szTGfY0NB27NyRjkPpS3w5d5w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org