Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer
File:                     BABF8373B6870DD3972724FADB4B240DCE99E90C.cer (raw, json)
Hash identifier:          0RjrTJUFPZ+MLh1+9jiibKbNrx8oJavBHohJy2SYLvc=
Subject key identifier:   BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AD992546D7A39D47E7300F96FB72832F6D33E12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Mar 2023 11:57:50 +0000
Certificate not after:    Wed 06 Mar 2024 12:02:50 +0000
Subordinate resources:    AS: 265174
                          IP: 167.249.204.0/22
                          IP: 2804:2bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d9:92:54:6d:7a:39:d4:7e:73:00:f9:6f:b7:28:32:f6:d3:3e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 11:57:50 2023 GMT
            Not After : Mar  6 12:02:50 2024 GMT
        Subject: CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:2a:d7:aa:15:ee:3e:86:f1:5c:93:86:08:
                    61:69:77:6e:29:ad:76:40:d7:8b:3b:79:f3:d1:d9:
                    a5:42:d2:66:a3:e6:81:5f:27:d4:62:38:82:43:d9:
                    ee:80:59:cb:d3:de:c4:72:99:17:39:9f:2a:33:e7:
                    cf:ac:9e:cb:59:9c:2b:b8:09:ae:c3:07:ec:bb:ce:
                    3a:5e:79:f8:95:d7:26:d1:74:e8:f5:44:83:b9:1c:
                    be:74:96:bd:d6:00:73:29:d1:a5:a5:4c:09:d0:7a:
                    10:b8:f7:77:3d:30:b6:f5:5f:46:d1:74:db:f1:a9:
                    0e:40:02:ee:35:ba:10:24:28:66:8d:24:0b:d4:e1:
                    97:9d:2f:fd:98:27:30:85:f7:65:05:dd:66:80:e3:
                    94:a9:e9:fb:4a:2b:60:00:1f:6f:7a:6c:be:44:d3:
                    4c:28:1e:0f:77:53:20:ab:9b:8e:ab:12:1f:3e:be:
                    a4:35:59:49:56:12:a1:9a:77:b0:b6:8a:12:1f:7b:
                    12:6c:77:11:4c:8b:be:96:1f:1a:cb:1b:96:3f:0c:
                    1a:09:69:da:94:e2:2a:2c:e9:bc:3d:0d:90:fb:00:
                    d8:10:10:10:54:72:9d:41:df:8d:d1:9b:ed:30:72:
                    3b:d0:85:59:29:5a:a5:78:78:8b:88:25:c1:3c:14:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.204.0/22
                IPv6:
                  2804:2bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265174

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:7c:db:fd:c6:7d:a7:4e:f2:ee:e4:94:7a:e2:a0:bc:ad:
         59:e9:7e:03:54:b1:74:c4:1a:5b:7a:49:5c:2e:ce:88:eb:35:
         9a:24:07:42:af:2b:9e:3f:12:88:a7:81:83:30:7a:a6:85:79:
         51:34:aa:49:dd:f6:f8:ca:76:cc:80:60:74:5e:38:be:4e:e4:
         b0:6b:95:4d:f1:ec:32:e1:5a:22:2a:eb:80:d5:b1:a4:b2:b8:
         c1:3a:6c:c3:87:0c:2b:7b:13:50:9e:ba:73:e4:bb:70:d8:3f:
         f8:58:d9:b7:85:c2:2d:a0:1c:24:9f:b8:98:1d:b9:6d:ee:97:
         3e:18:11:be:c2:c6:f8:2d:cd:b0:31:02:98:a5:1d:f2:f7:01:
         08:ed:87:4d:64:e0:ce:53:50:68:05:16:5d:ca:32:c9:b7:b2:
         85:75:85:5a:24:e0:b0:c5:53:fd:ed:b7:fa:94:91:ab:04:af:
         67:87:ca:3c:bd:a1:94:3d:30:24:c1:42:d6:73:cb:8d:dd:7d:
         a4:d0:d1:0c:bc:44:86:fa:39:3b:1f:1d:2b:bb:ce:1d:44:e1:
         3d:91:c4:f8:b1:b7:ce:f5:29:3e:8e:70:4e:5e:fb:52:a0:e3:
         9b:09:33:03:9b:9f:51:62:1e:82:7f:85:81:4a:79:8e:69:20:
         65:37:c7:fe
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUWtmSVG16OdR+cwD5b7coMvbTPhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDgxMTU3NTBaFw0yNDAzMDYxMjAyNTBaMDMxMTAvBgNV
BAMTKEJBQkY4MzczQjY4NzBERDM5NzI3MjRGQURCNEIyNDBEQ0U5OUU5MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmyrXqhXuPobxXJOGCGFpd24p
rXZA14s7efPR2aVC0maj5oFfJ9RiOIJD2e6AWcvT3sRymRc5nyoz58+snstZnCu4
Ca7DB+y7zjpeefiV1ybRdOj1RIO5HL50lr3WAHMp0aWlTAnQehC493c9MLb1X0bR
dNvxqQ5AAu41uhAkKGaNJAvU4ZedL/2YJzCF92UF3WaA45Sp6ftKK2AAH296bL5E
00woHg93UyCrm46rEh8+vqQ1WUlWEqGad7C2ihIfexJsdxFMi76WHxrLG5Y/DBoJ
adqU4ios6bw9DZD7ANgQEBBUcp1B343Rm+0wcjvQhVkpWqV4eIuIJcE8FBkDAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6v4NztocN05cn
JPrbSyQNzpnpDDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GYU5KdnM4U2JNUUh6REdZaWhlSm1ZS1hGamdXcFFmVGtk
UVoyd3I4UEpXNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GYU5KdnM4U2JNUUh6REdZaWhlSm1ZS1hGamdXcFFmVGtk
UVoyd3I4UEpXNC8wL0JBQkY4MzczQjY4NzBERDM5NzI3MjRGQURCNEIyNDBEQ0U5
OUU5MEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqf5zDANBAIAAjAHAwUA
KAQrxDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC9YwDQYJKoZIhvcNAQELBQAD
ggEBAHqtfNv9xn2nTvLu5JR64qC8rVnpfgNUsXTEGlt6SVwuzojrNZokB0KvK54/
EoingYMweqaFeVE0qknd9vjKdsyAYHReOL5O5LBrlU3x7DLhWiIq64DVsaSyuME6
bMOHDCt7E1CeunPku3DYP/hY2beFwi2gHCSfuJgduW3ulz4YEb7CxvgtzbAxApil
HfL3AQjth01k4M5TUGgFFl3KMsm3soV1hVok4LDFU/3tt/qUkasEr2eHyjy9oZQ9
MCTBQtZzy43dfaTQ0Qy8RIb6OTsfHSu7zh1E4T2RxPixt871KT6OcE5e+1Kg45sJ
MwObn1FiHoJ/hYFKeY5pIGU3x/4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org