Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BACBEB2BB9081AD648515D3C55D34BECE2CB9D9F.cer
File:                     BACBEB2BB9081AD648515D3C55D34BECE2CB9D9F.cer (raw, json)
Hash identifier:          tA3mCBrWioX+RWehHB3HCysfAjf6hgH5UtkpILjeySs=
Subject key identifier:   BA:CB:EB:2B:B9:08:1A:D6:48:51:5D:3C:55:D3:4B:EC:E2:CB:9D:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E24130B66039AAE51256AE4B7456690A9F3936E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/BACBEB2BB9081AD648515D3C55D34BECE2CB9D9F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 15:14:54 +0000
Certificate not after:    Wed 04 Sep 2024 15:19:54 +0000
Subordinate resources:    AS: 270579
                          IP: 189.126.84.0/22
                          IP: 2804:6e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:13:0b:66:03:9a:ae:51:25:6a:e4:b7:45:66:90:a9:f3:93:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 15:14:54 2023 GMT
            Not After : Sep  4 15:19:54 2024 GMT
        Subject: CN=BACBEB2BB9081AD648515D3C55D34BECE2CB9D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:5d:30:ed:db:16:58:a9:a1:9b:e1:78:d5:
                    ff:2c:f7:ab:6a:0e:70:5e:d9:76:04:6a:25:df:34:
                    8f:ce:a7:e1:fa:3e:79:84:9c:50:ed:92:a9:40:b9:
                    cd:dd:a8:cb:03:dd:d4:ac:d1:a9:4b:c2:92:39:79:
                    5a:fc:3a:3a:7a:b5:f0:cc:0d:85:5a:60:a2:41:e1:
                    81:d2:51:67:f0:5e:64:21:db:66:97:ea:be:82:5d:
                    e2:56:5a:78:2e:40:a3:dd:e3:04:eb:db:85:00:f4:
                    1b:38:b7:84:14:c4:ac:03:2b:92:b1:02:23:7a:84:
                    a3:bd:25:c3:dc:aa:17:f9:f6:19:f4:e0:3b:b6:fb:
                    d4:eb:8e:d0:9b:c4:10:f4:33:ee:49:af:b1:03:b6:
                    6c:c0:58:44:ff:0a:0a:e3:44:07:f2:07:f8:f0:36:
                    7b:87:df:70:49:20:5f:52:47:ae:6a:d2:c9:e9:c5:
                    43:7e:48:64:13:e8:7d:51:26:3c:fb:e3:47:73:ad:
                    e2:7c:ac:f2:6c:5a:72:b0:4e:8c:26:e3:47:96:24:
                    12:95:42:ce:b1:ae:1c:77:97:10:33:08:fc:0c:be:
                    34:49:39:50:43:c6:94:09:d4:a6:e1:d9:cd:ce:73:
                    b1:48:54:34:35:29:99:94:e1:a7:30:81:39:47:49:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:CB:EB:2B:B9:08:1A:D6:48:51:5D:3C:55:D3:4B:EC:E2:CB:9D:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/1/BACBEB2BB9081AD648515D3C55D34BECE2CB9D9F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22
                IPv6:
                  2804:6e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270579

    Signature Algorithm: sha256WithRSAEncryption
         54:47:dd:18:23:4c:fa:15:f8:03:09:56:82:c0:68:63:34:11:
         52:46:0c:83:9e:a4:76:f8:56:69:9e:cc:ba:9f:3e:db:a5:ba:
         40:c2:01:4b:9f:20:ea:c4:42:4a:53:6b:b0:e3:2d:45:2c:41:
         b2:42:5c:96:6d:f9:4b:4d:52:f2:26:11:46:5f:43:de:fb:91:
         26:89:72:88:bf:5d:bc:83:80:bb:d4:9b:b4:d1:20:69:44:22:
         66:aa:52:1d:82:5f:7f:84:fa:f5:f9:23:f0:6e:a4:14:36:b3:
         c8:b8:8d:f2:10:f0:66:76:91:94:30:4f:4d:74:cc:15:8c:4b:
         89:62:3f:c9:19:47:86:27:d6:05:dd:97:63:48:0d:bd:ae:80:
         7b:ef:60:35:35:33:cf:3e:7f:3d:af:18:6d:07:9e:00:73:ac:
         9e:32:44:1f:6f:bf:b2:8b:21:b2:ad:cf:2e:c6:b6:a1:95:e5:
         ea:b3:56:1d:e1:bb:6a:4d:01:33:45:30:2b:f3:bc:95:c9:7b:
         fa:8c:31:e6:7e:59:1c:4f:6b:b9:4c:e0:4e:3a:fd:9f:4d:bd:
         ff:d8:1b:66:f8:85:51:4c:41:01:2c:75:5c:04:d4:d3:53:1b:
         30:38:58:7d:54:c5:32:a5:e3:f3:45:a0:18:62:f6:1d:16:e5:
         1a:09:64:13
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUbiQTC2YDmq5RJWrkt0VmkKnzk24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDYxNTE0NTRaFw0yNDA5MDQxNTE5NTRaMDMxMTAvBgNV
BAMTKEJBQ0JFQjJCQjkwODFBRDY0ODUxNUQzQzU1RDM0QkVDRTJDQjlEOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1F0w7dsWWKmhm+F41f8s96tq
DnBe2XYEaiXfNI/Op+H6PnmEnFDtkqlAuc3dqMsD3dSs0alLwpI5eVr8Ojp6tfDM
DYVaYKJB4YHSUWfwXmQh22aX6r6CXeJWWnguQKPd4wTr24UA9Bs4t4QUxKwDK5Kx
AiN6hKO9JcPcqhf59hn04Du2+9TrjtCbxBD0M+5Jr7EDtmzAWET/CgrjRAfyB/jw
NnuH33BJIF9SR65q0snpxUN+SGQT6H1RJjz740dzreJ8rPJsWnKwTowm40eWJBKV
Qs6xrhx3lxAzCPwMvjRJOVBDxpQJ1Kbh2c3Oc7FIVDQ1KZmU4acwgTlHSSudAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6y+sruQga1khR
XTxV00vs4sudnzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zS3loU3REVUVMbWdtZUVkZkw5N252M2Rpa3VReGZDOHBN
QU01djRrVmZWQS8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zS3loU3REVUVMbWdtZUVkZkw5N252M2Rpa3VReGZDOHBN
QU01djRrVmZWQS8xL0JBQ0JFQjJCQjkwODFBRDY0ODUxNUQzQzU1RDM0QkVDRTJD
QjlEOUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr1+VDANBAIAAjAHAwUA
KARuKDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIPMwDQYJKoZIhvcNAQELBQAD
ggEBAFRH3RgjTPoV+AMJVoLAaGM0EVJGDIOepHb4VmmezLqfPtulukDCAUufIOrE
QkpTa7DjLUUsQbJCXJZt+UtNUvImEUZfQ977kSaJcoi/XbyDgLvUm7TRIGlEImaq
Uh2CX3+E+vX5I/BupBQ2s8i4jfIQ8GZ2kZQwT010zBWMS4liP8kZR4Yn1gXdl2NI
Db2ugHvvYDU1M88+fz2vGG0HngBzrJ4yRB9vv7KLIbKtzy7GtqGV5eqzVh3hu2pN
ATNFMCvzvJXJe/qMMeZ+WRxPa7lM4E46/Z9Nvf/YG2b4hVFMQQEsdVwE1NNTGzA4
WH1UxTKl4/NFoBhi9h0W5RoJZBM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org