Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.cer
File:                     BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.cer (raw, json)
Hash identifier:          j1cbsPC1xRElklIGZX21sMVy5L9FuJ/XBxFgm4pvT3U=
Subject key identifier:   BA:D9:CC:7C:BF:44:E5:17:2A:5D:41:F8:5B:54:47:D3:27:D8:8E:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       612C272A9B06E08CBEC6F9F1C7496233C475B925
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 24 Sep 2023 14:21:15 +0000
Certificate not after:    Sun 22 Sep 2024 14:26:15 +0000
Subordinate resources:    AS: 61831
                          IP: 201.140.252.0/22
                          IP: 2804:1a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2c:27:2a:9b:06:e0:8c:be:c6:f9:f1:c7:49:62:33:c4:75:b9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 24 14:21:15 2023 GMT
            Not After : Sep 22 14:26:15 2024 GMT
        Subject: CN=BAD9CC7CBF44E5172A5D41F85B5447D327D88E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:f2:ab:03:cf:25:3e:3e:8e:cd:e8:0c:81:
                    b8:0b:24:4c:6d:70:34:12:0a:dd:fd:04:6d:0a:e1:
                    9c:9c:eb:2d:17:b3:71:9f:64:c4:74:17:16:54:1a:
                    3f:72:7c:04:1e:07:37:16:d0:7c:eb:77:d2:e1:cf:
                    0b:1a:f7:eb:0b:c5:97:03:15:1b:5e:ad:3a:3e:0f:
                    8a:87:07:81:0a:34:ab:2e:b5:4c:52:22:8c:37:e2:
                    58:19:ff:1b:22:62:11:0f:1b:b2:0e:a8:43:5a:88:
                    5a:6f:98:c9:f2:8a:3e:f7:91:0d:77:b1:3e:4f:c8:
                    a4:d9:d4:7a:7d:43:24:6e:fa:bf:b4:d7:9e:be:2e:
                    31:e4:80:eb:34:af:ee:55:65:65:d7:36:b7:fa:f8:
                    c2:70:98:62:9e:1a:54:f8:f1:5c:bb:67:41:0a:ed:
                    a7:c2:09:96:52:d2:66:90:bb:c7:7d:70:aa:fb:ff:
                    02:8d:58:c4:4d:07:a6:7a:bf:a3:89:39:26:00:41:
                    d5:e3:14:4c:65:44:0c:bd:54:12:ea:24:b5:8a:bd:
                    cc:be:66:f0:9a:9f:38:69:a3:92:9e:1a:a6:3b:ea:
                    6a:09:66:dc:7b:c5:ed:b2:c5:20:d2:92:cb:bb:9a:
                    a4:b8:65:3a:1e:4c:67:32:3b:a2:c0:03:df:06:99:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:D9:CC:7C:BF:44:E5:17:2A:5D:41:F8:5B:54:47:D3:27:D8:8E:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.252.0/22
                IPv6:
                  2804:1a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61831

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:81:8f:aa:da:f7:b2:de:46:de:99:0b:31:97:f2:76:20:
         c8:2d:21:f4:c3:3b:83:89:79:bb:35:b8:46:62:08:0c:a7:65:
         51:7b:7f:1b:49:0d:7b:40:4e:3a:62:ab:8f:a3:d1:24:9e:fe:
         01:98:99:fd:02:72:6c:08:5c:99:6b:91:10:a3:db:ef:2c:81:
         d6:10:0f:47:f4:58:01:17:8e:1a:7b:0d:46:84:a0:6d:d3:d9:
         6f:a4:74:7b:da:c6:ac:9b:8a:0c:19:81:6d:e0:47:60:06:fb:
         fd:41:9c:69:91:5c:0f:bb:a7:2d:a5:12:4f:86:02:43:a4:87:
         c9:cd:cc:d5:e8:c2:43:6f:6b:b2:cd:f5:38:db:fa:56:7d:d0:
         3b:aa:fa:27:7d:1f:3e:32:23:20:34:bc:1c:b8:57:ff:f9:6d:
         3f:8d:c1:f5:27:ff:47:76:3c:4b:cf:76:ea:25:3d:ef:4a:13:
         d1:e5:bf:90:7e:64:9d:d8:5c:01:69:af:a2:c3:ac:aa:0c:74:
         2b:af:64:a5:88:f5:1f:36:a8:2c:00:14:e1:21:01:3d:98:4e:
         19:49:e7:02:78:8d:34:09:0f:5a:76:70:c1:fd:5e:09:cf:31:
         5b:95:6b:20:1d:29:28:08:8f:fd:da:a7:92:7a:05:93:47:79:
         49:e9:35:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org