Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BAF2F00AF9A4B0421C581606DECAACE42785F24D.cer
File:                     BAF2F00AF9A4B0421C581606DECAACE42785F24D.cer (raw, json)
Hash identifier:          KwguuCqe4sfTglI2Ng7W3iLhT4JSsiWVZHTtLA5xhrg=
Subject key identifier:   BA:F2:F0:0A:F9:A4:B0:42:1C:58:16:06:DE:CA:AC:E4:27:85:F2:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58FF6805C35C889510AEE91F514D57C5FD34AC83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/BAF2F00AF9A4B0421C581606DECAACE42785F24D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 22:25:21 +0000
Certificate not after:    Mon 07 Apr 2025 22:30:21 +0000
Subordinate resources:    AS: 269537
                          IP: 45.188.168.0/22
                          IP: 2804:6624::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ff:68:05:c3:5c:88:95:10:ae:e9:1f:51:4d:57:c5:fd:34:ac:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 22:25:21 2024 GMT
            Not After : Apr  7 22:30:21 2025 GMT
        Subject: CN=BAF2F00AF9A4B0421C581606DECAACE42785F24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:02:09:e0:d6:73:7b:95:12:e6:ae:c7:d7:
                    2d:06:eb:5c:5a:9e:99:da:8d:2a:31:66:5a:9b:17:
                    0b:fc:12:90:da:17:3a:f2:95:44:85:45:a8:a2:76:
                    a7:a5:68:f6:64:5e:f6:90:ef:bb:fc:90:25:25:a6:
                    64:38:7d:d0:76:cd:eb:96:dd:56:59:8f:21:49:33:
                    94:2b:ff:d5:9a:1d:eb:19:c1:2f:35:10:ad:be:b3:
                    39:43:c3:2a:c3:fb:b6:47:df:00:a2:95:99:00:91:
                    29:fa:56:9c:56:1d:18:08:37:40:76:e7:1f:6c:f6:
                    97:e3:99:f5:65:08:5a:8e:77:9c:d4:ff:ad:d7:29:
                    f4:45:c1:0f:9e:49:fe:97:59:ed:88:3d:1e:ad:27:
                    b7:f1:80:8c:65:b0:9b:27:83:b2:8f:ef:0f:55:d8:
                    37:44:96:c4:4d:35:53:47:a1:21:b6:70:9d:ca:e9:
                    2f:df:32:0d:ad:cb:4c:9a:a9:6f:95:a5:5b:f1:66:
                    95:da:8b:96:a3:d5:3b:8a:cc:a7:25:83:0b:d2:2e:
                    1c:d3:5d:28:74:d7:fd:f6:20:08:18:b0:04:94:79:
                    b7:b7:83:97:1b:9f:b8:5e:3f:b9:e8:c4:ef:ea:58:
                    f3:27:fa:11:c9:19:75:86:e8:d8:17:2f:81:25:c8:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:F2:F0:0A:F9:A4:B0:42:1C:58:16:06:DE:CA:AC:E4:27:85:F2:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/BAF2F00AF9A4B0421C581606DECAACE42785F24D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.168.0/22
                IPv6:
                  2804:6624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269537

    Signature Algorithm: sha256WithRSAEncryption
         05:10:f8:0c:2d:71:0f:d4:61:c8:33:ca:e4:be:ae:23:f7:5d:
         bc:7d:0e:a6:73:e6:da:c8:cf:16:d6:57:01:ca:69:dc:29:ed:
         95:2a:27:14:e2:2b:cf:a0:80:4b:a7:a6:70:22:8f:08:78:d9:
         e6:30:e9:4d:47:98:58:24:15:79:1c:70:2e:f2:84:47:c7:82:
         51:ce:88:4a:e3:8d:35:76:db:22:f4:84:c8:a9:dc:df:89:ca:
         3f:a1:de:4b:c6:a4:3f:d1:6c:39:c1:b8:46:5d:8b:23:bb:7d:
         06:58:3b:57:04:6a:7f:56:bf:af:39:5f:b9:38:65:4f:23:f4:
         03:dc:36:da:e7:af:61:54:99:ff:f3:40:04:2a:fa:cc:1d:4d:
         b4:29:3e:ed:14:02:bc:86:99:23:c0:e1:d5:d2:e2:84:8b:e6:
         f8:64:28:7d:d9:e5:0e:c9:b2:ae:38:9c:7c:1b:71:f0:ab:0b:
         a0:01:ec:18:6f:c0:27:09:a2:ea:44:84:92:6a:05:35:cc:5b:
         50:67:bd:19:ef:46:d3:f1:e4:e5:3b:65:d5:ac:ac:f4:33:5d:
         2d:88:db:ef:51:03:f8:69:fd:75:cb:25:33:9b:bd:ea:fb:3b:
         fd:1f:f3:c6:06:4b:17:74:15:14:eb:af:46:ea:29:2f:46:97:
         0c:04:cf:f4
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUWP9oBcNciJUQrukfUU1Xxf00rIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDgyMjI1MjFaFw0yNTA0MDcyMjMwMjFaMDMxMTAvBgNV
BAMTKEJBRjJGMDBBRjlBNEIwNDIxQzU4MTYwNkRFQ0FBQ0U0Mjc4NUYyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38gIJ4NZze5US5q7H1y0G61xa
npnajSoxZlqbFwv8EpDaFzrylUSFRaiidqelaPZkXvaQ77v8kCUlpmQ4fdB2zeuW
3VZZjyFJM5Qr/9WaHesZwS81EK2+szlDwyrD+7ZH3wCilZkAkSn6VpxWHRgIN0B2
5x9s9pfjmfVlCFqOd5zU/63XKfRFwQ+eSf6XWe2IPR6tJ7fxgIxlsJsng7KP7w9V
2DdElsRNNVNHoSG2cJ3K6S/fMg2ty0yaqW+VpVvxZpXai5aj1TuKzKclgwvSLhzT
XSh01/32IAgYsASUebe3g5cbn7heP7noxO/qWPMn+hHJGXWG6NgXL4ElyB3PAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS68vAK+aSwQhxY
FgbeyqzkJ4XyTTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERDJHQm5uZVVpWkh2azN6VW9QYmtpczZmeW02UlF2aVVR
NnZNNlJDdjFUeC8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vREQyR0JubmVVaVpIdmszelVvUGJraXM2ZnltNlJRdmlV
UTZ2TTZSQ3YxVHgvMS9CQUYyRjAwQUY5QTRCMDQyMUM1ODE2MDZERUNBQUNFNDI3
ODVGMjRELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvKgwDQQCAAIwBwMF
ACgEZiQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBzhMA0GCSqGSIb3DQEBCwUA
A4IBAQAFEPgMLXEP1GHIM8rkvq4j9128fQ6mc+bayM8W1lcBymncKe2VKicU4ivP
oIBLp6ZwIo8IeNnmMOlNR5hYJBV5HHAu8oRHx4JRzohK4401dtsi9ITIqdzfico/
od5LxqQ/0Ww5wbhGXYsju30GWDtXBGp/Vr+vOV+5OGVPI/QD3Dba569hVJn/80AE
KvrMHU20KT7tFAK8hpkjwOHV0uKEi+b4ZCh92eUOybKuOJx8G3HwqwugAewYb8An
CaLqRISSagU1zFtQZ70Z70bT8eTlO2XVrKz0M10tiNvvUQP4af11yyUzm73q+zv9
H/PGBksXdBUU669G6ikvRpcMBM/0
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org