Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BAFB33D9061B33CAA164C814D099857A153B7E40.cer
File:                     BAFB33D9061B33CAA164C814D099857A153B7E40.cer (raw, json)
Hash identifier:          S99ZvragsFihipGlQocCtEi99xeRQZGuAv8H3D72YtY=
Subject key identifier:   BA:FB:33:D9:06:1B:33:CA:A1:64:C8:14:D0:99:85:7A:15:3B:7E:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D2E29FC0126D79056D6DD3FC0CF4DC02A86A815
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/BAFB33D9061B33CAA164C814D099857A153B7E40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Nov 2021 16:06:02 +0000
Certificate not after:    Thu 03 Nov 2022 16:11:02 +0000
Subordinate resources:    AS: 264524
                          IP: 138.0.0.0/22
                          IP: 170.247.36.0/22
                          IP: 2804:20f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2e:29:fc:01:26:d7:90:56:d6:dd:3f:c0:cf:4d:c0:2a:86:a8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  4 16:06:02 2021 GMT
            Not After : Nov  3 16:11:02 2022 GMT
        Subject: CN=BAFB33D9061B33CAA164C814D099857A153B7E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8f:43:a9:83:83:a1:a9:4a:fd:cf:1d:22:ec:
                    b3:0a:43:a3:92:3d:c7:c1:27:33:b2:88:ab:8f:dc:
                    06:65:df:c5:8c:cc:e9:37:a6:8d:64:18:12:ad:83:
                    15:86:99:89:21:9f:8c:c0:d8:b3:bd:fb:4d:dd:ad:
                    b2:5c:52:dc:7c:94:99:86:73:9b:63:de:dd:3a:4b:
                    b4:ad:cb:67:3c:44:bf:5b:80:f5:92:68:a5:8a:82:
                    f3:46:7f:a3:23:f7:05:75:58:6c:20:eb:26:46:09:
                    4f:4b:4e:80:17:31:9f:2c:0a:56:33:08:bc:a2:9d:
                    47:ac:86:72:0b:3e:c7:7e:a3:8a:6c:11:54:9b:0a:
                    e2:fb:e1:45:e3:b7:34:25:46:9f:15:3d:44:9a:a1:
                    ea:09:de:a0:7d:89:f7:07:7e:f8:79:b7:11:84:f4:
                    6c:ba:94:d3:3f:1d:87:c5:29:be:12:0f:98:5a:80:
                    76:a3:3c:ad:45:d0:2b:5f:7e:c4:d2:38:e4:a7:fb:
                    fc:61:c0:b6:84:90:a2:c9:7f:32:df:09:d3:00:77:
                    ce:47:f5:81:84:d4:06:5d:9a:84:ca:29:46:7b:da:
                    41:a5:ad:4b:31:eb:20:84:e1:d9:46:a5:18:fa:f5:
                    ac:79:22:1b:77:2b:cd:87:ee:2b:9a:95:47:be:25:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:FB:33:D9:06:1B:33:CA:A1:64:C8:14:D0:99:85:7A:15:3B:7E:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/BAFB33D9061B33CAA164C814D099857A153B7E40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.0.0/22
                  170.247.36.0/22
                IPv6:
                  2804:20f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264524

    Signature Algorithm: sha256WithRSAEncryption
         a8:26:e9:01:cf:45:19:e9:ee:5a:9d:3c:43:d6:60:af:41:7a:
         d8:7c:43:54:f2:62:0d:f7:98:d1:ec:e0:9c:05:cb:3f:e7:21:
         cc:82:a8:ba:09:e3:71:01:56:cc:13:c0:ec:17:97:42:e7:7a:
         07:b7:c3:e4:ed:d9:d9:07:d9:fa:15:99:4e:be:c8:18:bf:40:
         85:31:f4:3d:47:f1:25:a1:3b:d1:fd:0a:aa:ae:80:44:99:55:
         5e:c3:ee:3b:77:48:22:de:ef:e9:05:96:65:dc:d3:e1:aa:37:
         64:e7:c2:ab:0e:ae:9f:1e:e6:d8:f0:11:fc:33:dd:55:26:f0:
         64:a7:51:a5:21:e8:50:f2:37:92:cf:7b:df:41:dc:8f:28:12:
         41:c4:77:82:bf:eb:9e:bd:ab:b6:a2:48:c4:5a:6e:40:e5:f2:
         78:0e:00:c4:db:b3:9b:65:51:a8:e2:24:54:13:cd:dd:ef:bb:
         2e:5e:cd:16:ad:4b:60:ca:35:ca:a7:a6:96:62:b1:5e:fd:68:
         33:c5:dc:b7:eb:82:a4:1b:15:05:62:85:b5:ed:cd:5d:1e:6a:
         c5:d5:f7:eb:56:1b:13:85:b2:fa:21:4b:f7:b0:02:73:65:a6:
         ae:14:4c:fb:cd:2f:4d:f6:cd:28:8f:05:48:d5:35:42:4f:c9:
         91:43:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org