Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.cer
File:                     BB036EE1ED900E7F5470199DFFD0CDED2316DE76.cer (raw, json)
Hash identifier:          l3KFmyh5hxDTazKD2ADNh8HfQdlhLe6ZdHrdwNWzzXs=
Subject key identifier:   BB:03:6E:E1:ED:90:0E:7F:54:70:19:9D:FF:D0:CD:ED:23:16:DE:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       064456E162DC035922DA80C979D28BF5B8B0DC1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jun 2023 12:17:10 +0000
Certificate not after:    Mon 17 Jun 2024 12:22:10 +0000
Subordinate resources:    AS: 268598
                          IP: 45.164.52.0/22
                          IP: 2804:53a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:44:56:e1:62:dc:03:59:22:da:80:c9:79:d2:8b:f5:b8:b0:dc:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 19 12:17:10 2023 GMT
            Not After : Jun 17 12:22:10 2024 GMT
        Subject: CN=BB036EE1ED900E7F5470199DFFD0CDED2316DE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:e8:c9:f7:df:6d:af:15:a5:a2:6e:fa:e4:
                    97:99:de:a7:7c:67:a2:fc:10:aa:14:1f:cf:16:b6:
                    86:5d:53:7c:ea:2d:74:d9:d6:27:ae:5d:49:70:1f:
                    46:d7:ce:81:b7:92:c9:12:c7:f7:4f:75:1e:32:ae:
                    b3:3b:5b:81:64:69:38:9d:ce:69:3a:a8:76:c7:e9:
                    7a:3a:e2:b4:8e:d6:a5:78:d6:bb:0e:8e:b1:45:81:
                    c4:ed:e9:3c:f5:8f:3d:05:86:ca:37:4a:fb:62:fd:
                    43:bf:50:40:1f:45:3d:72:7a:ec:e3:98:5d:bf:87:
                    e1:62:7e:24:8f:64:d8:a1:07:a3:e0:d3:9a:90:3e:
                    4f:dc:a6:7d:8d:14:d8:5b:b9:82:0f:3a:89:b9:12:
                    81:7e:69:c0:06:74:53:12:e8:44:7d:b0:be:db:1b:
                    60:ce:91:d4:9d:17:be:18:52:e2:17:a8:5f:b3:ea:
                    51:4f:2e:6a:46:5b:7e:28:b4:3a:69:8c:d7:8f:f1:
                    5f:8c:6d:b1:df:f6:f7:96:c0:a9:ab:ef:04:4e:90:
                    94:09:7f:0a:30:9c:d9:c6:2e:f8:6e:89:35:f5:12:
                    49:25:7d:90:34:a5:75:ab:8f:06:73:df:72:06:27:
                    e0:91:67:6b:86:ba:27:35:26:a7:a6:11:a3:c5:7d:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:03:6E:E1:ED:90:0E:7F:54:70:19:9D:FF:D0:CD:ED:23:16:DE:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/0/BB036EE1ED900E7F5470199DFFD0CDED2316DE76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.52.0/22
                IPv6:
                  2804:53a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268598

    Signature Algorithm: sha256WithRSAEncryption
         6e:b1:75:19:30:aa:02:f6:e2:06:41:57:e9:01:11:ef:1b:0f:
         08:03:47:1a:78:e4:06:b4:3e:31:53:e6:a3:73:6d:05:85:00:
         64:11:1c:a1:b0:b9:bb:65:47:9a:30:d6:0c:d6:eb:18:c1:97:
         84:8c:7f:a2:4c:94:7e:71:61:61:3c:6d:61:8d:a8:e2:81:4d:
         55:18:eb:ca:71:54:ee:04:a6:98:5e:d2:c8:12:7b:7a:d2:5e:
         b1:52:00:de:57:d0:86:92:8b:82:a1:8c:dc:59:ae:4b:10:7b:
         07:de:3b:f8:3c:b2:86:94:55:7d:7e:8f:e7:f2:c1:c6:49:e6:
         a1:eb:8b:ff:15:2c:0a:76:e3:d0:af:d1:54:e9:2a:df:53:dd:
         9b:dd:73:ac:12:4d:ca:93:e9:98:bc:fb:8a:e5:b4:5e:e9:07:
         31:dc:0a:4b:d8:68:2e:f0:93:75:45:e5:fc:0b:61:b5:c0:a5:
         81:1f:df:de:31:1f:6e:4f:28:81:fd:9c:40:6f:24:b5:64:bf:
         f3:32:35:56:41:de:77:89:8e:82:80:16:17:d3:9f:4a:af:5a:
         70:91:7e:f4:86:e0:89:bd:e9:d1:41:3b:fb:97:bb:47:ee:d2:
         0d:f9:ca:38:98:df:f9:2e:77:16:a6:62:21:35:8d:4e:5e:8d:
         9c:27:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org