Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
File:                     BB64C0B7C1F0513688929835AE908C21A765C4E3.cer (raw, json)
Hash identifier:          Aog0WEl38AssMf0DIBvVQk65juf5quX8rvGVdKcSrNY=
Subject key identifier:   BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       419C473AB1038384B88148AE7ACC35C84248E376
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 14:14:06 +0000
Certificate not after:    Tue 21 Jan 2025 14:19:06 +0000
Subordinate resources:    AS: 269698
                          IP: 45.191.8.0/22
                          IP: 2804:6884::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9c:47:3a:b1:03:83:84:b8:81:48:ae:7a:cc:35:c8:42:48:e3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 14:14:06 2024 GMT
            Not After : Jan 21 14:19:06 2025 GMT
        Subject: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:d2:59:a0:64:fe:2a:d1:88:11:ba:c3:f3:
                    c4:ee:ff:4e:ad:e8:32:b7:96:91:d5:07:9d:6f:bc:
                    a1:79:d5:28:ab:be:a6:31:f8:e2:85:6e:ae:d7:e8:
                    d4:2d:e0:22:e7:be:8b:a7:92:f9:37:80:1f:57:51:
                    74:3f:ec:33:30:b9:a1:2f:eb:37:7d:5c:0a:b2:8b:
                    1f:4d:9b:35:e0:3a:97:16:4c:d0:4a:fe:48:3e:4e:
                    4f:0b:c2:00:60:7e:96:a5:fe:e5:39:9e:e7:3e:54:
                    94:72:ba:ab:fd:77:60:76:60:f4:d5:2f:f4:02:e8:
                    d0:81:99:c2:02:10:96:74:6a:f4:b9:fc:1e:97:4f:
                    47:d8:be:11:76:ae:41:a5:c3:7a:3d:9c:a7:6d:7f:
                    fc:c7:c9:c4:d8:44:e1:12:1f:4f:b6:f4:2b:0f:2b:
                    98:f2:8a:29:03:46:46:45:45:3b:fb:d0:d2:e2:2a:
                    fd:93:f3:33:9f:c6:e9:37:a3:bc:b3:01:fa:68:d2:
                    ee:53:36:b1:3d:f2:77:52:93:45:17:27:23:cc:78:
                    d4:b6:c1:ab:51:a5:06:60:3e:d8:fc:d8:d1:1e:f1:
                    a0:a5:8e:f7:bd:d0:54:85:b0:0c:b0:f3:b0:c0:0f:
                    b3:03:e2:7c:67:a5:6a:34:9c:51:24:37:1e:ca:21:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.8.0/22
                IPv6:
                  2804:6884::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269698

    Signature Algorithm: sha256WithRSAEncryption
         9d:e1:71:56:da:32:f2:7a:41:67:8e:85:c8:97:38:75:f2:17:
         57:3a:12:2b:49:ae:c2:54:05:4c:9d:cb:f4:72:a8:ee:3e:23:
         31:f9:56:a9:e5:61:b9:f7:56:bc:a6:9a:2e:1f:c0:14:b6:85:
         4b:0f:fb:9a:78:d7:b0:9c:a1:9d:99:23:58:93:39:dd:7b:74:
         98:e9:49:73:c6:1d:76:bc:6e:a9:bd:8e:f5:b5:2a:7f:7f:20:
         e4:2a:cf:3c:ae:35:02:6a:7d:10:48:d5:89:aa:0b:b6:87:f9:
         f5:b8:ea:80:5b:c7:1b:cb:a6:ec:61:2a:d5:d2:3f:5d:e9:e6:
         96:ce:e3:73:af:04:57:a8:60:84:ae:9e:22:19:5d:0b:c7:26:
         30:3b:a2:39:c3:f0:1e:56:6f:d1:8c:ab:9b:41:9c:8e:4c:59:
         10:dc:2c:07:e4:7b:ed:49:5f:e6:61:7f:ea:da:81:bc:2b:cd:
         61:b7:d5:6b:97:9a:48:1e:eb:2a:3d:63:35:86:fe:71:ea:d4:
         d8:d4:c2:46:7b:d7:48:ad:ed:fd:bb:8f:bb:95:ef:5e:45:7c:
         7e:f3:20:24:71:5b:da:1e:78:23:a7:98:1c:14:38:62:b2:1e:
         1a:52:05:62:97:fc:17:26:01:d5:09:ad:be:2d:3d:34:ee:5a:
         d3:a8:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org