Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.cer
File:                     BB78A453A25C3A7C1029301CA2EABC508A518EAA.cer (raw, json)
Hash identifier:          Y7LG1MnHWyvV9aqeCwn2Sx+cqe1t8Xe4KKFyRp2sWY0=
Subject key identifier:   BB:78:A4:53:A2:5C:3A:7C:10:29:30:1C:A2:EA:BC:50:8A:51:8E:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14214A907C882CBDFE44382B2EC49C5F9035362F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Sep 2023 14:08:31 +0000
Certificate not after:    Tue 10 Sep 2024 14:13:31 +0000
Subordinate resources:    AS: 265004
                          IP: 170.84.184.0/22
                          IP: 2804:3148::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:21:4a:90:7c:88:2c:bd:fe:44:38:2b:2e:c4:9c:5f:90:35:36:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 12 14:08:31 2023 GMT
            Not After : Sep 10 14:13:31 2024 GMT
        Subject: CN=BB78A453A25C3A7C1029301CA2EABC508A518EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:cd:f5:20:ce:a6:02:d1:25:24:2c:a0:3b:
                    be:8d:74:8a:db:da:0e:8e:fa:33:4f:99:48:46:b8:
                    29:c3:68:82:81:24:87:1c:af:46:cd:70:4d:9b:be:
                    ad:51:aa:b2:98:3e:81:46:d4:af:2f:2a:f2:da:cc:
                    01:3e:0b:a3:15:93:2d:38:e6:46:cc:f1:27:14:d9:
                    ff:75:7b:27:16:25:37:4f:f2:be:11:23:6b:ca:d4:
                    9b:90:62:e8:db:2f:09:6b:e3:fc:0d:eb:2f:aa:4f:
                    38:c1:7e:71:f9:fa:2d:dd:b2:6d:c0:fe:b6:21:bb:
                    e7:7f:08:53:c4:0e:40:9a:60:53:c7:e2:5d:a7:ac:
                    a7:b6:56:19:48:9a:80:48:de:61:e2:b4:6a:f4:81:
                    a4:e3:37:15:29:01:c3:17:57:38:f0:53:90:88:d1:
                    a7:6a:22:66:b0:ca:a1:24:c0:2e:40:c6:55:70:b9:
                    f1:cc:29:63:7b:04:de:93:26:d7:a4:99:fe:b2:54:
                    a9:56:e8:76:20:c6:13:6f:91:1f:b8:07:51:36:a3:
                    20:cc:17:e7:db:b6:97:b7:da:77:9e:c6:76:9a:43:
                    5f:22:fe:c9:59:92:3a:b0:3e:2a:a9:a1:1a:ab:30:
                    5a:21:66:3e:3e:2f:1a:91:ad:20:63:e2:85:86:ba:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:78:A4:53:A2:5C:3A:7C:10:29:30:1C:A2:EA:BC:50:8A:51:8E:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.184.0/22
                IPv6:
                  2804:3148::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265004

    Signature Algorithm: sha256WithRSAEncryption
         4c:ea:e2:c3:be:5e:39:d9:47:6d:db:cf:43:d4:b0:84:62:57:
         fe:7c:b6:5a:bf:9c:0e:83:52:0b:58:32:35:2e:aa:5a:e9:01:
         16:0f:fc:07:22:60:06:10:32:4e:94:4f:bc:b7:9f:f2:f4:eb:
         ea:84:2a:97:c8:a3:15:1c:b1:63:29:14:f4:d3:10:2e:de:7b:
         47:51:15:4c:b8:c5:7a:f4:6b:2c:39:ef:6f:7d:81:32:b1:72:
         23:ef:0b:c8:c6:0b:75:bf:35:cb:76:18:8a:03:ce:71:71:25:
         5c:4a:82:82:23:da:e2:31:35:e2:15:13:b3:c5:4a:96:50:49:
         55:cc:eb:64:d7:77:61:49:3b:54:91:43:5c:19:29:ac:20:04:
         8d:48:51:e5:56:0b:8a:e5:fd:fc:08:7f:4c:27:61:b8:ca:65:
         65:2f:dc:6d:e5:3f:f2:74:60:81:ea:96:07:04:bb:61:69:a7:
         3a:48:45:64:da:a3:46:90:a0:c7:42:0a:ac:c7:88:98:fc:c8:
         d9:a9:58:92:b6:d6:35:6d:7b:81:79:a2:c8:fa:90:db:0a:49:
         7a:85:da:bd:08:3d:14:6e:52:34:4a:a3:d6:70:5f:c6:d6:d7:
         72:e1:66:e7:0d:67:4f:95:97:78:26:dc:62:5f:c9:bf:14:84:
         79:8c:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org