Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.cer
File:                     BB7D1E6467E86332D6E54F5DC4F11444142F3342.cer (raw, json)
Hash identifier:          bJT6zAuwqhTw3WclOFFbATjfgCPX5lkDp5vGE78ZCDE=
Subject key identifier:   BB:7D:1E:64:67:E8:63:32:D6:E5:4F:5D:C4:F1:14:44:14:2F:33:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       404C31AB5B58FD1DD0C41AF3D3AB5FF652E55A19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Aug 2021 18:17:42 +0000
Certificate not after:    Thu 04 Aug 2022 18:22:42 +0000
Subordinate resources:    AS: 263405
                          IP: 128.201.0.0/22
                          IP: 143.255.252.0/22
                          IP: 170.254.32.0/22
                          IP: 177.222.248.0/21
                          IP: 2804:15b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4c:31:ab:5b:58:fd:1d:d0:c4:1a:f3:d3:ab:5f:f6:52:e5:5a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  5 18:17:42 2021 GMT
            Not After : Aug  4 18:22:42 2022 GMT
        Subject: CN=BB7D1E6467E86332D6E54F5DC4F11444142F3342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:be:bf:cf:53:a2:0d:e2:7a:7d:34:68:5c:
                    b5:e5:ee:81:6b:9b:e4:5d:14:06:2f:79:fa:85:7b:
                    51:31:b4:0b:6d:26:06:78:78:1d:50:90:b4:21:34:
                    f0:cf:1d:4d:05:3f:20:6d:2b:b9:cb:83:af:a8:16:
                    dc:53:c9:13:b8:02:e0:cd:3d:a0:b6:76:84:e2:bc:
                    10:14:ea:60:de:d8:53:5b:9a:01:8c:25:ac:9e:bf:
                    ff:92:c6:e8:b6:5b:d6:ec:08:d4:4c:3d:3f:80:e5:
                    2f:b1:77:db:2e:f7:e7:83:aa:bc:f9:51:94:ad:b4:
                    27:8d:90:15:2a:9a:17:ec:86:b9:23:c8:95:16:b5:
                    95:85:d8:de:d6:c4:95:a0:66:ad:76:0a:7c:04:d3:
                    27:66:20:77:a5:19:d6:28:77:66:ad:e8:80:96:0d:
                    5f:57:d3:73:2d:5a:79:62:bd:58:ba:81:29:36:20:
                    8a:68:77:c6:85:bb:dd:5d:bd:06:79:49:4f:78:bc:
                    e5:b7:14:87:e4:d9:2f:d9:9b:b8:14:2d:8c:fc:ce:
                    af:94:f9:4b:de:63:c7:e7:ae:51:8f:99:5a:f8:a8:
                    e2:4d:39:1b:53:fe:81:5d:63:94:94:01:b7:23:37:
                    aa:10:b7:70:d0:0e:ac:d8:55:94:12:72:f4:46:7d:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:7D:1E:64:67:E8:63:32:D6:E5:4F:5D:C4:F1:14:44:14:2F:33:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.0.0/22
                  143.255.252.0/22
                  170.254.32.0/22
                  177.222.248.0/21
                IPv6:
                  2804:15b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263405

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:fb:e1:05:91:cb:94:4f:57:11:92:f4:00:e3:32:b9:15:
         6d:19:ac:f8:43:32:31:e0:e3:ee:01:42:ed:d5:ba:0b:9c:c2:
         88:42:7b:e9:03:9a:2a:6e:90:5d:8a:a2:40:09:71:49:6f:2f:
         77:35:ed:30:c2:6d:a3:f2:91:61:ad:39:76:11:21:b4:dd:20:
         f0:65:4e:88:d9:f5:9b:35:b2:e1:ee:2d:55:bb:5a:34:a1:6c:
         9e:3e:82:cc:13:b3:52:6e:54:e2:e8:c7:28:51:41:58:8a:c0:
         14:a9:3b:11:27:13:a3:7e:48:4f:0d:48:16:b2:67:44:b0:18:
         e2:b3:9c:37:65:3c:a3:51:ae:ee:34:e9:e9:4c:ea:f8:40:2c:
         ee:5f:e6:9a:fe:69:75:7a:7b:57:e5:3d:6e:85:01:85:69:cb:
         1d:ab:58:35:9e:03:c6:30:94:e6:ac:d2:3e:ce:2e:48:69:76:
         e9:eb:29:0a:d4:3f:b8:69:99:a7:49:e3:85:a6:bd:41:28:cf:
         9e:ed:05:bb:79:3f:f3:91:91:5b:13:1a:58:b5:93:c3:5b:af:
         0d:f3:75:3a:b2:6f:7c:30:54:f3:bb:a0:3c:0e:f7:f8:a2:4c:
         93:02:5a:de:38:96:87:79:57:ea:9d:af:83:12:20:84:6d:74:
         1f:54:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org