Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.cer
File:                     BB7D411A2A24735AFF8D04706DC75FBE58888F9C.cer (raw, json)
Hash identifier:          OLsgKnRfdTkeDonqzt+zniMpym2iOn1pGqtqTDN7QyE=
Subject key identifier:   BB:7D:41:1A:2A:24:73:5A:FF:8D:04:70:6D:C7:5F:BE:58:88:8F:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C3896642AE71357FDB95BA3AED8F08F74BFDCE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Sep 2022 14:00:55 +0000
Certificate not after:    Thu 07 Sep 2023 14:05:55 +0000
Subordinate resources:    AS: 264417
                          IP: 131.221.128.0/22
                          IP: 2804:1e40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:38:96:64:2a:e7:13:57:fd:b9:5b:a3:ae:d8:f0:8f:74:bf:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 14:00:55 2022 GMT
            Not After : Sep  7 14:05:55 2023 GMT
        Subject: CN=BB7D411A2A24735AFF8D04706DC75FBE58888F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:af:55:9b:d5:e7:93:58:8d:e3:b8:ae:1b:
                    4f:4c:bc:64:8a:55:54:91:15:d5:8c:df:d0:5a:03:
                    3b:86:60:cd:db:37:8b:07:d0:ca:fa:6a:b8:2b:2a:
                    13:1b:00:c8:1f:b5:4b:6b:ef:50:ef:e0:e8:b7:46:
                    53:48:c7:59:14:34:66:f7:5b:3e:fa:08:24:e4:7b:
                    fe:01:f6:d8:3e:f8:ba:b3:cf:38:7e:ab:cc:85:14:
                    dc:05:c6:37:db:52:10:6e:75:31:bc:5c:84:b1:86:
                    71:2e:5d:ed:bf:76:e1:35:a4:91:e5:bd:cb:6f:d0:
                    68:8a:88:24:22:2c:96:44:13:01:8d:52:d4:69:a5:
                    4c:70:1f:f3:60:06:df:63:6f:03:34:71:25:ae:4e:
                    1e:1c:6a:8c:f2:65:dd:da:2d:b5:0a:50:e6:08:23:
                    65:1b:f2:69:d2:5b:68:0b:51:dd:ae:62:42:c7:e0:
                    c2:cb:5b:db:d2:8f:35:3d:09:a5:89:41:fa:e0:27:
                    64:cc:a6:6c:bb:e3:f1:dd:ae:03:c9:b8:19:dc:fb:
                    60:cb:74:7d:4d:80:32:31:25:49:33:51:7d:9a:18:
                    b8:fa:79:19:b4:37:32:5f:b1:b1:32:fb:00:07:90:
                    b3:c2:b7:f0:fb:74:73:e5:ff:08:e7:9c:95:48:4f:
                    e0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:7D:41:1A:2A:24:73:5A:FF:8D:04:70:6D:C7:5F:BE:58:88:8F:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/57TwXRQpKQZuFkjzW2UgfzQrDfisv9JdK7qjtgqzuJSz/0/BB7D411A2A24735AFF8D04706DC75FBE58888F9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.128.0/22
                IPv6:
                  2804:1e40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264417

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:cb:46:a5:49:ea:89:98:74:5f:2d:a6:72:6b:7b:a9:09:
         ba:dc:cd:c5:20:71:89:c7:80:e1:1a:65:d1:85:c6:86:4c:89:
         b9:e3:0b:f1:60:2a:ac:ff:ae:db:19:01:64:a3:6d:75:d3:73:
         23:75:5c:30:bc:d9:38:d6:86:27:1e:d7:4a:3d:d8:5e:10:ca:
         3e:56:3f:6c:0b:d5:d9:ab:26:e1:a6:8f:66:50:15:73:28:34:
         72:95:0b:1f:6e:08:ec:4a:a0:d4:0e:ae:7d:83:57:1e:9d:ce:
         54:61:f0:db:9f:33:56:8d:b8:54:20:b6:d7:c3:b3:d2:4e:6e:
         19:5b:2d:0c:32:81:b2:d6:6c:b1:f9:02:5f:e8:d2:30:88:a2:
         82:5b:07:56:91:95:78:e5:80:fb:62:55:76:b7:45:cb:a2:53:
         2c:83:df:3d:e2:46:8c:35:bb:b2:a5:7a:27:33:cc:5c:61:52:
         39:ae:6e:7f:94:06:60:d2:f9:2e:f6:00:cf:78:80:59:23:d5:
         c5:3e:13:d6:20:40:d4:97:2d:94:63:43:5a:1b:e3:9d:c3:06:
         0c:9c:ef:cf:6f:a0:60:72:a1:f7:f5:3b:0b:f4:45:36:e4:cd:
         dd:12:63:20:27:3d:86:11:db:21:5d:d5:19:8c:db:d0:cf:f1:
         24:94:8f:ed
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUXDiWZCrnE1f9uVujrtjwj3S/3OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MDgxNDAwNTVaFw0yMzA5MDcxNDA1NTVaMDMxMTAvBgNV
BAMTKEJCN0Q0MTFBMkEyNDczNUFGRjhEMDQ3MDZEQzc1RkJFNTg4ODhGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12K9Vm9Xnk1iN47iuG09MvGSK
VVSRFdWM39BaAzuGYM3bN4sH0Mr6argrKhMbAMgftUtr71Dv4Oi3RlNIx1kUNGb3
Wz76CCTke/4B9tg++Lqzzzh+q8yFFNwFxjfbUhBudTG8XISxhnEuXe2/duE1pJHl
vctv0GiKiCQiLJZEEwGNUtRppUxwH/NgBt9jbwM0cSWuTh4caozyZd3aLbUKUOYI
I2Ub8mnSW2gLUd2uYkLH4MLLW9vSjzU9CaWJQfrgJ2TMpmy74/HdrgPJuBnc+2DL
dH1NgDIxJUkzUX2aGLj6eRm0NzJfsbEy+wAHkLPCt/D7dHPl/wjnnJVIT+CxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7fUEaKiRzWv+N
BHBtx1++WIiPnDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81N1R3WFJRcEtRWnVGa2p6VzJVZ2Z6UXJEZmlzdjlKZEs3
cWp0Z3F6dUpTei8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81N1R3WFJRcEtRWnVGa2p6VzJVZ2Z6UXJEZmlzdjlKZEs3
cWp0Z3F6dUpTei8wL0JCN0Q0MTFBMkEyNDczNUFGRjhEMDQ3MDZEQzc1RkJFNTg4
ODhGOUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoPdgDANBAIAAjAHAwUA
KAQeQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECOEwDQYJKoZIhvcNAQELBQAD
ggEBAD+Cy0alSeqJmHRfLaZya3upCbrczcUgcYnHgOEaZdGFxoZMibnjC/FgKqz/
rtsZAWSjbXXTcyN1XDC82TjWhice10o92F4Qyj5WP2wL1dmrJuGmj2ZQFXMoNHKV
Cx9uCOxKoNQOrn2DVx6dzlRh8NufM1aNuFQgttfDs9JObhlbLQwygbLWbLH5Al/o
0jCIooJbB1aRlXjlgPtiVXa3RcuiUyyD3z3iRow1u7KleiczzFxhUjmubn+UBmDS
+S72AM94gFkj1cU+E9YgQNSXLZRjQ1ob453DBgyc789voGByoff1Owv0RTbkzd0S
YyAnPYYR2yFd1RmM29DP8SSUj+0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org