Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BBA1846773AEA5D0B37A498C1F1FB1AF20BC63A9.cer
File:                     BBA1846773AEA5D0B37A498C1F1FB1AF20BC63A9.cer (raw, json)
Hash identifier:          ShrNlU52u4zpg3BJWaQXgt3wCprYPIIwSidUgIQDvbc=
Subject key identifier:   BB:A1:84:67:73:AE:A5:D0:B3:7A:49:8C:1F:1F:B1:AF:20:BC:63:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B56E03420682B96C5B40EB14B1FB91E9D5536A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/BBA1846773AEA5D0B37A498C1F1FB1AF20BC63A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 13:23:03 +0000
Certificate not after:    Tue 16 Apr 2024 13:28:03 +0000
Subordinate resources:    AS: 265904
                          IP: 131.196.44.0/22
                          IP: 2804:3fa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:56:e0:34:20:68:2b:96:c5:b4:0e:b1:4b:1f:b9:1e:9d:55:36:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 13:23:03 2023 GMT
            Not After : Apr 16 13:28:03 2024 GMT
        Subject: CN=BBA1846773AEA5D0B37A498C1F1FB1AF20BC63A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:b5:76:4c:3e:d2:ce:3b:a0:70:f9:38:ea:
                    09:13:e4:14:33:e1:b7:10:2e:86:56:ad:c5:74:9f:
                    a4:85:c9:4e:30:bb:3e:af:4b:9f:78:6e:18:91:c3:
                    a0:e0:fd:1c:ad:4a:c9:9f:dd:6c:d2:14:25:9a:bf:
                    0d:5e:13:e7:1a:c4:f5:af:25:50:58:2c:11:7f:70:
                    82:11:36:25:8b:5b:87:78:8b:55:22:9d:cc:d7:d0:
                    e1:0c:73:d0:5e:96:6a:28:be:98:f7:01:90:eb:de:
                    64:27:ac:32:7f:bf:0f:04:71:20:98:da:76:dc:80:
                    fe:8e:12:11:54:78:a2:d6:d3:90:22:93:a1:aa:5b:
                    30:d6:db:6f:95:03:39:f9:72:c9:d6:64:09:11:33:
                    8b:31:6c:66:b6:20:cd:15:d6:1f:27:60:03:6a:00:
                    d0:bc:6a:cb:4a:38:65:19:3d:c0:6f:04:93:81:c9:
                    6d:50:1a:20:19:5a:63:b9:f4:e8:c0:3b:1e:49:00:
                    2a:e1:4c:d8:3d:af:fd:d1:37:57:be:98:62:93:ea:
                    b6:27:4f:1b:1d:93:e2:d1:70:e2:ec:97:a6:92:13:
                    0e:69:56:5f:7d:d7:45:96:59:a1:56:8b:80:2a:e4:
                    fc:84:a8:7e:b9:5c:c7:2a:61:d6:2f:c9:a8:66:af:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:A1:84:67:73:AE:A5:D0:B3:7A:49:8C:1F:1F:B1:AF:20:BC:63:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/BBA1846773AEA5D0B37A498C1F1FB1AF20BC63A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.44.0/22
                IPv6:
                  2804:3fa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265904

    Signature Algorithm: sha256WithRSAEncryption
         98:05:69:b9:66:9e:88:ab:fc:b7:43:a6:1d:bd:43:23:6e:2e:
         ad:76:7c:b8:3b:92:b1:9b:a2:59:02:11:e4:4f:cd:a3:96:69:
         a1:47:01:3e:b6:ac:42:1f:df:20:a5:12:20:cd:c4:03:68:83:
         f5:66:54:74:fb:60:ba:6a:72:09:08:ee:67:d0:94:8a:c8:2f:
         de:6b:9f:d6:03:0c:b7:54:cf:6f:a5:da:4a:51:5d:85:cd:aa:
         7a:bc:da:82:0b:42:e0:6f:7e:96:8c:3e:3e:9b:68:34:ae:57:
         fd:5b:66:fd:d4:a5:68:7a:50:1d:00:f7:6a:f8:ab:33:24:13:
         82:32:c2:02:0c:97:8a:68:1c:d4:cb:ff:f1:de:44:75:c5:4c:
         f9:c1:fc:04:1f:78:11:95:d6:03:ee:c4:3a:00:be:24:d8:05:
         d0:ef:0c:8b:32:ad:71:0b:e0:98:5d:15:5d:e1:aa:cf:09:c7:
         8e:d7:18:cd:39:a0:99:e7:6e:93:81:7e:b0:60:87:52:b9:0c:
         07:e4:bb:69:12:a7:3b:27:bb:26:3c:eb:b0:c4:0d:98:af:3f:
         ec:6a:98:83:81:9e:ab:22:03:c9:6f:bd:c3:48:04:bb:70:be:
         e0:52:f5:78:9d:57:e1:26:51:f6:bb:93:9e:b6:3e:82:a4:ec:
         26:12:c0:27
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUW1bgNCBoK5bFtA6xSx+5Hp1VNqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTgxMzIzMDNaFw0yNDA0MTYxMzI4MDNaMDMxMTAvBgNV
BAMTKEJCQTE4NDY3NzNBRUE1RDBCMzdBNDk4QzFGMUZCMUFGMjBCQzYzQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ77V2TD7SzjugcPk46gkT5BQz
4bcQLoZWrcV0n6SFyU4wuz6vS594bhiRw6Dg/RytSsmf3WzSFCWavw1eE+caxPWv
JVBYLBF/cIIRNiWLW4d4i1UinczX0OEMc9Belmoovpj3AZDr3mQnrDJ/vw8EcSCY
2nbcgP6OEhFUeKLW05Aik6GqWzDW22+VAzn5csnWZAkRM4sxbGa2IM0V1h8nYANq
ANC8astKOGUZPcBvBJOByW1QGiAZWmO59OjAOx5JACrhTNg9r/3RN1e+mGKT6rYn
Txsdk+LRcOLsl6aSEw5pVl9910WWWaFWi4Aq5PyEqH65XMcqYdYvyahmr1fxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7oYRnc66l0LN6
SYwfH7GvILxjqTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdkRWRVk3ZHdBN2s3UGZ4VVB1cjYyaXQ1TmIzSzU0VUQ1
VUhrb0xGNVFHTS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdkRWRVk3ZHdBN2s3UGZ4VVB1cjYyaXQ1TmIzSzU0VUQ1
VUhrb0xGNVFHTS8wL0JCQTE4NDY3NzNBRUE1RDBCMzdBNDk4QzFGMUZCMUFGMjBC
QzYzQTkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoPELDANBAIAAjAHAwUA
KAQ/pDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDrAwDQYJKoZIhvcNAQELBQAD
ggEBAJgFablmnoir/LdDph29QyNuLq12fLg7krGbolkCEeRPzaOWaaFHAT62rEIf
3yClEiDNxANog/VmVHT7YLpqcgkI7mfQlIrIL95rn9YDDLdUz2+l2kpRXYXNqnq8
2oILQuBvfpaMPj6baDSuV/1bZv3UpWh6UB0A92r4qzMkE4IywgIMl4poHNTL//He
RHXFTPnB/AQfeBGV1gPuxDoAviTYBdDvDIsyrXEL4JhdFV3hqs8Jx47XGM05oJnn
bpOBfrBgh1K5DAfku2kSpzsnuyY867DEDZivP+xqmIOBnqsiA8lvvcNIBLtwvuBS
9XidV+EmUfa7k562PoKk7CYSwCc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org