Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer
File:                     BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer (raw, json)
Hash identifier:          OrADTEyxUxfdX/HCFIH03C8wJghaUfrvFekqC2ACV1Q=
Subject key identifier:   BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6631237BBB8670240049826894E1F428A16BFEEF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Aug 2022 16:55:25 +0000
Certificate not after:    Thu 24 Aug 2023 17:00:25 +0000
Subordinate resources:    AS: 265982
                          IP: 164.163.144.0/22
                          IP: 2804:40cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:31:23:7b:bb:86:70:24:00:49:82:68:94:e1:f4:28:a1:6b:fe:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 16:55:25 2022 GMT
            Not After : Aug 24 17:00:25 2023 GMT
        Subject: CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:55:28:ee:18:8f:fa:74:19:c6:3e:0a:34:
                    7c:f9:1c:a5:a7:80:21:36:95:b7:e0:19:6d:c1:24:
                    3e:7a:e2:cb:36:7f:a4:c6:32:cb:06:20:cb:a5:1c:
                    9f:06:bc:ee:6e:41:8b:e1:51:51:d2:61:19:0f:b5:
                    b0:c7:1b:ab:4e:a2:08:53:d0:e9:78:34:78:b4:fe:
                    82:ff:1b:4a:9e:5d:d3:7a:63:27:52:cc:57:97:21:
                    82:21:16:4a:9d:92:b8:bb:8d:67:4e:fc:b8:97:f0:
                    fb:80:4a:4a:df:0d:3d:43:97:51:71:55:f3:c0:40:
                    de:d9:69:eb:96:42:c8:27:c4:cd:01:65:4e:a7:65:
                    2e:7b:14:4d:4a:b8:2d:31:ce:7e:61:2a:21:24:b3:
                    51:07:08:6a:0f:03:f6:8f:ff:52:0e:c4:26:9a:56:
                    c0:e3:bb:98:92:e7:7a:69:cb:7d:35:dd:e1:3a:bb:
                    1e:7c:dc:e6:50:a9:91:28:20:28:d2:3e:0f:22:4f:
                    bb:05:be:73:f3:5b:cd:a4:8f:f0:bb:b6:36:1d:f7:
                    4e:b1:b1:45:1e:de:72:e4:be:b6:b4:45:83:ca:1f:
                    d9:ec:18:41:df:50:6a:98:de:e2:bf:ac:f3:4c:e9:
                    d0:c3:4b:dc:e5:46:f9:62:1d:39:0d:e6:e0:48:80:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.144.0/22
                IPv6:
                  2804:40cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265982

    Signature Algorithm: sha256WithRSAEncryption
         04:94:3e:e2:b2:85:88:36:f7:26:d6:cd:d3:a0:ea:d6:da:0e:
         b4:fb:a6:79:a0:6d:04:d2:4b:f3:e2:d2:e8:80:d3:30:9c:36:
         f5:5c:b9:14:9b:62:03:43:a5:3c:fd:99:3a:0a:ec:5e:28:83:
         5d:26:44:f2:39:c0:2f:68:df:84:84:81:f0:b6:e8:77:cd:07:
         53:82:dc:9d:13:3d:f9:11:a3:27:ce:a5:b2:2a:68:8e:4d:02:
         07:f4:a8:40:67:65:a0:cf:3a:0d:e2:41:c2:f4:dd:56:47:c4:
         6b:3f:8c:a3:18:34:82:f0:21:9b:48:04:c2:a8:09:69:7a:b3:
         d9:9e:4e:8d:27:2b:a2:92:77:31:a2:52:c4:a6:84:36:ed:27:
         8e:47:86:8a:a7:dd:7c:95:e4:61:17:f1:50:10:80:2c:40:2d:
         08:31:ad:09:47:43:63:2f:2e:ab:29:4e:29:6a:02:b7:60:4b:
         ce:44:57:f2:b3:6b:99:56:51:a7:29:92:83:a3:01:76:ef:c9:
         20:5d:58:c1:92:4f:0e:7e:cc:b3:e8:84:8b:fc:df:12:ac:9a:
         ef:06:13:8a:69:e1:f7:25:94:96:ef:6a:28:01:eb:70:93:34:
         90:33:7f:70:92:b9:1b:48:42:49:3c:8f:e4:5a:c7:90:f6:be:
         ba:b3:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org