Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BBD51503988DC6E2131E817A069616041C6B024E.cer
File:                     BBD51503988DC6E2131E817A069616041C6B024E.cer (raw, json)
Hash identifier:          1PhLVnUVl6CIkhDIecweFsTzF/YDWLTkbujIM1/boDg=
Subject key identifier:   BB:D5:15:03:98:8D:C6:E2:13:1E:81:7A:06:96:16:04:1C:6B:02:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A963ED94F68A5F752DD1DE9851441141BC759A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/BBD51503988DC6E2131E817A069616041C6B024E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Jun 2023 19:29:00 +0000
Certificate not after:    Fri 07 Jun 2024 19:34:00 +0000
Subordinate resources:    AS: 263361
                          IP: 45.232.88.0/22
                          IP: 170.246.68.0/22
                          IP: 191.37.144.0/21
                          IP: 2804:14f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:96:3e:d9:4f:68:a5:f7:52:dd:1d:e9:85:14:41:14:1b:c7:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  9 19:29:00 2023 GMT
            Not After : Jun  7 19:34:00 2024 GMT
        Subject: CN=BBD51503988DC6E2131E817A069616041C6B024E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:67:74:c7:0c:92:35:5d:26:52:0c:5b:8d:
                    a6:96:17:57:c2:cb:ce:8b:93:4d:d4:53:6d:00:eb:
                    cb:9a:f1:99:d5:05:5b:31:ab:07:54:4f:40:55:bf:
                    02:fb:4c:22:a0:68:5c:84:5d:46:99:ad:3e:f2:a2:
                    61:cc:99:c3:04:3c:37:20:75:f4:b7:e9:d1:ab:79:
                    8e:6b:4b:37:de:f7:0a:d4:39:dc:3c:76:29:32:ad:
                    70:a5:3d:e9:81:e9:ce:06:f0:4e:c5:e3:45:10:55:
                    8e:e6:6f:68:4f:78:51:9f:95:71:88:a2:70:b8:aa:
                    b8:66:ad:b8:a7:99:6f:4b:b5:9b:38:44:a5:09:2e:
                    7f:2e:0c:ab:59:24:03:28:22:2e:11:32:95:d2:e8:
                    62:40:ea:ef:a3:de:8d:37:df:d7:d3:c6:b2:7c:4d:
                    67:31:9b:e8:47:49:da:b8:36:18:f9:cf:e9:dc:38:
                    5e:d6:6d:4f:a5:2a:3f:7b:8e:23:e5:01:b7:53:b2:
                    1f:90:41:45:d9:d2:c2:84:e3:f7:ca:6a:e4:12:00:
                    fc:ef:d7:b6:5c:04:ac:79:f8:13:c6:de:e1:94:e1:
                    4e:7a:ab:76:ea:3a:45:e4:4e:34:7e:38:3a:ea:8d:
                    37:0b:53:22:7b:42:33:43:fc:ff:43:79:f9:d1:90:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:D5:15:03:98:8D:C6:E2:13:1E:81:7A:06:96:16:04:1C:6B:02:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9NT8hFXtXbqmYsgfoE53gPG5xUYPQ1iR9sUwA6joHw4g/0/BBD51503988DC6E2131E817A069616041C6B024E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.88.0/22
                  170.246.68.0/22
                  191.37.144.0/21
                IPv6:
                  2804:14f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263361

    Signature Algorithm: sha256WithRSAEncryption
         22:99:87:ee:eb:4c:ae:c2:db:64:ed:97:f1:e1:05:92:07:1b:
         18:24:93:2d:4a:72:5f:e1:fd:8e:1e:7c:be:d4:f6:78:4d:6b:
         b8:da:11:2e:72:69:01:96:88:d5:46:13:fe:aa:04:cf:a5:e6:
         84:ad:16:3e:97:ca:ee:19:5d:bc:5a:3d:2c:37:63:6b:e0:ec:
         72:63:95:2b:53:a0:1c:01:58:8d:97:66:1e:7c:a6:da:16:c7:
         e0:bb:c3:85:4d:71:b4:df:50:cf:70:83:7b:40:0a:5e:aa:e3:
         d2:a7:88:b9:ed:66:0b:13:14:5c:b4:a9:3e:8e:0f:80:15:3e:
         81:74:1f:a1:96:d6:06:77:11:2c:af:09:e0:a8:a0:29:d2:33:
         9f:b5:df:78:d4:20:57:01:1b:3e:a5:02:d6:58:81:30:61:00:
         04:14:77:48:00:0e:52:c3:51:28:43:5c:5e:b8:ee:6e:7d:9a:
         57:5d:53:3a:03:c8:22:14:34:28:7e:f5:fd:ec:8e:ec:fa:06:
         54:6e:56:57:ee:1e:4c:ec:93:2b:c0:9a:11:71:7b:6e:9d:f8:
         38:b6:01:0f:95:32:e0:7c:02:3b:0c:c0:d7:79:0b:0a:f3:bc:
         fa:14:6c:70:5a:e3:cc:99:51:57:ec:72:10:6a:ca:67:eb:df:
         6a:fa:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org