Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.cer
File:                     BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.cer (raw, json)
Hash identifier:          fLef2uWTLOWbZn+kd+8PGXrykFvAaRWV0u1fNN1bVjE=
Subject key identifier:   BB:F0:2F:7F:9F:1C:A6:82:FB:06:D3:40:78:9D:F8:EF:85:CF:AB:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60F15352DA8ABAF6E316381C7EB050995F2F18A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Nov 2022 16:27:13 +0000
Certificate not after:    Fri 17 Nov 2023 16:32:13 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f1:53:52:da:8a:ba:f6:e3:16:38:1c:7e:b0:50:99:5f:2f:18:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 16:27:13 2022 GMT
            Not After : Nov 17 16:32:13 2023 GMT
        Subject: CN=BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:99:8b:ae:67:3a:d7:9a:24:f0:89:4f:78:
                    5f:fa:a4:0b:e1:e0:1a:ed:2e:97:6d:38:be:00:7f:
                    50:d5:3e:e6:25:3e:d9:14:52:3f:b8:4b:f0:cf:80:
                    24:bd:03:45:fb:68:17:f2:bb:67:7c:78:c5:7a:6c:
                    8b:58:bd:0b:f8:a0:68:4d:f1:43:d9:d8:34:c9:ce:
                    22:39:b1:a4:a0:c5:8c:c7:b5:4d:16:ee:10:2c:75:
                    c0:0d:af:fb:a6:5c:6d:46:2e:6b:76:49:e9:72:dd:
                    44:94:bd:f6:ca:73:c7:92:98:47:e4:62:e6:9d:99:
                    75:f5:af:82:7d:49:dd:32:f1:1e:f7:09:4a:8f:54:
                    94:8c:c3:37:87:b1:0c:ce:33:b4:57:a3:68:75:81:
                    b2:ee:94:34:0b:f3:bc:2c:e2:3a:e7:48:13:4a:9b:
                    54:99:d6:c3:7b:3e:9e:6b:2c:16:0d:48:3d:69:5b:
                    ba:ff:7d:62:c0:77:b8:ba:b0:8a:91:4d:dd:fe:7c:
                    bc:69:87:9a:2f:82:65:b2:14:c6:85:1c:51:a2:9f:
                    8a:08:e4:ec:e3:11:95:92:39:4d:e3:cc:96:51:5d:
                    68:79:18:32:49:46:9a:75:bf:51:59:96:1f:9a:56:
                    24:6f:93:9a:2c:81:87:6b:9d:9c:8e:85:3a:6a:b1:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:F0:2F:7F:9F:1C:A6:82:FB:06:D3:40:78:9D:F8:EF:85:CF:AB:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:f6:7e:12:65:dd:26:3a:56:77:d7:1c:78:54:cf:8f:e2:
         ab:88:46:ad:43:b2:19:25:2f:c0:15:23:80:9c:60:36:fd:70:
         e0:7e:f8:d1:36:d4:f9:cf:46:0b:aa:bf:3e:91:c3:be:6f:cd:
         97:48:9a:40:23:67:05:19:a9:d2:be:08:3a:30:7d:bd:0e:35:
         85:4c:2c:40:35:7a:96:6d:e5:51:6d:5d:0a:27:2e:90:1d:4c:
         d5:c8:eb:b5:10:40:0b:9d:4c:e1:5c:2e:79:1a:5f:ef:69:3d:
         8e:fa:45:cf:04:3d:28:94:44:f7:63:ee:71:1e:ff:99:34:ec:
         df:63:03:70:16:dc:1b:2f:bc:89:13:30:b9:65:b4:27:a9:88:
         33:db:96:42:45:2a:12:1d:e1:59:45:c5:de:5f:74:e2:cb:ea:
         54:9a:29:1e:db:4c:63:10:ce:60:7d:88:7a:b5:ec:eb:2d:fd:
         20:ff:b4:e0:63:e5:4e:b7:70:9f:36:c8:46:62:66:2e:8d:c8:
         71:94:b8:c3:5f:28:9e:0d:9e:56:7f:a3:0f:65:1e:81:f1:72:
         6b:d0:98:e5:26:16:eb:30:fe:f3:78:19:f7:ba:70:02:bd:29:
         f3:66:3d:cf:52:3d:d4:78:d0:0a:14:5d:74:3b:e3:7e:d2:a2:
         4c:e8:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org