Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer
File:                     BBFE20962257408769607F1ABD1CADD22ED820AB.cer (raw, json)
Hash identifier:          khaOKheV7RduPdqWqZ+fuaz0MpYJmECK/rm+GU4w8dE=
Subject key identifier:   BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F105EEC9E0CFCACA8D6192588578A085D42B3C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 19:56:39 +0000
Certificate not after:    Tue 03 Dec 2024 20:01:39 +0000
Subordinate resources:    AS: 269282
                          IP: 45.183.132.0/22
                          IP: 2804:6234::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:10:5e:ec:9e:0c:fc:ac:a8:d6:19:25:88:57:8a:08:5d:42:b3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 19:56:39 2023 GMT
            Not After : Dec  3 20:01:39 2024 GMT
        Subject: CN=BBFE20962257408769607F1ABD1CADD22ED820AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:e8:17:7f:b6:c6:54:f2:86:79:40:3f:ed:
                    5b:6f:d1:fd:b5:83:a5:54:41:68:d4:b1:cc:95:a8:
                    17:ae:9d:78:b8:02:e2:20:8a:a9:f9:ce:9c:eb:f0:
                    56:e0:dd:d2:0e:24:49:3a:77:a5:5f:ea:8c:8f:aa:
                    cd:5e:51:37:73:6a:21:da:7a:a6:de:c2:76:ed:39:
                    55:08:4c:30:44:97:64:d3:21:71:19:4c:9e:27:83:
                    61:32:22:35:9d:1d:6d:cd:c9:ad:d9:ed:55:be:cd:
                    6c:54:f5:1d:fe:a3:90:ca:13:9c:a5:4a:09:cd:9b:
                    68:dd:78:ec:13:e5:14:37:4e:cd:bb:70:a0:ba:2c:
                    69:55:dd:94:62:39:c6:44:be:19:41:7f:f3:93:c7:
                    c6:a7:99:d8:4c:ce:b8:eb:bd:aa:26:ee:a2:cf:0c:
                    1c:9d:23:a0:3b:b2:be:af:5a:a3:4a:f3:57:5a:73:
                    61:b1:fb:15:4e:29:df:22:73:0b:97:7c:b2:af:03:
                    eb:e7:a2:45:81:9a:71:5d:59:52:e3:1f:c9:96:ec:
                    8d:e1:7e:0c:24:8e:7a:c6:d8:f4:f8:b7:57:67:8f:
                    80:b0:35:09:55:19:70:dc:c5:88:20:dd:8a:17:24:
                    3c:03:bb:5b:e8:49:fe:ad:e8:fb:b3:de:ec:17:fc:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.132.0/22
                IPv6:
                  2804:6234::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269282

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:8a:71:ee:75:28:a6:4a:5a:dd:7b:aa:44:23:71:8c:d5:
         84:21:c0:24:56:a9:cd:a1:62:f3:b6:33:97:03:2e:14:f7:ce:
         eb:66:2e:5f:c3:3a:d0:a6:70:af:5b:52:30:00:9e:7b:6c:6e:
         04:93:88:d5:38:dc:f3:9d:7f:42:3a:02:ee:05:9b:1d:2d:00:
         d1:f2:de:54:ba:ae:4d:23:1c:76:09:62:3a:56:95:7e:cd:e9:
         4d:b6:62:a5:59:bc:9e:f2:90:56:bb:fe:72:dc:8a:ad:50:01:
         e8:3b:90:e0:60:db:42:50:22:47:60:a0:c7:0c:e0:f7:3c:5e:
         d4:a4:93:31:5f:10:36:17:c0:3b:e6:b9:30:15:b7:46:60:f3:
         31:6c:1b:40:1b:ce:67:f7:5e:be:bd:3f:38:7b:2b:82:7f:c0:
         02:7b:13:f2:84:1d:03:46:9f:2b:dd:ba:59:e2:71:b1:09:cb:
         fa:2f:f7:cc:51:8a:ce:1a:5d:60:b4:da:5f:ac:94:6f:28:e8:
         d1:b2:32:e1:66:41:7f:a9:1f:7c:82:c0:0c:46:4f:37:80:d6:
         9b:d4:7b:67:67:a1:b0:93:73:59:f2:17:8c:fa:16:b6:90:e1:
         c6:0a:40:07:37:00:da:61:e9:18:5f:35:8e:69:42:d7:3e:44:
         04:7c:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org