Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BC2290B6A1F63711FA18C3BF18D3C425314DC780.cer
File:                     BC2290B6A1F63711FA18C3BF18D3C425314DC780.cer (raw, json)
Hash identifier:          59ls2jlduNSBITL/xEjneB0j0G71dOkv7FsgI6R6Xw4=
Subject key identifier:   BC:22:90:B6:A1:F6:37:11:FA:18:C3:BF:18:D3:C4:25:31:4D:C7:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42BCAA212C782B967304BE5D1295F5AE949015C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/BC2290B6A1F63711FA18C3BF18D3C425314DC780.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Aug 2021 20:29:44 +0000
Certificate not after:    Tue 09 Aug 2022 20:34:44 +0000
Subordinate resources:    AS: 267039
                          IP: 45.228.4.0/22
                          IP: 2804:4738::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bc:aa:21:2c:78:2b:96:73:04:be:5d:12:95:f5:ae:94:90:15:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 20:29:44 2021 GMT
            Not After : Aug  9 20:34:44 2022 GMT
        Subject: CN=BC2290B6A1F63711FA18C3BF18D3C425314DC780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:59:2d:2e:8f:65:cf:55:83:cd:13:b7:99:
                    19:61:74:f0:18:e0:3f:fb:f8:9d:b9:0c:b9:9f:c5:
                    e9:a1:4c:c7:81:25:62:9c:07:ca:da:d2:10:42:1d:
                    89:44:4a:54:a7:7c:ad:31:2a:03:f1:64:12:38:e3:
                    c7:11:2a:78:dd:59:2d:e5:27:5d:1d:cc:39:6b:22:
                    d2:e6:43:05:ad:2a:59:e3:6d:68:6a:36:18:08:72:
                    e4:72:60:8d:1f:56:05:3c:36:76:d5:4c:bc:87:37:
                    bb:ac:99:c5:22:43:ee:d7:fe:e8:6e:cc:7e:e5:a2:
                    cf:52:9d:64:3f:dc:70:56:e6:e9:f0:6c:a5:f9:46:
                    d5:3b:ac:5a:a5:79:1c:c2:4d:56:d9:00:8a:39:ff:
                    8e:a4:8e:34:7b:c8:6e:e7:36:29:45:c1:74:cc:5b:
                    6b:86:ee:82:c2:0a:71:13:c7:25:e8:78:34:70:88:
                    8f:23:c3:4f:9d:2b:86:e9:11:46:87:14:11:9c:0a:
                    3b:4c:71:d4:f8:9b:ec:06:ba:b2:f2:b7:31:35:eb:
                    d7:90:bf:e0:5c:cc:88:4f:81:42:52:9f:be:22:e0:
                    19:31:0b:bc:4c:e0:a7:a6:f7:4f:40:62:ab:02:24:
                    37:4d:ac:cd:f3:03:36:32:b9:94:8f:67:23:46:89:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:22:90:B6:A1:F6:37:11:FA:18:C3:BF:18:D3:C4:25:31:4D:C7:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/BC2290B6A1F63711FA18C3BF18D3C425314DC780.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.4.0/22
                IPv6:
                  2804:4738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267039

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:9f:26:09:fa:3f:2e:b1:4f:25:24:a5:69:90:a9:99:c3:
         7b:b0:bc:c1:7e:f5:36:57:f7:f4:82:1e:23:e5:6a:9d:1d:2c:
         bd:05:e2:72:bb:1e:7c:b0:e5:8f:7b:3e:22:69:12:65:04:0d:
         d6:37:24:5c:d2:f3:e3:64:af:cb:7d:af:30:51:84:73:88:7d:
         39:2b:f9:92:22:22:33:47:41:4d:cc:ac:39:38:d1:c9:24:96:
         2c:c2:76:70:a0:a0:9b:da:cb:09:25:3b:a5:a2:a7:64:e0:55:
         d5:f2:9b:cd:ab:ef:c3:f7:05:f1:97:75:45:9f:08:c6:3e:5c:
         09:da:fc:b1:20:6f:c1:d0:fa:0d:2d:84:36:ff:21:60:fa:90:
         e7:e8:0c:2b:f7:48:de:8c:74:ce:44:4c:02:93:62:03:ae:20:
         79:c5:b1:c8:c7:47:0b:bd:52:ed:d2:b2:c2:cc:7c:e8:d3:69:
         aa:93:37:62:2f:96:e1:51:31:4c:14:7c:48:18:b7:dd:e4:23:
         ba:85:55:3a:2f:bd:ae:d0:7e:e6:94:2c:32:9d:3e:2e:63:f7:
         82:d6:ab:dc:3c:aa:80:c3:68:53:42:63:83:10:5d:c9:7d:0a:
         5c:d9:02:3c:61:76:6a:b0:f3:94:93:a9:eb:e0:25:0c:49:9b:
         7b:cf:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org