Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.cer
File:                     BC6552FEAE387B527DBA080AC5A9F268E628D723.cer (raw, json)
Hash identifier:          uj11BV2UuRQCcN6uj1/Y1EQGGZPhPK8QH+IdxI3Glw0=
Subject key identifier:   BC:65:52:FE:AE:38:7B:52:7D:BA:08:0A:C5:A9:F2:68:E6:28:D7:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A804E633C0AF4A655B1E4FD8556D9F6FF82F0A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 21:35:11 +0000
Certificate not after:    Tue 28 May 2024 21:40:11 +0000
Subordinate resources:    AS: 52607
                          IP: 177.125.56.0/22
                          IP: 2804:3bfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:80:4e:63:3c:0a:f4:a6:55:b1:e4:fd:85:56:d9:f6:ff:82:f0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 21:35:11 2023 GMT
            Not After : May 28 21:40:11 2024 GMT
        Subject: CN=BC6552FEAE387B527DBA080AC5A9F268E628D723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:82:f0:02:7f:e6:30:09:c8:57:64:80:d8:9a:
                    30:f6:e7:d1:5d:ca:d7:32:39:5e:23:b9:42:9b:d4:
                    42:76:ca:59:c1:fe:84:ca:0c:ae:4e:33:7f:75:46:
                    a2:53:0f:f9:28:17:de:b3:ff:c4:bb:88:a4:b0:71:
                    83:dc:12:1c:95:e5:6f:da:6c:68:e0:a3:65:b3:95:
                    68:f9:71:03:1e:30:1d:5b:62:f4:6c:b4:ed:6a:3a:
                    6a:b5:04:d5:93:dd:e9:21:2f:db:43:b3:a4:4a:d3:
                    20:d5:22:92:64:69:90:56:45:2c:02:76:96:bc:61:
                    bf:0a:b9:aa:f9:66:ff:6c:62:13:ae:e0:04:74:42:
                    93:c7:a7:d2:86:c3:c7:ac:24:ae:12:c0:54:de:fd:
                    06:1e:63:1e:fc:0d:f2:cc:ac:81:fd:92:f8:a0:98:
                    68:db:15:50:85:b5:5f:09:70:fc:fb:47:51:9b:4f:
                    eb:49:90:26:c8:2b:2c:7d:28:74:8a:97:32:b8:99:
                    39:79:2f:85:76:42:58:51:44:5d:3f:a7:9e:6d:ca:
                    bd:04:09:97:57:48:f7:63:f6:95:cc:89:fb:37:23:
                    ae:ab:ac:8f:7b:d8:48:a4:e6:52:05:17:38:da:ca:
                    4f:b2:55:ae:6a:e4:34:f9:f7:9c:37:5f:5b:83:1e:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:65:52:FE:AE:38:7B:52:7D:BA:08:0A:C5:A9:F2:68:E6:28:D7:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.56.0/22
                IPv6:
                  2804:3bfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52607

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:c5:96:b4:96:05:ce:60:89:d4:66:86:ca:e7:b7:6c:c0:
         99:2f:5b:a7:3a:fd:57:8c:6e:d3:4e:22:ed:b2:3b:04:91:94:
         f4:28:f9:37:c2:c9:75:70:9b:6b:c9:02:ab:82:2f:fe:55:ac:
         cf:53:8d:88:c8:4e:52:98:f8:04:56:73:29:1a:54:97:bc:63:
         0f:07:9a:d0:f3:c3:fc:cc:35:c9:49:0f:cb:5e:2e:04:d6:0e:
         3f:10:6a:4c:8c:2c:80:b5:f7:7e:ba:8c:de:31:81:07:dd:40:
         69:90:7f:4b:6b:71:be:a1:aa:04:3c:1c:f2:75:25:c6:c0:94:
         7b:ac:42:67:a2:83:a4:c4:f7:73:d2:27:ed:41:10:9f:76:a0:
         bd:46:fa:76:3f:16:88:34:2d:4a:48:4b:eb:c3:f8:c4:66:a7:
         1e:63:65:48:ae:76:3a:bf:e7:c6:40:b1:66:4a:bf:e7:dc:73:
         a4:a5:8c:4f:14:6c:a6:74:76:64:f9:04:22:e8:ca:f0:b3:01:
         5e:41:03:81:46:5e:ef:13:2a:b0:38:36:a3:82:ab:7b:b4:a6:
         eb:e3:1f:e5:00:62:c0:a8:fd:1b:97:46:61:2f:2c:91:a4:84:
         13:bf:b2:21:4e:f5:af:d4:f0:d3:bb:ff:50:c7:55:6e:dd:35:
         2d:a1:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org