Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.cer
File:                     BC6C83912B1650F317FC1734FF95EA34DD2528E6.cer (raw, json)
Hash identifier:          nSsR0I1rJRScn6WswAK4e+FiujDEKF3Fn4DdBmGqz00=
Subject key identifier:   BC:6C:83:91:2B:16:50:F3:17:FC:17:34:FF:95:EA:34:DD:25:28:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B6560C43E043DA08AD542F1DC426C16E2A75024
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 12:54:30 +0000
Certificate not after:    Tue 09 Apr 2024 12:59:30 +0000
Subordinate resources:    AS: 266572
                          IP: 160.238.240.0/22
                          IP: 2804:3e14::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:65:60:c4:3e:04:3d:a0:8a:d5:42:f1:dc:42:6c:16:e2:a7:50:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 12:54:30 2023 GMT
            Not After : Apr  9 12:59:30 2024 GMT
        Subject: CN=BC6C83912B1650F317FC1734FF95EA34DD2528E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:29:cf:bf:e6:d6:3c:82:9e:30:cc:90:8b:
                    b5:f5:85:11:1b:0e:b8:d4:d4:57:51:00:6d:11:a2:
                    ff:5e:72:5b:a2:fb:0e:b7:24:b9:82:0b:76:8e:78:
                    db:cb:c4:75:a4:d8:ce:87:00:72:5a:41:8a:ad:24:
                    cf:28:33:d0:7a:c4:75:e3:43:9a:68:c2:f4:3b:ce:
                    65:da:36:f9:85:c0:61:3c:cf:23:bf:0a:b6:b6:eb:
                    34:02:e6:22:86:23:ef:01:f0:ac:88:00:10:13:d6:
                    71:55:16:b3:9e:aa:45:0e:e6:a1:b4:44:3e:0f:67:
                    db:40:9c:e9:48:a8:ad:71:a2:12:88:dd:ce:fa:04:
                    e0:25:f3:c6:4a:46:e4:28:cb:0a:b3:fe:5c:e4:48:
                    3b:ee:e4:d1:07:2b:e8:e4:c9:e5:97:64:32:1f:61:
                    47:30:18:0f:a2:9a:30:1f:d2:48:fe:16:d6:1b:b0:
                    83:02:a4:36:8a:cc:51:b1:58:9c:7a:91:aa:d9:fc:
                    24:e6:80:14:5c:81:96:c7:b5:f8:d4:50:54:7e:0e:
                    7f:b9:4c:e4:8b:9c:94:9b:ce:e2:99:32:fe:8f:5e:
                    dc:89:94:f4:19:a4:54:45:83:c0:32:74:e5:2a:b2:
                    76:4d:ab:7b:43:ef:38:db:e1:a9:d1:20:6f:28:d0:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:6C:83:91:2B:16:50:F3:17:FC:17:34:FF:95:EA:34:DD:25:28:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/BC6C83912B1650F317FC1734FF95EA34DD2528E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.240.0/22
                IPv6:
                  2804:3e14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266572

    Signature Algorithm: sha256WithRSAEncryption
         8c:8c:ad:a7:a8:d6:72:a8:3a:76:68:42:85:c4:6b:17:da:e7:
         77:3b:f4:a2:ed:a3:6d:dd:b0:7a:42:bb:7f:b3:bd:a9:d3:5b:
         15:6a:61:49:61:af:1f:eb:58:b6:f4:4d:c7:95:29:01:1e:85:
         5d:ac:a5:9b:8a:fb:e7:31:a5:06:73:42:0a:09:46:2a:eb:42:
         97:bf:ff:ad:7a:a2:d8:23:6f:c7:64:04:10:8e:1c:b2:2c:db:
         bb:5e:f3:5d:3f:82:99:d3:b6:eb:2f:dc:cb:9a:dd:3c:90:a8:
         36:4b:6d:cb:c3:29:56:e2:5e:08:83:61:76:11:3a:76:87:fc:
         5b:c5:75:01:90:57:90:cc:69:02:4f:97:7e:cb:87:11:bc:ef:
         44:98:d8:b1:82:ca:57:16:60:31:6b:2c:d1:c4:0f:b2:1c:10:
         ba:4e:c3:f5:54:3e:02:7f:b2:0d:03:da:76:3c:fe:3e:1d:4a:
         9d:55:70:5e:e5:c1:c9:e6:62:ca:00:1f:33:60:c0:6f:98:a0:
         3b:6e:74:b1:79:71:dc:e0:b9:56:24:71:c0:ae:40:a4:5c:7b:
         d5:76:73:fb:e9:8c:cf:77:28:ea:5e:fc:f6:e2:83:2e:54:e7:
         21:1d:42:b8:9f:15:a9:94:16:1d:85:b8:00:01:48:0b:bb:6a:
         a0:74:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:21 2025 by rpki-client