Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BC6FEE20A1466967E0C63978606D61135779CAAB.cer
File:                     BC6FEE20A1466967E0C63978606D61135779CAAB.cer (raw, json)
Hash identifier:          eTujLWS/mwSZWMR6O9XY5u/pt0lsyq/rSpUHDLqlCAw=
Subject key identifier:   BC:6F:EE:20:A1:46:69:67:E0:C6:39:78:60:6D:61:13:57:79:CA:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       404F67B01A0D71874FAC0E062F1A8BCEEE4429E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/BC6FEE20A1466967E0C63978606D61135779CAAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Nov 2022 22:01:22 +0000
Certificate not after:    Wed 15 Nov 2023 22:06:22 +0000
Subordinate resources:    AS: 262661
                          IP: 177.128.216.0/22
                          IP: 179.96.168.0/21
                          IP: 2804:1548::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4f:67:b0:1a:0d:71:87:4f:ac:0e:06:2f:1a:8b:ce:ee:44:29:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 22:01:22 2022 GMT
            Not After : Nov 15 22:06:22 2023 GMT
        Subject: CN=BC6FEE20A1466967E0C63978606D61135779CAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:52:c2:8e:7d:45:2c:50:44:0d:80:83:37:
                    02:90:80:f8:7f:3f:fb:58:a8:de:aa:a0:44:60:87:
                    b0:bd:a0:e8:ac:f3:1c:37:ca:56:da:08:f8:fc:79:
                    28:dd:eb:cd:bc:7e:99:a6:03:bd:9a:b9:dc:0b:eb:
                    54:83:d0:ec:81:5b:bd:28:12:c5:a5:94:4f:2a:d3:
                    ef:b8:dc:a6:a2:b2:ac:f0:c3:95:44:2a:56:5d:fc:
                    b5:3d:b6:40:9f:c2:99:74:cd:ea:01:71:b5:30:46:
                    ce:7d:a1:b2:46:a7:d2:06:34:ce:59:a3:bc:5c:d7:
                    ba:0d:05:ea:a7:41:26:09:1e:ab:5b:83:6c:98:ee:
                    81:0d:82:90:c7:63:20:82:3e:bd:d2:12:b2:3e:95:
                    cb:b8:e5:44:fb:6b:d9:5e:a0:95:6d:44:ce:66:52:
                    e2:6d:09:1b:60:63:c9:ed:7d:dc:1b:22:cf:73:da:
                    f5:f6:bf:1e:5e:85:31:bd:6a:e6:7c:31:05:98:a8:
                    c8:fc:ce:55:9b:3e:59:e9:15:a4:2e:e5:9a:47:e3:
                    a0:6c:98:53:b6:44:20:e1:55:c5:ec:17:d1:04:b1:
                    02:30:ee:ba:23:4c:c1:06:3c:b3:09:e7:40:7f:de:
                    37:94:71:9b:04:df:73:39:9f:0f:a1:a1:7b:60:36:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:6F:EE:20:A1:46:69:67:E0:C6:39:78:60:6D:61:13:57:79:CA:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/BC6FEE20A1466967E0C63978606D61135779CAAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.216.0/22
                  179.96.168.0/21
                IPv6:
                  2804:1548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262661

    Signature Algorithm: sha256WithRSAEncryption
         5c:48:0c:12:95:00:53:2d:9a:6c:b6:35:e4:3b:fd:3a:8e:90:
         7e:ea:91:fd:99:e9:b5:6c:d4:d6:54:47:2c:52:58:02:df:2d:
         05:ed:07:28:13:ab:bb:d2:55:1b:7a:a5:57:a1:d9:de:5c:ac:
         d5:c3:96:7d:01:35:62:ac:1f:cb:57:04:5e:97:87:59:87:b8:
         68:f2:58:73:c0:25:a1:6e:a0:0b:5e:1d:a9:58:59:2a:a8:ba:
         b3:e5:22:22:d2:b5:4d:fb:c9:60:c7:9a:f2:2e:70:97:68:6e:
         2c:49:f5:e9:18:9a:2c:8c:0f:7a:92:26:2e:20:14:08:d9:43:
         05:2e:58:47:21:2d:8a:65:e2:95:d0:6e:9b:68:63:81:8f:e2:
         ac:b7:df:32:7f:68:4c:8d:fe:12:34:99:86:a1:4e:f9:91:db:
         6c:0b:af:e3:fd:2f:b2:f8:d1:68:c7:22:fd:76:0d:d1:9f:60:
         2e:1b:8b:84:fa:03:3c:71:ed:59:f2:92:6c:9c:6a:8e:7a:a5:
         49:9a:4d:ea:95:00:c6:ae:ea:48:52:58:2a:cf:e1:ba:f1:fc:
         fe:63:6d:7c:35:97:53:cb:aa:f8:e2:ec:20:43:e6:94:96:70:
         10:fc:40:83:d6:b7:a1:5a:57:9c:62:ad:05:58:86:63:c1:36:
         67:f1:4e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:52 2025 by rpki-client