Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734.cer
File:                     BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734.cer (raw, json)
Hash identifier:          XcnxBt7PQnGrIbKmDxF/T6ElpTcIuC9u5fIMHlWaRBA=
Subject key identifier:   BC:A0:32:90:54:F7:A7:4E:BF:C3:42:3B:9D:D8:6E:EC:0A:4A:17:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25AE1ACBE078244C2528A158E68955B97C883A5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 16:52:06 +0000
Certificate not after:    Tue 14 May 2024 16:57:06 +0000
Subordinate resources:    AS: 264352
                          IP: 131.108.228.0/22
                          IP: 2804:1d2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ae:1a:cb:e0:78:24:4c:25:28:a1:58:e6:89:55:b9:7c:88:3a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 16:52:06 2023 GMT
            Not After : May 14 16:57:06 2024 GMT
        Subject: CN=BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:13:8d:25:00:e2:4e:5e:fd:8d:b5:d6:95:
                    ad:23:da:4e:46:31:9c:af:81:97:23:80:f9:fa:ef:
                    28:3e:6e:f1:d2:0e:8d:a6:27:f2:13:d6:f0:12:cf:
                    77:30:f8:bc:4c:d6:55:66:f1:91:9e:cf:b6:f7:cd:
                    97:73:fb:ea:cd:47:cd:39:89:93:ce:0d:62:2f:71:
                    2a:0f:23:ee:20:1d:27:54:20:24:fa:78:57:8a:85:
                    a9:ed:45:8f:2d:48:c6:07:6f:64:0c:17:df:3b:e6:
                    83:04:6e:c0:3a:0c:ca:01:3a:41:3b:f5:5d:17:d4:
                    60:9e:b4:2d:8f:3d:77:dc:17:fe:60:f0:d4:66:f5:
                    43:f8:3c:ce:85:78:88:1f:30:bd:b2:27:a9:7d:e8:
                    56:4a:06:b6:a2:fd:41:2b:d9:65:7b:f3:a4:b1:f7:
                    cd:3a:09:dc:ee:e1:97:10:39:ba:50:cb:20:15:63:
                    cf:24:58:1a:8f:c7:59:81:39:88:e5:5c:03:ce:7c:
                    b8:c1:98:1b:8f:9a:af:8f:8d:b4:19:48:90:a8:75:
                    55:39:ce:5d:b2:fe:05:49:14:29:52:66:dd:8d:20:
                    20:7f:15:31:00:ee:90:fa:e5:b3:97:b6:1d:1c:4d:
                    dd:b4:9f:ee:1c:6c:4d:f9:fb:47:45:77:cb:4b:2f:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:A0:32:90:54:F7:A7:4E:BF:C3:42:3B:9D:D8:6E:EC:0A:4A:17:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/BCA0329054F7A74EBFC3423B9DD86EEC0A4A1734.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264352

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:b9:c7:a7:17:c4:da:70:e7:a1:65:34:59:f7:5f:13:6c:
         4d:57:3f:de:5d:ac:aa:19:10:44:cf:2e:ca:2f:71:da:ca:50:
         42:06:a2:87:e9:30:26:9c:2d:1b:65:7d:b8:4e:b9:f5:5e:df:
         67:61:c2:d2:b7:aa:4f:08:be:96:d2:60:3a:f3:12:4d:0b:0d:
         84:f1:f1:0f:1f:8e:14:65:1d:9c:e9:4f:90:e7:aa:5f:85:8a:
         07:d3:3e:1a:e9:d8:8f:05:b8:50:2e:d1:1c:60:ae:f1:4d:bc:
         10:8a:33:df:e5:c7:75:52:28:33:55:c6:b8:cd:15:8d:70:67:
         7d:d4:8f:b7:05:56:82:e4:fa:f8:0d:7a:bc:a4:de:06:4b:2e:
         4a:1b:b2:84:e1:22:ec:97:8a:27:7a:e6:9d:79:6f:71:d3:00:
         ce:a3:ba:1c:af:0c:92:1d:99:3c:ae:83:f0:00:84:b3:49:ae:
         04:58:bb:5f:e7:cb:cd:14:c9:a6:b1:a0:9b:a9:68:a5:1e:28:
         c8:29:0f:eb:e7:f7:ca:43:98:d9:1d:17:ee:51:76:05:36:f8:
         ff:63:d6:7b:b8:a3:2e:8f:66:8a:94:c2:fa:0b:5b:fd:30:39:
         9c:dd:cb:8f:e9:cb:5f:17:3c:a2:8f:53:93:4b:af:53:2c:f7:
         5d:72:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org