Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer
File:                     BCBE7BC3A7506B733BF9EF192E7ECF334970777B.cer (raw, json)
Hash identifier:          ScJHN4PydhD5ATAONS+2EbwC9OfDk5rvaLKsGe9jIaQ=
Subject key identifier:   BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C86EB3BA5E3C1D673B90C4A8C3A83DEEBE53583
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:03 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:03 +0000
Subordinate resources:    AS: 266635
                          IP: 128.201.156.0/22
                          IP: 2804:3f08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:86:eb:3b:a5:e3:c1:d6:73:b9:0c:4a:8c:3a:83:de:eb:e5:35:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:03 2023 GMT
            Not After : Aug 10 02:59:03 2024 GMT
        Subject: CN=BCBE7BC3A7506B733BF9EF192E7ECF334970777B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:82:60:30:df:78:a2:03:a6:57:e9:55:35:
                    03:39:97:9c:c9:50:b4:63:0e:ac:d4:2b:16:cd:ad:
                    a5:6e:70:ce:21:40:dd:ea:c3:f7:5d:64:e4:0b:98:
                    8f:55:84:b4:20:1e:05:08:8e:b1:ad:fd:18:29:88:
                    29:9f:6a:62:28:6f:01:2e:cc:29:f4:60:80:ba:7f:
                    d0:18:e6:5c:cd:10:3e:69:46:d0:ae:07:43:25:65:
                    e4:02:df:bc:27:48:e5:59:7b:2e:d7:d0:a3:2c:1a:
                    04:13:20:1e:1e:9b:9e:c1:0f:74:50:f6:87:c5:c8:
                    20:f9:3c:f1:56:20:98:a5:4f:5b:cc:a6:12:45:47:
                    a5:0c:e0:34:7f:bb:80:42:36:88:b4:d6:f1:59:86:
                    32:ab:7e:36:41:a3:30:6b:84:5e:f8:d3:09:a4:24:
                    77:f5:db:48:9f:61:2f:ec:12:78:43:d1:4a:de:ad:
                    50:9d:b8:9d:3e:a4:e3:8c:18:2a:e7:0b:de:67:62:
                    1d:03:54:8b:7e:b5:97:75:51:bb:4c:5a:71:b2:8f:
                    4e:4d:41:50:b4:80:e8:a5:94:fc:9c:ef:e9:de:90:
                    53:52:95:31:a4:da:ab:fc:17:85:62:91:26:f8:ff:
                    33:f0:4f:72:d0:67:03:05:65:b5:93:2c:00:93:0e:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:BE:7B:C3:A7:50:6B:73:3B:F9:EF:19:2E:7E:CF:33:49:70:77:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/0/BCBE7BC3A7506B733BF9EF192E7ECF334970777B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/22
                IPv6:
                  2804:3f08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266635

    Signature Algorithm: sha256WithRSAEncryption
         62:84:a9:e9:5f:a7:d8:61:fa:8c:6a:36:9c:ae:fb:58:01:64:
         b6:03:07:16:55:13:91:5e:bb:ca:fa:16:db:a6:ca:48:b6:e1:
         b4:4d:4d:d1:22:05:52:21:79:2a:8e:70:58:71:c9:89:89:70:
         56:6c:03:3c:77:e2:1e:de:c4:80:07:7f:9d:bd:e2:9c:e2:ca:
         6c:5f:b4:33:53:83:bd:cb:9f:a1:8a:cf:dc:4d:20:1f:08:e5:
         58:7a:75:55:a8:3a:b1:b8:ab:08:a2:dc:cd:dc:ac:f2:55:6f:
         1f:30:6d:93:aa:36:20:a0:7c:bd:aa:11:d0:37:68:a6:a3:09:
         d5:85:a2:1b:12:fa:0d:f7:b2:e1:71:c3:02:b7:c2:06:31:93:
         97:9c:f6:17:62:c2:e8:c2:ad:73:db:47:6f:e5:0e:b9:78:56:
         9b:ec:53:d2:75:34:0a:0c:8c:bb:23:17:ea:55:4d:c0:a4:23:
         fb:23:c9:ee:da:40:e4:7e:06:cf:8e:7a:84:02:d2:b3:d4:03:
         53:27:fb:30:bf:21:3d:86:13:be:64:6d:e1:63:da:62:fe:a0:
         80:2a:a5:98:c2:48:c2:ae:4c:36:5f:cc:d1:80:03:25:5e:99:
         bb:e6:1c:bc:20:0d:43:0b:96:d1:25:c9:b3:12:7c:d0:33:58:
         cd:ab:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org