Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.cer
File:                     BCD5CB39FAA4193938B37D129F47AA40B31468D9.cer (raw, json)
Hash identifier:          Zz8HsdYNsXqAPzlnM7K0QGznm3vizK5rPO0gbq3l0KQ=
Subject key identifier:   BC:D5:CB:39:FA:A4:19:39:38:B3:7D:12:9F:47:AA:40:B3:14:68:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6569ED968C2BF64A315FB39879EEAD9C2B4B39E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 20:53:41 +0000
Certificate not after:    Fri 08 Nov 2024 20:58:41 +0000
Subordinate resources:    AS: 270644
                          IP: 189.85.44.0/22
                          IP: 2804:6f30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:69:ed:96:8c:2b:f6:4a:31:5f:b3:98:79:ee:ad:9c:2b:4b:39:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 20:53:41 2023 GMT
            Not After : Nov  8 20:58:41 2024 GMT
        Subject: CN=BCD5CB39FAA4193938B37D129F47AA40B31468D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:a3:1c:74:2a:5a:e1:c0:ce:96:e0:ea:e4:
                    f7:46:ea:4a:90:42:d9:8a:4b:b4:5b:29:af:20:5a:
                    05:26:7e:19:aa:24:1b:ab:8c:dc:7e:dc:6e:42:05:
                    bb:41:47:cc:12:a2:9c:2c:c7:44:43:df:7d:ae:c8:
                    14:74:d1:7e:64:b9:93:c7:ee:88:f6:33:83:65:65:
                    14:d9:03:af:c0:11:e5:ac:60:17:9a:12:bc:63:48:
                    14:5e:04:20:ce:b5:76:8a:c0:0f:fa:c3:98:66:30:
                    ce:7a:bb:37:02:d6:5b:d2:24:62:8f:0f:89:b8:a9:
                    08:34:58:40:8e:03:6d:09:e3:25:d5:71:84:49:b6:
                    2d:6a:7a:d1:56:ea:29:9e:16:33:06:79:29:cb:88:
                    35:50:97:b4:de:80:ea:fe:d0:17:cb:91:7e:96:d0:
                    0f:a5:9a:66:70:b1:97:dc:40:9d:10:fb:e6:ba:56:
                    b8:88:36:ad:a0:a4:2a:bf:2f:3e:2a:ad:d1:6b:f5:
                    d4:a9:bc:e6:57:88:06:21:2d:e8:e8:4e:bc:be:cf:
                    3d:32:42:6f:e6:9e:7b:30:18:7c:30:7b:15:f5:52:
                    a3:cb:c6:e2:fa:6e:3c:96:09:92:10:1a:37:37:85:
                    07:02:29:9f:25:10:ae:6f:e8:65:e6:9b:94:8c:64:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:D5:CB:39:FA:A4:19:39:38:B3:7D:12:9F:47:AA:40:B3:14:68:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.44.0/22
                IPv6:
                  2804:6f30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270644

    Signature Algorithm: sha256WithRSAEncryption
         15:da:a3:f0:89:12:24:35:1c:25:ae:73:e2:1c:fd:72:12:66:
         42:5b:96:72:ee:d6:b5:30:7f:0c:8a:33:7f:c7:d8:f2:7f:80:
         65:1a:58:9f:80:a5:1e:e0:81:18:0e:47:99:47:d9:ec:ff:ab:
         e2:e1:90:28:4c:48:93:f3:09:af:5b:87:96:d9:14:87:bc:fe:
         b3:7a:98:98:9e:5f:15:58:31:ab:ea:5f:22:fa:5e:56:0a:be:
         1a:82:fa:ba:c0:8d:8a:3d:ee:5f:f5:1b:47:b2:bf:6f:78:80:
         79:6e:ef:1a:f4:a8:5e:f4:35:74:dc:82:46:11:e8:0f:66:c8:
         b5:ff:e3:58:b3:ba:4b:a2:b4:07:5b:6d:69:da:03:68:99:ef:
         7d:f2:ae:7c:fd:46:3f:0a:51:4e:2b:7d:bb:55:ef:d2:a3:ad:
         6c:22:4c:56:55:8b:1a:28:fd:9d:ca:f1:2a:b2:26:b7:88:65:
         0d:5d:11:b6:3c:55:a3:a7:25:8a:dd:fe:ba:b4:64:bb:63:78:
         bc:61:6a:e5:cf:4b:16:22:c5:74:00:85:a4:3f:ae:ed:05:e5:
         8c:b0:86:fa:6a:d8:50:0f:5b:04:34:72:06:ae:87:37:17:1d:
         ac:84:77:9a:61:85:49:f9:18:49:77:63:d0:6e:6e:ed:73:94:
         6c:34:af:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org