Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
File:                     BCD88303CE2E897D34FC20773375908050FB299E.cer (raw, json)
Hash identifier:          UA+mfeVk+WC0Zlq7EdKptfO6w9fKTR0f1vcp8InfdTs=
Subject key identifier:   BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0491F07807C38F82B187F728BED6B58AD92B5F63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 11:55:06 +0000
Certificate not after:    Tue 17 Dec 2024 12:00:06 +0000
Subordinate resources:    AS: 52940
                          AS: 53171
                          AS: 61844
                          AS: 265974
                          IP: 45.177.252.0/22
                          IP: 45.179.20.0/22
                          IP: 138.118.92.0/22
                          IP: 138.255.212.0/22
                          IP: 164.163.212.0/22
                          IP: 168.227.76.0/22
                          IP: 170.244.164.0/22
                          IP: 177.11.92.0/22
                          IP: 177.87.16.0/21
                          IP: 186.224.224.0/20
                          IP: 191.7.28.0/22
                          IP: 201.148.124.0/22
                          IP: 2804:1424::/32
                          IP: 2804:1a30::/32
                          IP: 2804:24e8::/32
                          IP: 2804:40ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:91:f0:78:07:c3:8f:82:b1:87:f7:28:be:d6:b5:8a:d9:2b:5f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 11:55:06 2023 GMT
            Not After : Dec 17 12:00:06 2024 GMT
        Subject: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:c7:3d:64:aa:ec:01:d6:27:a4:8e:b6:64:
                    09:94:2b:e1:95:bf:c0:e8:99:f7:88:b0:d7:26:03:
                    57:ad:6d:83:ac:e1:a9:ab:2e:ef:5e:88:44:c2:e6:
                    bc:c9:24:da:b1:4e:ef:19:2f:33:4a:18:eb:36:1e:
                    52:bd:b9:4c:4c:6f:00:d0:b3:79:a1:57:98:fc:7f:
                    84:89:59:82:cb:35:fb:9e:63:62:2b:f3:c8:a9:3f:
                    03:5c:8e:4f:e0:db:2d:b6:32:59:39:eb:0a:7c:1f:
                    22:29:32:54:45:2f:68:7b:42:7d:84:63:0d:d0:df:
                    ac:ce:de:37:86:fe:e5:8f:e5:38:e1:0a:f1:0e:ba:
                    00:b3:c0:86:e3:5f:44:8d:78:41:32:2a:75:f3:e7:
                    4b:42:b7:50:93:7e:c9:49:65:81:f4:ce:a4:23:00:
                    dd:66:c1:8c:f4:8f:32:8b:cc:6a:1f:cb:ae:24:eb:
                    38:93:76:2a:71:e0:81:a5:62:ab:dc:4d:a6:88:e7:
                    eb:55:bd:6a:fe:81:02:9e:0d:35:61:eb:41:d9:e7:
                    58:fa:16:df:20:5f:22:be:e0:00:07:e1:90:ee:07:
                    4c:1b:6b:c1:31:c5:59:04:35:35:cc:1a:a6:1f:09:
                    b9:7a:fc:8d:11:61:0d:e3:85:66:97:12:0f:ba:3f:
                    e4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.252.0/22
                  45.179.20.0/22
                  138.118.92.0/22
                  138.255.212.0/22
                  164.163.212.0/22
                  168.227.76.0/22
                  170.244.164.0/22
                  177.11.92.0/22
                  177.87.16.0/21
                  186.224.224.0/20
                  191.7.28.0/22
                  201.148.124.0/22
                IPv6:
                  2804:1424::/32
                  2804:1a30::/32
                  2804:24e8::/32
                  2804:40ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52940
                  53171
                  61844
                  265974

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:09:31:ca:0d:b3:b8:4a:a5:4d:86:ac:02:cb:72:cb:13:
         30:11:79:66:d2:a6:80:b0:9d:7c:8f:02:16:13:60:89:06:e0:
         12:2b:0c:48:2e:54:ce:be:0a:71:1f:6a:48:15:38:56:fd:af:
         6d:22:ab:49:ce:6f:36:f8:0d:39:bf:08:73:16:e4:9a:73:ac:
         04:e4:81:e7:6d:d4:9d:60:b7:9a:45:01:3a:3c:90:34:da:37:
         65:2a:62:76:a3:e7:a0:ea:bd:be:1e:a7:23:19:7f:39:b6:4e:
         33:09:09:24:e7:94:4f:06:52:25:da:c1:d6:5c:28:e9:27:a8:
         33:e1:cf:87:d7:68:5d:26:6f:ce:ef:b6:8e:16:79:8a:7c:d4:
         71:b9:30:01:70:82:bf:6b:57:15:8c:f8:94:62:43:b5:5f:b2:
         52:16:7f:7c:b5:90:5a:0e:69:08:60:76:ea:fb:4b:e8:be:6c:
         44:ed:39:6e:57:f0:ed:0d:c1:1a:df:50:d5:a9:08:ea:29:de:
         21:2b:74:af:88:9e:ca:72:4b:92:c5:1c:47:30:d9:e3:08:0c:
         cf:35:c4:02:d4:c8:89:80:c5:d6:10:2e:3c:e2:bd:4e:88:70:
         1c:ff:ef:20:ba:c2:16:55:16:6b:0c:e0:12:90:09:71:83:ef:
         0d:7b:56:3c
-----BEGIN CERTIFICATE-----
MIIGeDCCBWCgAwIBAgIUBJHweAfDj4Kxh/covta1itkrX2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTkxMTU1MDZaFw0yNDEyMTcxMjAwMDZaMDMxMTAvBgNV
BAMTKEJDRDg4MzAzQ0UyRTg5N0QzNEZDMjA3NzMzNzU5MDgwNTBGQjI5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKycc9ZKrsAdYnpI62ZAmUK+GV
v8DomfeIsNcmA1etbYOs4amrLu9eiETC5rzJJNqxTu8ZLzNKGOs2HlK9uUxMbwDQ
s3mhV5j8f4SJWYLLNfueY2Ir88ipPwNcjk/g2y22Mlk56wp8HyIpMlRFL2h7Qn2E
Yw3Q36zO3jeG/uWP5TjhCvEOugCzwIbjX0SNeEEyKnXz50tCt1CTfslJZYH0zqQj
AN1mwYz0jzKLzGofy64k6ziTdipx4IGlYqvcTaaI5+tVvWr+gQKeDTVh60HZ51j6
Ft8gXyK+4AAH4ZDuB0wba8ExxVkENTXMGqYfCbl6/I0RYQ3jhWaXEg+6P+TFAgMB
AAGjggOCMIIDfjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS82IMDzi6JfTT8
IHczdZCAUPspnjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GNGFmQ0x4a3FIdzRzak5pc21UTUw1TTV1N1Q5dUxHQllu
RG1TTDVhN3FYZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRjRhZkNMeGtxSHc0c2pOaXNtVE1MNU01dTdUOXVMR0JZ
bkRtU0w1YTdxWGYvMC9CQ0Q4ODMwM0NFMkU4OTdEMzRGQzIwNzczMzc1OTA4MDUw
RkIyOTlFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwgYUGCCsGAQUFBwEHAQH/BHYwdDBOBAIAATBIAwQCLbH8AwQCLbMUAwQC
inZcAwQCiv/UAwQCpKPUAwQCqONMAwQCqvSkAwQCsQtcAwQDsVcQAwQEuuDgAwQC
vwccAwQCyZR8MCIEAgACMBwDBQAoBBQkAwUAKAQaMAMFACgEJOgDBQAoBECsMCkG
CCsGAQUFBwEIAQH/BBowGKAWMBQCAwDOzAIDAM+zAgMA8ZQCAwQO9jANBgkqhkiG
9w0BAQsFAAOCAQEAX1gJMcoNs7hKpU2GrALLcssTMBF5ZtKmgLCdfI8CFhNgiQbg
EisMSC5Uzr4KcR9qSBU4Vv2vbSKrSc5vNvgNOb8IcxbkmnOsBOSB523UnWC3mkUB
OjyQNNo3ZSpidqPnoOq9vh6nIxl/ObZOMwkJJOeUTwZSJdrB1lwo6SeoM+HPh9do
XSZvzu+2jhZ5inzUcbkwAXCCv2tXFYz4lGJDtV+yUhZ/fLWQWg5pCGB26vtL6L5s
RO05blfw7Q3BGt9Q1akI6ineISt0r4ieynJLksUcRzDZ4wgMzzXEAtTIiYDF1hAu
POK9TohwHP/vILrCFlUWawzgEpAJcYPvDXtWPA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org