Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCDCAF809C71DA5C51E0AC9D4EBBCED5C6AA4940.cer
File:                     BCDCAF809C71DA5C51E0AC9D4EBBCED5C6AA4940.cer (raw, json)
Hash identifier:          lCcjvBgzgkG/lDXolR8Vtr275oFMcGk1uNKbbdXDhTc=
Subject key identifier:   BC:DC:AF:80:9C:71:DA:5C:51:E0:AC:9D:4E:BB:CE:D5:C6:AA:49:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D5A5A33AFAF52C2412DF7D4BF916E4D9783A72F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/BCDCAF809C71DA5C51E0AC9D4EBBCED5C6AA4940.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 11:55:48 +0000
Certificate not after:    Tue 18 Feb 2025 12:00:48 +0000
Subordinate resources:    AS: 272213
                          IP: 138.117.226.0/23
                          IP: 2804:83b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5a:5a:33:af:af:52:c2:41:2d:f7:d4:bf:91:6e:4d:97:83:a7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 11:55:48 2024 GMT
            Not After : Feb 18 12:00:48 2025 GMT
        Subject: CN=BCDCAF809C71DA5C51E0AC9D4EBBCED5C6AA4940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:93:ba:c7:f0:e5:fb:cd:41:81:0e:75:41:
                    5b:f7:10:86:b8:74:f1:49:d7:fe:71:64:ab:19:3a:
                    7d:0d:e0:c3:5a:2d:ba:bb:0a:9b:3e:fe:a4:91:2b:
                    55:01:2a:b4:36:53:d9:4b:06:e1:a7:09:ba:25:02:
                    99:7a:2b:17:35:b8:4b:14:4d:b5:4b:a4:c0:8c:f4:
                    18:34:90:ca:98:20:2f:50:ec:5f:22:e5:c7:74:ad:
                    f5:fc:95:57:78:81:b9:bf:c3:71:a2:dc:96:f0:1d:
                    12:28:c4:25:83:9c:a6:4f:42:df:bb:ea:4e:7d:87:
                    de:f1:3a:6b:8e:3b:5e:31:da:22:be:a0:c9:8d:f5:
                    24:ee:40:b8:e1:21:88:5a:be:dc:50:cd:6d:16:ca:
                    95:05:ef:06:9b:25:3d:fb:e6:55:1e:95:5e:b8:46:
                    7f:2a:ff:8e:b6:ef:13:62:67:0e:16:c4:31:15:ea:
                    fd:cb:7f:32:d5:60:a0:d9:b5:f5:36:0b:7c:e3:43:
                    7f:19:7d:57:83:ba:4b:b8:28:aa:e5:d9:26:49:d2:
                    55:c7:e5:31:c5:f6:42:53:e1:0b:5c:f3:a1:ea:e1:
                    66:54:3c:99:7e:1b:3b:60:c7:6f:9a:0d:57:1a:3c:
                    73:65:8c:5a:3b:a3:23:bc:1f:4c:43:b6:b3:dd:3a:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:DC:AF:80:9C:71:DA:5C:51:E0:AC:9D:4E:BB:CE:D5:C6:AA:49:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/BCDCAF809C71DA5C51E0AC9D4EBBCED5C6AA4940.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.226.0/23
                IPv6:
                  2804:83b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272213

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:14:82:db:12:32:99:78:d2:d7:cd:30:dc:d5:12:11:d8:
         70:c3:27:ab:90:85:e2:6c:2e:00:17:7d:8a:29:8c:e6:6a:13:
         f9:42:10:2c:7e:61:b7:03:34:d9:b9:d8:71:1a:a7:20:75:ad:
         08:cc:f2:24:61:f0:2c:97:5e:7b:3c:38:92:df:00:2f:d0:03:
         c7:24:cb:49:94:1f:bd:c3:a7:c2:d7:a8:75:b4:bf:ba:93:fb:
         f0:07:db:f1:64:0f:ae:bf:60:ea:db:1c:f1:6c:32:df:91:82:
         75:d0:46:ac:e4:27:fb:4c:32:c8:0d:bf:a6:f7:9b:82:f6:d9:
         82:d4:f1:d5:f5:1c:11:e0:df:6b:52:96:e2:19:71:ac:72:20:
         62:ff:f7:52:95:69:cd:70:52:9b:78:e5:ca:66:5b:b2:b8:71:
         12:39:29:19:75:06:5c:70:02:d4:34:d0:3b:a7:b9:af:9c:0b:
         1e:93:89:87:6a:8d:ab:87:30:60:26:7a:6a:88:83:c5:4d:20:
         67:92:32:dc:a2:fc:01:26:fc:a5:87:39:05:8f:36:85:7e:82:
         ff:89:1c:4c:52:87:06:53:74:c9:80:2a:4e:6d:62:3b:5e:28:
         d1:33:6d:c9:43:e3:04:25:ec:46:3f:28:ef:c4:89:87:2f:39:
         7e:f1:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org