Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCED8499C9E000F68DEC84B5BB31387555F60613.cer
File:                     BCED8499C9E000F68DEC84B5BB31387555F60613.cer (raw, json)
Hash identifier:          gAolV2TGabBSvJsQKVZqQpshljYIsUdkup7yqFJxpio=
Subject key identifier:   BC:ED:84:99:C9:E0:00:F6:8D:EC:84:B5:BB:31:38:75:55:F6:06:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18DAE8DC85BE157BE707CC7D97F8E670F0ABF80C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/BCED8499C9E000F68DEC84B5BB31387555F60613.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 19:00:05 +0000
Certificate not after:    Thu 14 Mar 2024 19:05:05 +0000
Subordinate resources:    AS: 264981
                          IP: 170.0.192.0/22
                          IP: 170.247.108.0/22
                          IP: 2804:30ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:da:e8:dc:85:be:15:7b:e7:07:cc:7d:97:f8:e6:70:f0:ab:f8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 19:00:05 2023 GMT
            Not After : Mar 14 19:05:05 2024 GMT
        Subject: CN=BCED8499C9E000F68DEC84B5BB31387555F60613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:10:c5:a7:1c:39:9f:e5:68:ec:f6:72:4f:06:
                    10:a3:62:c3:16:d3:a4:9e:c2:47:0c:7c:07:9e:d7:
                    ca:d7:d4:07:83:39:93:65:3d:5f:13:0a:55:08:1c:
                    35:7a:07:50:62:32:73:ab:bc:24:03:20:de:88:94:
                    dc:91:d7:75:e1:b6:a8:7f:ac:d4:99:b2:90:8a:ad:
                    b6:04:43:95:80:50:b4:1d:1c:92:b5:92:8b:d1:85:
                    2e:a3:b9:b7:9a:82:6b:95:3b:b5:67:21:e3:ba:8f:
                    35:4b:c7:42:b9:9b:e2:97:2d:0f:78:5e:d7:4a:b5:
                    1a:ab:16:80:a9:52:e4:2d:d9:14:22:e2:e9:4d:c0:
                    12:46:33:c9:08:cb:da:4b:7c:42:39:ec:26:74:5b:
                    d7:3b:f5:d4:98:42:01:07:16:8c:2f:57:04:9b:45:
                    1b:4e:7e:32:3a:00:05:24:03:72:7a:5b:0f:63:d5:
                    40:d5:dd:94:8d:87:fc:9f:2c:15:d4:80:e2:53:31:
                    87:0d:8e:f3:21:78:f6:e9:33:ea:af:a7:ec:46:76:
                    0b:ef:30:93:8a:35:d2:23:76:eb:66:39:51:fa:5e:
                    80:58:06:13:c1:41:bd:a4:46:83:c1:b5:a2:3d:57:
                    61:51:69:38:4e:64:fc:8d:e0:84:ff:90:fc:2c:9c:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:ED:84:99:C9:E0:00:F6:8D:EC:84:B5:BB:31:38:75:55:F6:06:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HneAfw8QAfoVmEiJQWpxhn3hdusiaXeBSA5awUAo5ds/0/BCED8499C9E000F68DEC84B5BB31387555F60613.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.192.0/22
                  170.247.108.0/22
                IPv6:
                  2804:30ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264981

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:64:a4:27:b0:64:f6:a1:20:4f:bd:20:e6:db:dc:29:cc:
         e9:af:71:5d:18:b0:29:aa:6a:f6:c8:aa:78:f9:82:dd:30:70:
         4e:95:78:62:cf:a9:c9:bc:5a:4e:e8:2e:66:42:1a:7f:70:c0:
         7f:7a:87:aa:ff:70:c9:58:5f:50:e3:14:25:db:28:db:6b:22:
         77:95:4b:46:0f:87:7d:08:fc:79:e9:c3:7f:27:7a:b2:ad:c6:
         bf:35:85:99:27:50:3d:f2:90:e5:63:b2:07:5b:79:74:c3:b8:
         63:55:4e:14:b5:2c:68:57:75:63:81:ac:da:10:36:41:c7:2e:
         a8:53:0c:5a:d3:6a:82:cc:7e:40:11:81:db:0b:3e:2a:f0:6b:
         6a:4a:f0:b8:57:07:d8:a2:53:6e:88:99:b3:98:91:48:79:18:
         e8:e7:90:d3:bb:71:4f:f6:f4:f2:a2:be:83:19:6f:22:f1:17:
         65:06:37:f6:2c:b0:62:8b:ed:70:35:3e:65:e2:2f:58:d9:9c:
         53:11:ae:b2:bd:9f:8f:bc:bc:64:b1:29:11:a1:a0:69:d0:b9:
         2c:d3:14:2e:b5:e7:be:32:8c:d6:79:e6:87:b7:f3:8c:72:7a:
         4f:42:b1:f0:41:48:5b:c8:d1:e2:4f:5f:88:6b:10:15:66:0d:
         4c:93:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org