Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BD4760BDE386A8339C6F5C6C07B2AE620F4BBC8C.cer
File:                     BD4760BDE386A8339C6F5C6C07B2AE620F4BBC8C.cer (raw, json)
Hash identifier:          duZF/bDK8x+kpodhlYjDUKPaGsdzqQbkj0kW0vSq7Ns=
Subject key identifier:   BD:47:60:BD:E3:86:A8:33:9C:6F:5C:6C:07:B2:AE:62:0F:4B:BC:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A132698AC42C8755FA1F15C6034F6BA47681E4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/BD4760BDE386A8339C6F5C6C07B2AE620F4BBC8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 19:57:32 +0000
Certificate not after:    Sun 27 Oct 2024 20:02:32 +0000
Subordinate resources:    AS: 269016
                          IP: 45.178.24.0/22
                          IP: 2804:5e2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:13:26:98:ac:42:c8:75:5f:a1:f1:5c:60:34:f6:ba:47:68:1e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 29 19:57:32 2023 GMT
            Not After : Oct 27 20:02:32 2024 GMT
        Subject: CN=BD4760BDE386A8339C6F5C6C07B2AE620F4BBC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:43:b0:4b:ca:f1:f6:e6:24:d2:00:e5:ab:
                    dd:b2:5c:d4:d5:05:6d:0d:ed:17:10:f3:4f:75:89:
                    21:f0:47:fc:29:d6:27:25:d4:59:dc:5d:3f:d6:cd:
                    1c:85:f5:af:c9:46:57:c9:c5:a1:ac:75:62:4e:92:
                    75:17:93:c4:fa:c6:91:df:18:cd:2e:79:68:a0:3c:
                    c7:f4:4f:06:9c:68:eb:4a:22:56:8a:16:63:13:73:
                    13:c7:8f:7c:5e:17:e8:89:b2:a9:b2:58:42:d7:46:
                    5a:33:66:e7:4d:86:3d:55:86:73:51:64:1d:b8:70:
                    da:0c:32:32:9a:3c:90:31:4f:cf:64:4c:30:f5:3b:
                    3e:4a:45:31:1d:92:81:48:1a:80:94:09:d7:18:1b:
                    1d:3d:25:13:45:ce:6e:89:fc:57:ca:23:c4:0f:d7:
                    ad:c8:4f:3e:6b:52:79:1b:40:55:62:b0:d4:fe:4d:
                    b4:d8:2b:3a:eb:59:84:18:e0:fc:da:7d:eb:b4:49:
                    a1:00:d8:7c:a6:56:6c:f7:bf:e8:77:87:62:c9:60:
                    8f:b2:ee:10:ea:58:cb:07:ab:63:f5:6a:37:da:d6:
                    c1:de:0a:55:10:53:0f:b1:ad:69:f0:bc:45:b3:ff:
                    dd:87:9e:52:85:4c:78:68:7a:de:01:8c:91:7a:5d:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:47:60:BD:E3:86:A8:33:9C:6F:5C:6C:07:B2:AE:62:0F:4B:BC:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/BD4760BDE386A8339C6F5C6C07B2AE620F4BBC8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.24.0/22
                IPv6:
                  2804:5e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269016

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:f8:a2:f1:df:fa:b4:5d:97:5c:33:40:03:c5:ae:1a:b3:
         67:65:6e:f0:a4:7a:55:a4:25:8d:07:1c:5f:51:b6:b1:dc:49:
         75:4e:5f:c4:35:de:f4:c4:63:95:38:44:6b:f8:9e:00:bc:3c:
         3d:b0:f1:af:1f:70:c2:f4:d0:f5:69:19:48:5d:9a:4f:90:41:
         32:1a:d3:27:9e:61:4a:a6:06:7c:06:46:7f:56:e7:05:a5:9a:
         ca:fa:0b:e7:8f:8d:af:f7:a3:86:7a:fc:8c:a5:f8:11:11:fe:
         31:4e:4b:d8:8d:f6:9b:25:18:3d:96:fc:0b:ce:33:7b:6b:13:
         57:e1:2a:99:b0:88:8b:04:3f:dd:06:44:9c:71:55:8d:57:a1:
         9e:90:80:85:c7:c6:5f:7d:66:94:63:fe:cb:21:ac:69:c9:6a:
         a0:42:82:ea:fa:06:7e:ff:03:5a:5c:ae:c6:0c:94:29:40:84:
         d9:d5:dc:cb:45:e7:17:c7:7f:68:3f:c7:e0:f7:14:9a:e4:96:
         44:14:56:17:3b:5f:df:fe:7e:05:56:2c:ab:a3:f2:1c:c0:3e:
         60:ee:53:da:12:65:e8:b3:77:29:1d:69:b5:99:b7:67:61:97:
         51:d3:6b:a4:8d:1d:18:36:c4:a9:3f:aa:b2:f4:02:d2:27:96:
         57:eb:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org