Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer
File:                     BD9063ADADF748EEA58A242F1668AF322657ABD1.cer (raw, json)
Hash identifier:          zE7ZtD79N7kDvNhMdTynKl33+x/qfJzR2MKNK4XFau4=
Subject key identifier:   BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6854E2021C67BF055CFCA31DFD6F2C59C0CC1871
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:45:11 +0000
Certificate not after:    Fri 26 Jul 2024 18:50:11 +0000
Subordinate resources:    AS: 264096
                          IP: 201.77.8.0/21
                          IP: 2804:2264::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:54:e2:02:1c:67:bf:05:5c:fc:a3:1d:fd:6f:2c:59:c0:cc:18:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 18:45:11 2023 GMT
            Not After : Jul 26 18:50:11 2024 GMT
        Subject: CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:c3:34:d2:09:aa:70:00:a3:bf:3e:75:4d:
                    7f:81:f4:3c:59:60:ba:36:13:76:20:4e:5d:ee:dd:
                    45:db:9b:b5:46:1d:5a:8a:65:9e:ba:10:a6:a9:5d:
                    52:00:35:19:c3:a2:ad:cd:7e:e1:c4:25:ba:b0:cb:
                    84:bf:4c:4b:78:7e:f9:e7:41:c8:86:4a:0a:6c:9e:
                    7b:19:7f:95:1f:99:bc:4e:db:70:72:82:a9:b4:8c:
                    00:0d:e2:44:68:96:1a:6a:c0:4a:4a:51:23:fc:18:
                    cc:53:a5:4f:2c:1c:15:8b:1a:c3:eb:e3:a4:c3:da:
                    76:49:ec:94:00:a5:35:24:f7:83:b7:88:b9:31:e4:
                    26:0f:b3:db:07:7b:5b:70:96:bb:22:3f:ad:31:ad:
                    fe:40:c9:5c:55:97:0e:bc:a6:a8:47:4b:3b:ab:14:
                    09:c4:34:79:a2:77:37:48:2d:fc:20:3c:7f:fe:b0:
                    9d:7c:95:1d:12:38:be:b4:2a:a5:c8:60:0f:0f:8c:
                    2e:88:0c:27:3e:af:53:2e:6e:b8:e7:b4:cc:ae:89:
                    d8:11:1c:42:cb:a4:b0:87:7a:6a:2a:c5:7d:2b:1d:
                    b4:79:df:03:9d:4d:65:2d:38:ca:b9:c6:fd:1b:25:
                    d8:25:87:ca:3d:db:67:ac:a6:76:cb:e5:3f:1e:cc:
                    57:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.8.0/21
                IPv6:
                  2804:2264::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264096

    Signature Algorithm: sha256WithRSAEncryption
         47:50:4f:64:5c:8a:78:74:8d:6a:f1:9d:ea:70:5c:31:ba:3f:
         60:6b:80:0c:dd:bf:4c:08:ee:59:18:df:e8:e0:69:df:40:82:
         62:61:9f:36:09:67:f8:00:61:9e:e5:22:3d:e0:94:2b:c5:d8:
         4f:e3:cc:b4:77:c0:58:f2:7c:b9:d4:e6:7d:d0:ef:24:dd:39:
         02:d5:74:af:85:ad:d8:9a:2d:22:b2:28:c5:83:11:cc:92:90:
         46:ca:05:8d:71:32:50:23:9d:0e:3f:7b:69:0b:07:e0:14:47:
         c7:f6:f1:69:f5:51:46:8b:d4:ba:f1:f8:09:95:72:f5:51:82:
         04:80:ac:9d:7b:65:4c:1b:30:39:84:a4:62:98:f4:72:76:03:
         ed:96:55:db:b5:0c:7c:d7:71:40:07:27:2a:17:07:4f:93:f7:
         69:28:57:d0:45:2d:ba:67:54:90:40:e4:37:f8:87:45:9f:c8:
         45:ba:3a:13:31:79:7a:8e:3d:18:56:b9:2f:eb:55:a9:4a:41:
         75:5d:d9:6e:c2:10:39:f4:10:a4:02:96:3f:61:14:1a:80:c7:
         ec:e1:eb:69:90:bf:16:66:ec:7c:8d:4b:be:13:c7:12:ad:78:
         e1:c4:4d:88:db:f9:cb:cc:49:90:18:72:1f:76:d3:90:58:0f:
         fe:ce:aa:cf
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaFTiAhxnvwVc/KMd/W8sWcDMGHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjgxODQ1MTFaFw0yNDA3MjYxODUwMTFaMDMxMTAvBgNV
BAMTKEJEOTA2M0FEQURGNzQ4RUVBNThBMjQyRjE2NjhBRjMyMjY1N0FCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1sM00gmqcACjvz51TX+B9DxZ
YLo2E3YgTl3u3UXbm7VGHVqKZZ66EKapXVIANRnDoq3NfuHEJbqwy4S/TEt4fvnn
QciGSgpsnnsZf5UfmbxO23Bygqm0jAAN4kRolhpqwEpKUSP8GMxTpU8sHBWLGsPr
46TD2nZJ7JQApTUk94O3iLkx5CYPs9sHe1twlrsiP60xrf5AyVxVlw68pqhHSzur
FAnENHmidzdILfwgPH/+sJ18lR0SOL60KqXIYA8PjC6IDCc+r1MubrjntMyuidgR
HELLpLCHemoqxX0rHbR53wOdTWUtOMq5xv0bJdglh8o922espnbL5T8ezFdxAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9kGOtrfdI7qWK
JC8WaK8yJler0TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BTDkyWGFlVFFkZ243cFpUa1lCRWh1UkFFNExRNVhhZVVp
VnpWZEpkekdwdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUw5MlhhZVRRZGduN3BaVGtZQkVodVJBRTRMUTVYYWVV
aVZ6VmRKZHpHcHQvMC9CRDkwNjNBREFERjc0OEVFQTU4QTI0MkYxNjY4QUYzMjI2
NTdBQkQxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAPJTQgwDQQCAAIwBwMF
ACgEImQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAegMA0GCSqGSIb3DQEBCwUA
A4IBAQBHUE9kXIp4dI1q8Z3qcFwxuj9ga4AM3b9MCO5ZGN/o4GnfQIJiYZ82CWf4
AGGe5SI94JQrxdhP48y0d8BY8ny51OZ90O8k3TkC1XSvha3Ymi0isijFgxHMkpBG
ygWNcTJQI50OP3tpCwfgFEfH9vFp9VFGi9S68fgJlXL1UYIEgKyde2VMGzA5hKRi
mPRydgPtllXbtQx813FABycqFwdPk/dpKFfQRS26Z1SQQOQ3+IdFn8hFujoTMXl6
jj0YVrkv61WpSkF1XdluwhA59BCkApY/YRQagMfs4etpkL8WZux8jUu+E8cSrXjh
xE2I2/nLzEmQGHIfdtOQWA/+zqrP
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org