Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.cer
File:                     BDA1100C1000EE6F3E01E85E309530BE36F13995.cer (raw, json)
Hash identifier:          KumgEPNb+7mBCE+9fDFK98T+M88bwEBLq5g7dVISjlI=
Subject key identifier:   BD:A1:10:0C:10:00:EE:6F:3E:01:E8:5E:30:95:30:BE:36:F1:39:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       06CC495B5C8846EFB2D46848C39EA90AE20F224F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 15:44:56 +0000
Certificate not after:    Tue 30 Jul 2024 15:49:56 +0000
Subordinate resources:    AS: 263374
                          IP: 191.37.224.0/21
                          IP: 2804:1528::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cc:49:5b:5c:88:46:ef:b2:d4:68:48:c3:9e:a9:0a:e2:0f:22:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 15:44:56 2023 GMT
            Not After : Jul 30 15:49:56 2024 GMT
        Subject: CN=BDA1100C1000EE6F3E01E85E309530BE36F13995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:db:6d:9a:90:92:cf:37:62:16:66:ce:8d:
                    db:ee:54:75:30:97:ad:ac:28:7a:4a:c4:a5:4f:80:
                    64:14:a9:3f:cc:8d:53:fa:3c:66:79:f1:6d:07:47:
                    99:b8:64:e0:88:45:08:c6:cf:9a:30:26:95:33:20:
                    7c:aa:82:7e:03:2a:2b:be:6e:af:88:02:22:4d:98:
                    4b:05:c5:c4:87:2a:a2:56:30:3c:46:9b:f8:e5:0c:
                    d2:e6:aa:10:21:87:47:8d:ae:d3:dd:ab:33:8b:1f:
                    f0:56:c4:5a:64:e5:a0:be:d4:b0:46:43:50:58:f2:
                    38:6c:1a:75:cf:1c:d5:f7:c6:4b:e1:9e:8e:90:71:
                    64:a3:49:83:ab:bf:94:e7:2f:e7:67:6a:bc:08:e8:
                    d5:e0:2f:f5:cf:f3:81:97:5f:de:28:eb:f6:9f:e4:
                    e7:2c:a5:1f:98:b6:1e:8f:2b:67:63:b6:ae:ae:0f:
                    42:91:bc:40:d0:74:7e:77:39:59:6e:00:08:88:54:
                    b0:87:e2:e7:51:0f:70:69:c3:18:35:94:70:97:8d:
                    85:81:b3:af:5d:2a:b3:09:04:e4:c3:6e:c8:9e:67:
                    ff:35:de:a2:b2:c5:d2:ac:21:9a:aa:ce:8b:b4:fb:
                    d9:18:ac:8b:a5:83:8b:ca:7c:23:56:d4:a8:ef:59:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:A1:10:0C:10:00:EE:6F:3E:01:E8:5E:30:95:30:BE:36:F1:39:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/BDA1100C1000EE6F3E01E85E309530BE36F13995.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.224.0/21
                IPv6:
                  2804:1528::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263374

    Signature Algorithm: sha256WithRSAEncryption
         42:83:e5:e9:88:81:d8:72:1e:04:33:37:82:da:37:85:88:a9:
         7e:19:a1:a2:60:c2:b8:73:07:96:33:26:5e:cc:75:5e:df:2a:
         db:83:25:9f:73:66:bf:ee:ae:1a:bb:25:81:25:28:80:94:eb:
         14:1e:6c:ec:9f:8a:9d:7c:5e:e7:b0:e4:99:c3:27:3b:06:16:
         b0:16:b7:52:b4:fb:3c:d0:bc:ed:b4:a5:2a:5d:de:7a:e3:c4:
         fb:c5:81:09:66:89:56:95:97:36:5c:ef:47:31:c6:f8:ed:33:
         cb:27:cf:d7:de:9e:82:bd:7f:29:bc:3a:0b:74:9f:11:70:29:
         ae:6f:af:9e:cf:ef:44:e1:59:f5:82:e6:f4:e7:6b:e5:3b:73:
         cd:21:c5:66:f1:e3:d8:53:bf:60:57:ff:7f:e2:75:91:3c:b7:
         01:e5:b3:62:3c:d9:a2:82:3c:32:f9:b7:86:1d:3d:16:f1:7c:
         81:ca:44:84:e0:e3:b2:86:ed:0a:6a:38:71:d1:55:7f:47:b6:
         83:c7:ac:6f:f1:10:41:26:c0:28:8a:2d:72:79:e6:3f:ed:1a:
         82:4e:ee:63:73:cf:6a:4b:43:45:54:54:43:2d:30:2b:45:47:
         19:87:4e:a1:c8:45:1d:12:92:47:b5:c3:0f:71:bf:b4:dd:f1:
         11:c9:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org