Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer
File:                     BDC7634940E067A4864ED1C399A802F0320CD4A4.cer (raw, json)
Hash identifier:          1uLyfLYLhkG9AYE6mNSQP9DcYh5mMYDMAuZo8IntV/o=
Subject key identifier:   BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19CA5AD12264456EA0E63729CC43D940432E6731
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 15:14:21 +0000
Certificate not after:    Wed 27 Nov 2024 15:19:21 +0000
Subordinate resources:    AS: 61797
                          IP: 138.36.68.0/22
                          IP: 143.137.0.0/22
                          IP: 170.246.232.0/22
                          IP: 200.225.140.0/22
                          IP: 2804:197c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ca:5a:d1:22:64:45:6e:a0:e6:37:29:cc:43:d9:40:43:2e:67:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 15:14:21 2023 GMT
            Not After : Nov 27 15:19:21 2024 GMT
        Subject: CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:fa:41:b1:78:93:0b:7c:3f:09:48:b3:a6:
                    62:fd:45:3e:0f:20:72:60:ee:4c:e4:35:3f:91:f0:
                    b4:8f:16:e2:11:03:5b:c8:96:47:c3:ca:88:e3:1c:
                    2f:48:ad:46:1a:87:e4:eb:2e:f8:55:ee:2e:c6:0a:
                    6b:16:e9:25:dd:04:b4:74:eb:14:20:ec:f5:ef:29:
                    86:d2:f3:cc:89:2b:30:24:4f:c4:02:32:cf:cd:4c:
                    88:8d:dc:d5:07:78:f4:7e:e6:cf:9c:04:43:02:61:
                    58:49:c7:02:84:c4:02:33:be:e2:9f:33:96:ca:60:
                    18:5f:b1:77:bc:6d:90:5c:13:b2:97:5d:cd:ff:06:
                    60:5c:95:c5:7f:6a:af:a4:16:60:75:54:d1:22:ab:
                    32:39:58:9c:41:92:e2:52:34:b4:69:50:e9:6a:8c:
                    17:1a:52:f9:a8:9e:58:a7:21:8b:5e:0d:09:2f:12:
                    e0:be:b6:b1:fe:28:df:05:a3:e5:d7:f6:2b:87:ac:
                    51:33:3e:f2:51:47:e2:84:c5:73:9c:46:e3:6b:6c:
                    5e:53:c5:ec:28:33:f9:03:4f:3a:85:b7:b6:e8:c5:
                    3c:ff:51:db:83:eb:92:51:c7:88:c1:6b:9f:75:18:
                    57:66:f7:2c:4a:23:87:f0:7a:1f:97:58:8c:f5:13:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.68.0/22
                  143.137.0.0/22
                  170.246.232.0/22
                  200.225.140.0/22
                IPv6:
                  2804:197c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61797

    Signature Algorithm: sha256WithRSAEncryption
         a0:44:06:29:ab:0f:89:92:c5:4d:d8:83:4b:93:85:02:1b:6c:
         1a:00:f3:83:2c:d4:3d:e7:ea:2f:f7:6e:41:a9:0b:f4:9e:74:
         0d:5d:05:d7:66:b7:62:a4:86:14:78:53:ad:0d:36:bb:87:2a:
         81:43:83:59:1f:4b:4d:e4:a5:2b:12:a2:41:09:10:58:12:a8:
         d2:90:2c:4e:7a:7d:9c:70:07:30:db:b7:bb:09:a6:13:c7:0a:
         d3:7d:58:c1:37:3d:a4:ba:46:24:11:55:8d:f7:3c:ee:c7:71:
         00:1c:0e:d0:f2:0a:d9:e1:bf:01:98:34:58:e7:34:79:14:20:
         91:32:02:16:72:48:57:df:b2:02:31:34:29:e7:92:c9:f9:b8:
         0b:c2:75:12:07:3e:46:e5:7b:38:f0:de:a4:ba:e7:4a:01:20:
         ed:0b:60:93:61:cf:18:1e:a9:64:67:ce:fa:01:13:2c:0f:9f:
         d8:db:3f:bc:f4:60:2e:b6:22:9c:6d:2c:d5:2e:2e:7a:8f:d4:
         be:21:47:bb:38:35:79:c6:ac:db:00:2b:d0:0f:ae:b8:8e:f4:
         d0:1f:6d:b9:0f:60:fc:2d:cf:36:f7:e3:ba:b5:bc:d3:a5:bc:
         ae:e3:b2:e6:da:7c:58:b7:21:09:4b:c8:3f:5f:da:7e:64:82:
         93:dc:88:33
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUGcpa0SJkRW6g5jcpzEPZQEMuZzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjkxNTE0MjFaFw0yNDExMjcxNTE5MjFaMDMxMTAvBgNV
BAMTKEJEQzc2MzQ5NDBFMDY3QTQ4NjRFRDFDMzk5QTgwMkYwMzIwQ0Q0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+h/pBsXiTC3w/CUizpmL9RT4P
IHJg7kzkNT+R8LSPFuIRA1vIlkfDyojjHC9IrUYah+TrLvhV7i7GCmsW6SXdBLR0
6xQg7PXvKYbS88yJKzAkT8QCMs/NTIiN3NUHePR+5s+cBEMCYVhJxwKExAIzvuKf
M5bKYBhfsXe8bZBcE7KXXc3/BmBclcV/aq+kFmB1VNEiqzI5WJxBkuJSNLRpUOlq
jBcaUvmonlinIYteDQkvEuC+trH+KN8Fo+XX9iuHrFEzPvJRR+KExXOcRuNrbF5T
xewoM/kDTzqFt7boxTz/UduD65JRx4jBa591GFdm9yxKI4fweh+XWIz1E0+tAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9x2NJQOBnpIZO
0cOZqALwMgzUpDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BTjl3czR5b3RKZFBWaU1rTmJFQXU4NzN6NHYzY3VQWHpS
a3BuamdQOEZKMS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQU45d3M0eW90SmRQVmlNa05iRUF1ODczejR2M2N1UFh6
UmtwbmpnUDhGSjEvMC9CREM3NjM0OTQwRTA2N0E0ODY0RUQxQzM5OUE4MDJGMDMy
MENENEE0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKKJEQDBAKPiQADBAKq
9ugDBALI4YwwDQQCAAIwBwMFACgEGXwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
APFlMA0GCSqGSIb3DQEBCwUAA4IBAQCgRAYpqw+JksVN2INLk4UCG2waAPODLNQ9
5+ov925BqQv0nnQNXQXXZrdipIYUeFOtDTa7hyqBQ4NZH0tN5KUrEqJBCRBYEqjS
kCxOen2ccAcw27e7CaYTxwrTfVjBNz2kukYkEVWN9zzux3EAHA7Q8grZ4b8BmDRY
5zR5FCCRMgIWckhX37ICMTQp55LJ+bgLwnUSBz5G5Xs48N6kuudKASDtC2CTYc8Y
HqlkZ876ARMsD5/Y2z+89GAutiKcbSzVLi56j9S+IUe7ODV5xqzbACvQD664jvTQ
H225D2D8Lc829+O6tbzTpbyu47Lm2nxYtyEJS8g/X9p+ZIKT3Igz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org