Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer
File:                     BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer (raw, json)
Hash identifier:          FzUSGe0hgQ3K5pxC/UkF9wFG3CGrnWI6ua+UM/PjKAc=
Subject key identifier:   BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3512CF6B11A7BC51C7AFF9C17B5B29C07F288D36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Mar 2023 21:54:23 +0000
Certificate not after:    Tue 05 Mar 2024 21:59:23 +0000
Subordinate resources:    AS: 271443
                          IP: 179.0.72.0/22
                          IP: 2804:7ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:12:cf:6b:11:a7:bc:51:c7:af:f9:c1:7b:5b:29:c0:7f:28:8d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 21:54:23 2023 GMT
            Not After : Mar  5 21:59:23 2024 GMT
        Subject: CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:24:32:af:a0:a6:d8:6b:07:44:4b:d7:d6:
                    d8:34:72:2c:25:e8:80:5e:11:63:11:68:98:b2:54:
                    af:65:8c:6d:9c:62:d1:10:5c:39:4c:56:fa:7c:30:
                    b2:96:2c:a1:75:be:05:42:a8:38:50:6c:98:83:aa:
                    5d:d0:6e:8a:ca:35:bb:eb:67:45:cc:3d:2d:f2:37:
                    d2:b0:8b:a9:99:bb:dc:c9:4f:39:d4:52:c2:ea:1d:
                    53:c7:03:5c:09:b7:87:e0:88:67:8e:f7:94:44:89:
                    da:83:e0:59:b1:ea:9e:86:09:f1:b0:0e:4b:a6:64:
                    ce:ec:3e:b2:03:93:5b:9e:8a:60:12:0e:dc:dd:8d:
                    e5:43:1f:f6:40:37:ae:6d:62:6d:3b:36:4d:55:a7:
                    3f:51:5e:e0:1b:07:42:0e:61:a0:f4:8f:c7:ea:a3:
                    59:6a:77:6d:2d:b5:32:54:91:dc:f5:79:9e:41:10:
                    f6:e3:d8:6c:af:1b:dd:47:3c:e0:81:f3:e9:70:67:
                    6d:3d:b1:69:40:0b:f8:bf:38:3e:9d:0f:93:42:be:
                    91:4f:c0:21:c2:bb:c0:28:8c:1b:f1:a8:7d:ac:de:
                    99:41:59:6a:f2:b0:5c:46:52:18:ca:7c:a3:c2:1a:
                    77:28:80:45:bc:ac:2f:1e:27:b7:43:61:ab:0f:3f:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22
                IPv6:
                  2804:7ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271443

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:37:0f:77:54:4d:ce:b0:3b:60:22:15:23:15:98:98:de:
         0b:a2:5e:01:6d:b6:d4:09:eb:32:3f:2e:68:96:18:82:7d:7a:
         2d:5b:26:f9:10:d7:8e:95:70:9d:4e:99:70:19:9b:4a:44:0b:
         72:bb:d4:38:fb:fb:b6:34:74:02:72:e9:49:48:e8:2f:7a:ad:
         5a:7a:d5:8d:f0:99:a1:c2:13:7a:9a:0f:d3:55:96:13:53:2f:
         a4:11:cf:1a:31:a6:5d:28:83:d8:1a:e8:4b:83:56:32:29:b1:
         65:d2:f4:67:26:8a:f8:e2:f1:16:34:ae:d8:a5:91:69:b8:81:
         67:e8:e5:85:6a:10:5e:d8:7c:9f:e1:d9:87:97:77:31:51:d6:
         df:f4:72:83:cf:3e:31:bd:c3:14:c8:d2:1f:93:19:3c:3d:82:
         49:c5:16:74:df:80:62:1f:90:a2:25:a9:55:0c:c0:91:08:d5:
         de:57:a9:c0:22:57:17:0b:6a:2f:4a:af:be:19:0e:57:ea:47:
         be:87:cf:33:86:0e:ae:9f:f7:f2:8a:30:e7:e2:95:a8:06:e0:
         b4:c7:68:39:9e:ce:63:39:d6:39:2f:8a:94:14:bb:d8:61:04:
         ca:c7:7b:c8:6a:a8:49:61:1c:b8:16:c0:cb:d2:4b:82:e0:31:
         35:be:f9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org