Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDDE50E6968F946222104D30C370ECEA6B2DFA68.cer
File:                     BDDE50E6968F946222104D30C370ECEA6B2DFA68.cer (raw, json)
Hash identifier:          Xl8pRPwWXQUs93MFA1HWGwWsB1SVQ0dBHF4Z7RCnMIU=
Subject key identifier:   BD:DE:50:E6:96:8F:94:62:22:10:4D:30:C3:70:EC:EA:6B:2D:FA:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B8E1BEC37CB694672D526690ECAB74CD99BD7A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/BDDE50E6968F946222104D30C370ECEA6B2DFA68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Jun 2022 15:35:58 +0000
Certificate not after:    Thu 01 Jun 2023 15:40:58 +0000
Subordinate resources:    AS: 264595
                          IP: 138.59.44.0/22
                          IP: 2804:2228::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8e:1b:ec:37:cb:69:46:72:d5:26:69:0e:ca:b7:4c:d9:9b:d7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  2 15:35:58 2022 GMT
            Not After : Jun  1 15:40:58 2023 GMT
        Subject: CN=BDDE50E6968F946222104D30C370ECEA6B2DFA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:95:8c:41:cc:ab:5b:18:3b:04:a7:9d:10:
                    13:1b:16:b2:a0:08:fa:06:4b:b5:11:ce:8d:62:af:
                    fc:41:d2:f6:e2:23:6c:b2:a9:5f:72:8b:4a:97:e8:
                    14:bd:d6:07:ef:a8:f3:81:5e:6b:dd:bc:4e:08:33:
                    60:49:6e:85:13:e8:46:27:fa:cf:cd:1a:a2:8b:f0:
                    ec:11:25:86:61:50:d2:42:60:19:7d:e9:72:4f:a7:
                    51:13:68:54:de:57:9a:25:b7:e6:45:0d:c3:49:dc:
                    88:c5:b8:b8:46:ec:bc:a0:50:f6:7a:f6:54:94:bf:
                    d6:c2:78:9d:56:6c:ab:d3:49:29:71:7b:4a:62:59:
                    78:d1:8d:68:75:df:68:44:a2:73:57:14:da:2c:67:
                    25:e6:09:25:8d:f0:1d:e3:de:b0:d4:35:a7:da:02:
                    c3:85:6f:a1:30:3e:2d:e3:51:d9:97:c2:8c:f9:5e:
                    5e:d5:c8:20:f3:ec:b5:29:15:80:d6:f2:99:06:b5:
                    1a:f6:ee:7f:23:1f:07:c8:90:ac:f9:10:d5:e6:14:
                    bd:ce:5f:bf:50:0f:2c:a5:c0:ad:00:1d:ef:14:f6:
                    2c:0b:da:66:71:8e:28:21:0e:e7:5d:87:57:31:9f:
                    6e:b5:de:49:14:45:61:03:21:de:d7:7d:55:48:44:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:DE:50:E6:96:8F:94:62:22:10:4D:30:C3:70:EC:EA:6B:2D:FA:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/BDDE50E6968F946222104D30C370ECEA6B2DFA68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.44.0/22
                IPv6:
                  2804:2228::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264595

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:ff:68:29:24:44:1f:da:a9:ac:74:56:22:e4:b9:e9:7b:
         de:c2:4b:67:4d:91:ce:fc:f2:ed:ce:00:2b:2e:34:08:eb:50:
         3b:26:50:6e:53:16:b3:17:75:fc:70:51:2b:84:cc:64:84:8e:
         63:51:a7:a0:05:1c:94:cf:94:f1:69:eb:c8:67:41:49:3b:05:
         22:9a:e9:36:5e:34:e5:8a:c8:4e:ec:f8:1a:e3:30:12:73:c8:
         1a:fc:45:45:3e:91:fe:47:6c:a9:d3:74:36:7e:fe:7f:95:48:
         88:13:1c:32:93:da:52:9b:15:89:b3:4e:5f:99:0b:2f:ed:99:
         2b:a2:6d:24:e3:b6:d4:67:e2:6e:82:8b:89:d5:6f:06:04:cb:
         fe:5b:97:1c:51:c5:2d:d8:a4:a4:d5:a0:f6:48:2a:5e:73:bd:
         00:76:40:28:b6:c2:b8:9b:fa:22:92:82:d4:a1:95:58:10:9f:
         da:64:b1:5e:8e:ed:5a:ac:b4:82:34:29:1d:cb:c8:48:ec:97:
         46:06:50:50:71:eb:f7:35:b9:e5:54:31:ad:3d:ff:a2:6f:e7:
         c5:ee:c3:1e:05:81:79:b6:a3:67:b8:b5:05:05:c0:c5:91:6e:
         8b:4f:fe:f9:9c:1e:7e:c5:d3:39:a1:35:52:51:71:8c:98:99:
         46:0d:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org