Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
File:                     BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer (raw, json)
Hash identifier:          r8nRjgAtR9fvHNv4SJD2ApsT2Pi7Xd569Xlp+9Uj3Y8=
Subject key identifier:   BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6532FB2E28306D4DC2712CEE30D6A7315798CDEF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 19:43:29 +0000
Certificate not after:    Mon 02 Sep 2024 19:48:29 +0000
Subordinate resources:    AS: 52873
                          IP: 138.219.244.0/22
                          IP: 177.128.208.0/21
                          IP: 200.229.220.0/22
                          IP: 2804:890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:32:fb:2e:28:30:6d:4d:c2:71:2c:ee:30:d6:a7:31:57:98:cd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 19:43:29 2023 GMT
            Not After : Sep  2 19:48:29 2024 GMT
        Subject: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:a4:f2:27:59:a5:7f:cd:11:db:01:44:98:
                    d1:4e:00:48:da:9a:fb:10:79:4e:d8:2c:c3:27:96:
                    b1:5f:2c:34:80:67:22:c4:94:f1:c1:1d:6c:b4:32:
                    60:92:ca:e7:b0:b5:07:0a:bd:1d:8d:38:92:63:69:
                    c8:19:73:2a:9b:aa:f0:08:9a:d9:d9:9f:8c:47:04:
                    e6:1d:52:24:03:af:66:11:43:95:d8:e2:78:85:7c:
                    92:d3:5f:a1:84:8f:8f:59:d5:f3:2f:96:7b:aa:8b:
                    34:0e:e5:72:c0:72:93:ed:a4:0a:31:6a:3d:b8:ea:
                    08:d1:2a:69:33:0e:28:65:bc:68:1e:4a:85:43:52:
                    d2:74:16:ae:80:a6:96:6c:bf:48:cf:b0:ca:0e:5a:
                    43:45:e9:55:1d:c0:e9:28:82:28:28:8c:15:83:7b:
                    65:10:1d:7e:f1:b0:ff:b1:2a:d5:62:ce:65:71:ac:
                    3c:6c:07:9f:52:69:b6:22:5c:c6:64:d3:73:e2:15:
                    3e:95:39:c4:d5:1e:37:05:4b:e9:83:43:9d:a9:f1:
                    cb:fb:4c:36:9c:5f:0c:73:c6:72:3d:11:73:09:d1:
                    dd:66:8d:de:de:21:25:50:0d:84:d3:1f:9e:af:a1:
                    8e:b2:10:f1:ba:96:e7:6e:0f:ea:6e:bf:ec:73:ca:
                    40:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/22
                  177.128.208.0/21
                  200.229.220.0/22
                IPv6:
                  2804:890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52873

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:1e:59:55:b8:57:eb:8d:c5:5a:db:3b:a2:b3:6a:7e:f1:
         7a:8e:58:d5:20:6c:98:36:9f:94:45:93:e4:9c:ae:f2:c0:75:
         10:da:e5:01:90:b2:e9:a3:f1:d4:ed:ed:41:1b:65:f9:7a:41:
         a7:f2:0c:9b:97:96:62:f2:e7:b6:59:7c:f5:a3:e2:6e:ab:39:
         18:34:ab:39:0e:d5:60:45:68:d4:ce:5c:fe:e9:31:e1:95:04:
         f9:36:33:bd:e4:51:50:36:43:3e:fc:32:8b:c6:e5:10:e0:f5:
         6b:f9:17:63:f7:f7:1a:e5:95:7a:2f:bf:89:f0:35:9a:a1:e5:
         3b:80:93:e9:59:99:91:29:66:c9:de:a7:f2:40:61:4f:31:06:
         7f:4c:0b:39:fa:70:58:ee:df:70:34:a6:97:b0:3b:64:2e:b9:
         f4:76:97:6e:90:84:47:b2:e6:55:8b:33:46:5f:9d:52:d8:19:
         14:b1:2b:01:6d:48:58:fb:07:16:ae:f5:61:9d:40:b2:6e:fe:
         22:96:55:ff:d8:31:7e:27:73:80:2d:9e:24:8e:eb:cb:31:ca:
         88:65:51:9b:67:c1:17:80:aa:37:92:b7:da:09:19:bb:b2:17:
         7d:85:4f:77:9e:53:72:c1:f4:6c:13:a2:9e:15:27:22:02:54:
         a7:6f:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org