Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer
File:                     BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer (raw, json)
Hash identifier:          /nffsAEeYMSkw7vq5x6ONNN9B35P7eB4UQR6IGSafRw=
Subject key identifier:   BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0362DD70AE244727C5AD1A6F206D98C49A3B741B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 13:21:39 +0000
Certificate not after:    Thu 17 Oct 2024 13:26:39 +0000
Subordinate resources:    AS: 263280
                          IP: 179.109.88.0/21
                          IP: 2804:164c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:62:dd:70:ae:24:47:27:c5:ad:1a:6f:20:6d:98:c4:9a:3b:74:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 13:21:39 2023 GMT
            Not After : Oct 17 13:26:39 2024 GMT
        Subject: CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:17:6e:b2:0b:51:74:ef:9e:0b:a3:d2:fa:
                    a8:db:09:33:58:5a:c2:c8:b1:0c:cc:69:4e:cd:f2:
                    a0:81:4a:47:e5:2e:c7:ae:47:85:9d:7b:0c:d8:fb:
                    93:a6:74:52:b6:b3:94:ff:d8:a9:da:5b:f8:80:d3:
                    4d:7e:47:74:c7:03:43:ca:df:e4:45:09:3f:4e:4d:
                    dc:20:d0:75:44:60:8e:a3:19:07:b4:02:13:ee:fb:
                    8c:8a:aa:d1:fa:53:8b:61:8f:60:fd:90:65:a7:a6:
                    c3:05:e5:b1:54:4c:6b:35:7d:6e:52:ce:0b:46:d6:
                    1a:8e:36:fb:8b:45:fa:7f:93:75:22:0b:9d:b5:d4:
                    2a:0b:85:8b:cf:7e:81:e7:ea:b8:22:99:a0:2e:7f:
                    6d:99:d8:bb:33:9a:28:c3:1a:e9:e6:17:92:bd:05:
                    8a:d3:9a:b4:6e:58:c8:6b:ad:10:52:b6:21:67:26:
                    e2:21:98:f5:37:90:59:30:53:46:3b:e5:74:fc:c8:
                    c8:22:ed:15:99:b5:70:77:aa:00:5c:68:84:9e:cd:
                    f7:b3:cd:27:d9:b6:eb:ed:d6:ef:a3:47:18:ed:e0:
                    81:38:33:de:00:93:c3:ce:62:3c:cc:9f:bb:eb:1e:
                    5b:b3:8b:7f:ca:4b:84:de:7d:38:f6:a5:56:1e:74:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.88.0/21
                IPv6:
                  2804:164c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263280

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:04:56:6d:93:f4:69:1c:88:96:fc:f9:3c:da:c5:50:3e:
         a3:c4:2b:1a:b8:04:e7:78:fd:75:37:1e:09:71:45:79:5b:a8:
         c0:5c:7f:cc:05:0f:e7:96:0a:c7:1c:f0:8a:8f:0a:42:42:5d:
         6b:17:6d:6b:ee:7f:4e:76:36:93:c8:0c:6e:82:4e:85:d2:8b:
         69:80:19:97:14:8e:05:c8:9b:3c:0f:e5:67:55:3c:5d:50:0a:
         e3:f1:80:d9:ac:d8:ef:ce:b6:0f:98:9e:6f:9e:20:e6:cd:ac:
         e8:80:df:d2:6a:e3:ad:e5:59:da:a5:60:22:f4:dc:97:2f:78:
         cc:21:54:be:a1:70:c6:bd:4d:3c:d6:86:69:21:86:77:6c:54:
         4d:a3:ea:f2:87:58:94:a2:b2:1e:41:59:9b:47:7d:a0:5a:87:
         8c:af:ab:25:87:01:5d:09:de:0c:9e:89:0f:bb:37:c6:c1:70:
         c2:f1:25:2d:a7:38:82:2f:f8:28:2b:f5:b0:b7:85:ff:14:03:
         ea:98:5a:c7:15:72:6a:ef:53:b2:c3:f0:8a:f5:39:80:89:bd:
         d3:0b:c6:26:ff:06:7d:e2:8a:17:92:ed:2d:71:a1:0a:72:98:
         49:e7:92:c1:2a:bc:65:9f:df:ac:5e:a0:8a:e4:f0:70:7d:c2:
         31:de:3a:59
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUA2LdcK4kRyfFrRpvIG2YxJo7dBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTkxMzIxMzlaFw0yNDEwMTcxMzI2MzlaMDMxMTAvBgNV
BAMTKEJERjc5RUZCMjNENzA5OTlCMkY4ODM4OEQ3QUM3MDE4Q0NGNTIzNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZhdusgtRdO+eC6PS+qjbCTNY
WsLIsQzMaU7N8qCBSkflLseuR4WdewzY+5OmdFK2s5T/2KnaW/iA001+R3THA0PK
3+RFCT9OTdwg0HVEYI6jGQe0AhPu+4yKqtH6U4thj2D9kGWnpsMF5bFUTGs1fW5S
zgtG1hqONvuLRfp/k3UiC5211CoLhYvPfoHn6rgimaAuf22Z2LszmijDGunmF5K9
BYrTmrRuWMhrrRBStiFnJuIhmPU3kFkwU0Y75XT8yMgi7RWZtXB3qgBcaISezfez
zSfZtuvt1u+jRxjt4IE4M94Ak8POYjzMn7vrHluzi3/KS4TefTj2pVYedNZhAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS99577I9cJmbL4
g4jXrHAYzPUjdDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82TlpjVjFMUk5GRDk3cGhWZFRRc3ZwRnNWYUNWSlBrTWNt
YUdSZExtcVpLZC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNk5aY1YxTFJORkQ5N3BoVmRUUXN2cEZzVmFDVkpQa01j
bWFHUmRMbXFaS2QvMC9CREY3OUVGQjIzRDcwOTk5QjJGODgzODhEN0FDNzAxOEND
RjUyMzc0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOzbVgwDQQCAAIwBwMF
ACgEFkwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBARwMA0GCSqGSIb3DQEBCwUA
A4IBAQCjpgRWbZP0aRyIlvz5PNrFUD6jxCsauATneP11Nx4JcUV5W6jAXH/MBQ/n
lgrHHPCKjwpCQl1rF21r7n9OdjaTyAxugk6F0otpgBmXFI4FyJs8D+VnVTxdUArj
8YDZrNjvzrYPmJ5vniDmzazogN/SauOt5VnapWAi9NyXL3jMIVS+oXDGvU081oZp
IYZ3bFRNo+ryh1iUorIeQVmbR32gWoeMr6slhwFdCd4MnokPuzfGwXDC8SUtpziC
L/goK/Wwt4X/FAPqmFrHFXJq71Oyw/CK9TmAib3TC8Ym/wZ94ooXku0tcaEKcphJ
55LBKrxln9+sXqCK5PBwfcIx3jpZ
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org