Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer
File:                     BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer (raw, json)
Hash identifier:          oHrJIjU/Xk+Da+NrX1wrUAt7IDqkiGysACmuAcxlzJc=
Subject key identifier:   BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       139DEE8DB6BBD263860DE4B225611868EEAF9912
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 21:10:32 +0000
Certificate not after:    Tue 11 Mar 2025 21:15:32 +0000
Subordinate resources:    AS: 267388
                          IP: 45.4.156.0/22
                          IP: 45.7.0.0/22
                          IP: 45.174.208.0/22
                          IP: 45.234.248.0/22
                          IP: 131.196.40.0/22
                          IP: 132.255.44.0/22
                          IP: 2804:4cbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9d:ee:8d:b6:bb:d2:63:86:0d:e4:b2:25:61:18:68:ee:af:99:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 21:10:32 2024 GMT
            Not After : Mar 11 21:15:32 2025 GMT
        Subject: CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:79:4c:77:74:af:e3:23:6f:77:64:57:7c:
                    88:d2:2a:09:4c:bb:ac:3a:3c:5c:6e:1e:12:9f:85:
                    ea:8a:5b:33:98:90:77:d3:99:2e:b3:3e:97:a3:19:
                    ba:1e:49:41:76:28:9e:2c:23:5a:22:76:6b:5d:58:
                    38:e5:3d:50:e1:0a:cf:ed:77:a3:61:87:e1:7e:0a:
                    3f:42:ec:b3:2b:95:5f:68:53:5b:86:5e:75:e5:de:
                    0b:62:09:0a:1f:c4:4a:40:13:24:29:5f:2e:6b:d4:
                    65:a9:ce:4e:30:23:41:33:b6:d4:65:bf:8d:57:f3:
                    7e:7b:88:0c:e2:09:a4:bc:59:e7:5c:16:40:cf:33:
                    08:53:ab:0d:69:f5:d4:c4:ab:db:c8:38:8d:04:c1:
                    84:ff:0c:cb:57:b6:3a:66:f0:4d:aa:5b:9f:04:46:
                    f1:a5:47:28:ea:09:9d:5d:20:d7:46:b1:ff:04:ef:
                    e7:19:1f:74:80:16:0e:88:d9:38:54:93:68:10:2d:
                    44:1a:89:9b:58:a5:80:87:a2:f0:04:7b:cd:a9:4e:
                    c8:b6:ba:81:6e:0e:b5:b1:cc:5e:5e:7a:73:27:bd:
                    95:4a:2e:26:66:7d:98:a5:0f:0f:66:68:10:a0:45:
                    88:bd:58:59:a5:75:dc:bc:20:b8:95:45:0f:56:42:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.156.0/22
                  45.7.0.0/22
                  45.174.208.0/22
                  45.234.248.0/22
                  131.196.40.0/22
                  132.255.44.0/22
                IPv6:
                  2804:4cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267388

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:2d:35:4b:99:f9:c8:dc:75:b0:91:82:ce:6f:f0:9a:f8:
         d6:b0:94:17:de:d9:32:55:24:c5:72:e9:34:12:45:00:82:d9:
         e2:9c:93:3b:7c:14:64:89:81:a5:cb:17:61:53:30:2d:a9:85:
         32:a7:c7:74:24:7e:2a:16:32:2e:31:b2:4a:7a:ca:14:ed:17:
         be:52:14:57:9c:c6:cb:a5:5d:1d:92:a6:b8:65:88:fd:7a:f3:
         99:49:45:3b:8c:bb:67:c6:d0:2b:2c:9d:c4:2c:16:a2:f7:47:
         60:bd:7e:d8:1a:0b:a1:cd:74:44:6a:f0:fe:ce:19:b7:94:b4:
         39:54:a7:fa:a6:65:83:f6:1d:98:79:23:a4:73:d9:16:80:d2:
         f2:e3:17:9f:31:ad:5f:a6:5f:b7:f1:de:2f:5a:30:63:4a:7e:
         73:80:b7:a0:62:f7:f1:32:36:04:e5:d0:9a:3f:0b:2e:d2:6b:
         94:40:f0:ce:79:89:c5:a3:1f:13:48:12:ea:1a:49:1f:7c:ed:
         3b:fa:16:79:2f:ab:98:f8:ec:c0:72:b9:ce:de:8f:d2:94:10:
         de:4b:8a:b5:63:87:34:6d:36:8b:dd:29:eb:64:bf:5e:dc:68:
         36:3f:9e:41:39:b7:aa:ab:1a:d9:7d:34:0b:e4:e6:94:0f:af:
         a1:10:dc:82
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUE53ujba70mOGDeSyJWEYaO6vmRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIyMTEwMzJaFw0yNTAzMTEyMTE1MzJaMDMxMTAvBgNV
BAMTKEJERjg3QkY3NkJCNjlENTM4NzVFOEMxRTFEMkU1Rjg4MjUzRDMwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTXlMd3Sv4yNvd2RXfIjSKglM
u6w6PFxuHhKfheqKWzOYkHfTmS6zPpejGboeSUF2KJ4sI1oidmtdWDjlPVDhCs/t
d6Nhh+F+Cj9C7LMrlV9oU1uGXnXl3gtiCQofxEpAEyQpXy5r1GWpzk4wI0EzttRl
v41X8357iAziCaS8WedcFkDPMwhTqw1p9dTEq9vIOI0EwYT/DMtXtjpm8E2qW58E
RvGlRyjqCZ1dINdGsf8E7+cZH3SAFg6I2ThUk2gQLUQaiZtYpYCHovAEe82pTsi2
uoFuDrWxzF5eenMnvZVKLiZmfZilDw9maBCgRYi9WFmlddy8ILiVRQ9WQlNfAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9+Hv3a7adU4de
jB4dLl+IJT0wJTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84NGNQQjZLa3hjUjlYWm9pTDhwaG8zYVlwSjFkdXJLRXNH
SERqcEhidEc3Yy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0Vz
R0hEanBIYnRHN2MvMC9CREY4N0JGNzZCQjY5RDUzODc1RThDMUUxRDJFNUY4ODI1
M0QzMDI1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAItBJwDBAItBwADBAIt
rtADBAIt6vgDBAKDxCgDBAKE/ywwDQQCAAIwBwMFACgETLwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBR8MA0GCSqGSIb3DQEBCwUAA4IBAQA3rC01S5n5yNx1sJGC
zm/wmvjWsJQX3tkyVSTFcuk0EkUAgtninJM7fBRkiYGlyxdhUzAtqYUyp8d0JH4q
FjIuMbJKesoU7Re+UhRXnMbLpV0dkqa4ZYj9evOZSUU7jLtnxtArLJ3ELBai90dg
vX7YGguhzXREavD+zhm3lLQ5VKf6pmWD9h2YeSOkc9kWgNLy4xefMa1fpl+38d4v
WjBjSn5zgLegYvfxMjYE5dCaPwsu0muUQPDOeYnFox8TSBLqGkkffO07+hZ5L6uY
+OzAcrnO3o/SlBDeS4q1Y4c0bTaL3SnrZL9e3Gg2P55BObeqqxrZfTQL5OaUD6+h
ENyC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org