Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BE430EA87140C1F5014CC192F08B73E872516286.cer
File:                     BE430EA87140C1F5014CC192F08B73E872516286.cer (raw, json)
Hash identifier:          qZtMQyj6H6A0K4HEoe6gi/FLfP8q2Hrz+nycNYfN1oE=
Subject key identifier:   BE:43:0E:A8:71:40:C1:F5:01:4C:C1:92:F0:8B:73:E8:72:51:62:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AF0C1920AFC09151A6C23D170071F62E16F072C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E8YnNFwXbjyX7urxJK1nRUzWf8wH9hnKmWjCp1ZfbXRN/0/BE430EA87140C1F5014CC192F08B73E872516286.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E8YnNFwXbjyX7urxJK1nRUzWf8wH9hnKmWjCp1ZfbXRN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 18:12:56 +0000
Certificate not after:    Tue 16 Jul 2024 18:17:56 +0000
Subordinate resources:    AS: 264868
                          IP: 168.205.192.0/22
                          IP: 2804:2f0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f0:c1:92:0a:fc:09:15:1a:6c:23:d1:70:07:1f:62:e1:6f:07:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 18 18:12:56 2023 GMT
            Not After : Jul 16 18:17:56 2024 GMT
        Subject: CN=BE430EA87140C1F5014CC192F08B73E872516286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:94:7f:41:13:1f:d0:5d:de:52:ef:b4:18:
                    50:e1:d0:1e:04:18:26:dc:ee:18:cb:4a:39:07:02:
                    da:09:b6:ee:e6:40:d7:5a:98:05:ff:19:34:ef:ac:
                    df:29:dc:fe:b5:6b:85:80:ce:7b:d1:99:cf:e6:c3:
                    62:c3:85:2b:dc:bd:56:bf:00:4e:0f:7d:12:9e:77:
                    12:d5:07:76:b1:42:46:4c:9b:ed:30:bc:78:48:ca:
                    60:47:43:81:91:f7:54:87:a0:c6:db:2a:3c:01:35:
                    11:d0:64:c1:e5:4d:8a:81:69:1b:7d:3b:b9:a4:f2:
                    0a:a8:92:c6:94:83:f0:43:a3:82:44:60:ee:b3:b7:
                    9f:bf:10:b7:32:2a:cb:0d:25:90:66:44:d6:bd:0f:
                    44:08:05:76:66:94:e9:9c:5f:68:fb:cb:a5:7f:26:
                    86:36:06:ee:14:40:df:c8:a5:ed:89:27:bc:1c:32:
                    4c:43:07:3a:80:f5:de:8d:04:17:17:56:a6:16:34:
                    33:67:7b:93:08:23:2e:16:75:56:77:29:d5:d6:f7:
                    7f:73:96:b2:6f:55:75:30:af:d8:f9:6a:fd:8b:07:
                    3e:b6:65:3d:d8:62:e6:0d:45:a8:c1:cc:42:b6:3f:
                    2e:2c:1e:6f:b3:8e:29:43:c7:01:fc:21:36:cc:d6:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:43:0E:A8:71:40:C1:F5:01:4C:C1:92:F0:8B:73:E8:72:51:62:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E8YnNFwXbjyX7urxJK1nRUzWf8wH9hnKmWjCp1ZfbXRN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E8YnNFwXbjyX7urxJK1nRUzWf8wH9hnKmWjCp1ZfbXRN/0/BE430EA87140C1F5014CC192F08B73E872516286.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.192.0/22
                IPv6:
                  2804:2f0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264868

    Signature Algorithm: sha256WithRSAEncryption
         07:a7:bb:85:86:f0:82:9e:43:c6:1d:f8:17:77:3b:a8:ca:49:
         1e:87:db:1a:82:93:2d:0f:6b:ae:7a:24:a8:c2:fb:6b:51:e7:
         1d:53:9b:6c:46:93:a7:88:60:43:c8:4f:1d:e5:95:e6:4d:95:
         2f:ee:09:62:76:4a:54:ec:c0:18:25:1b:e9:d1:36:44:88:f6:
         d8:61:20:33:15:78:df:9b:be:5e:58:7d:15:40:af:a7:d6:38:
         2e:c2:22:ed:92:f9:af:96:89:c2:69:a9:53:c5:79:ae:4f:c5:
         45:b9:ec:e0:de:7f:d6:d4:45:d3:f7:5d:f9:5a:39:cf:31:b3:
         9e:10:be:6b:04:1e:00:32:90:b5:13:2a:5a:8a:af:49:d8:fb:
         4c:ff:3c:30:3a:8b:b0:f6:17:0f:2f:4b:35:6f:ba:de:20:36:
         13:73:b4:42:e1:83:78:5d:ea:ce:02:92:74:6a:75:d7:2e:6c:
         1f:45:fb:7a:8c:5f:09:3d:e6:55:a9:b0:4f:cc:b3:9d:af:49:
         bc:29:2b:f4:d9:63:16:07:e1:42:76:e8:f7:22:5a:18:b3:d3:
         60:dd:3c:32:6d:74:ab:35:f6:5f:f8:8e:d3:59:9f:bd:15:8a:
         c3:43:b9:a7:de:e0:62:ec:e4:9a:42:4f:3f:5c:84:72:f1:1d:
         77:bf:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org