Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
File:                     BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer (raw, json)
Hash identifier:          6FBlGcyy2CXdNXK5U+lVpFlTMjxSSiRV4moMgOoc2ss=
Subject key identifier:   BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FA02240885E522BF7B33AA14027B31AA2A74BE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Oct 2022 19:31:06 +0000
Certificate not after:    Wed 04 Oct 2023 19:36:06 +0000
Subordinate resources:    AS: 28223
                          IP: 189.126.32.0/20
                          IP: 2804:84ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a0:22:40:88:5e:52:2b:f7:b3:3a:a1:40:27:b3:1a:a2:a7:4b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 19:31:06 2022 GMT
            Not After : Oct  4 19:36:06 2023 GMT
        Subject: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:3e:ef:9d:db:3d:d7:3d:0a:34:24:3c:45:
                    f3:07:49:76:91:f1:fc:b5:ed:7c:ab:14:14:f2:31:
                    c2:18:c1:9d:c3:3f:77:76:d7:11:d6:b1:b8:f4:ff:
                    e8:06:0a:14:54:29:5d:9e:16:17:b9:1b:71:8b:f2:
                    b1:7f:a1:6d:66:f6:cf:df:06:72:ce:da:5e:3a:18:
                    2d:75:91:4c:39:a0:94:00:44:2c:10:a1:36:7c:b3:
                    39:04:72:36:82:3e:92:a3:37:b0:8f:bf:81:df:2e:
                    04:3e:ce:eb:8f:4b:04:62:7d:ca:15:26:11:16:ff:
                    cc:d1:57:b0:06:fe:83:ca:b6:9f:ec:bb:d1:35:d4:
                    f6:19:8a:8d:7c:be:2c:0b:87:79:2b:32:d2:ce:c5:
                    09:c2:03:bc:ad:17:d9:ca:3d:d5:df:93:0e:e1:de:
                    9b:16:f1:36:a9:60:ee:bf:0b:22:40:e4:5b:0b:c0:
                    3f:99:bc:74:12:c1:fe:e6:b3:bd:ee:d7:1d:62:b8:
                    b6:dc:c0:f0:5b:0a:02:2a:b6:f0:99:f0:7f:94:37:
                    1e:73:43:f5:52:7f:bf:59:f3:26:64:05:1a:40:87:
                    5b:3b:6e:26:9e:6f:98:3f:ca:98:8e:d3:ab:98:a6:
                    45:30:ad:9b:da:06:c0:85:68:8e:14:0c:53:84:51:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.32.0/20
                IPv6:
                  2804:84ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28223

    Signature Algorithm: sha256WithRSAEncryption
         83:70:38:57:1d:48:16:52:ed:00:df:33:c4:77:21:71:65:ce:
         9c:06:4b:77:6a:4d:ee:5e:4b:57:e7:87:e0:74:ff:54:d6:62:
         2b:b8:3d:ee:b6:72:eb:b4:d6:b2:03:4e:dd:cd:64:f5:fa:4d:
         a0:d9:49:93:ee:0e:83:c3:bc:f7:ac:d6:5c:bd:a5:5f:41:c4:
         86:34:d7:7a:e1:9e:33:40:8e:17:eb:da:62:d5:d1:fb:e7:06:
         f1:49:5e:3f:42:fc:d2:ce:bd:29:95:60:e4:ed:5f:24:86:30:
         7f:12:2f:94:29:53:ea:ba:29:93:c1:c9:00:43:34:2c:1e:4b:
         7d:1d:3f:13:68:2e:53:1f:29:cb:e5:05:68:5e:f0:f6:41:99:
         d8:d6:1a:99:07:cb:b8:64:09:af:4a:26:90:41:2f:4f:96:1d:
         6f:cd:bb:81:48:9e:a3:fc:27:ee:a6:4f:a9:04:d1:c4:89:10:
         1c:7a:c3:bc:97:98:34:cf:19:70:d8:e7:a3:d5:63:57:dd:32:
         6c:0d:eb:9c:e0:d0:91:77:2c:3b:88:4c:93:34:57:83:79:37:
         e0:a4:65:2c:96:7b:04:7f:6f:dd:d9:67:e4:17:9d:0e:ef:df:
         71:bd:d0:a8:77:8b:05:66:63:e0:23:30:92:cc:5a:99:80:59:
         3d:f5:4b:0d
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUD6AiQIheUiv3szqhQCezGqKnS+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMDUxOTMxMDZaFw0yMzEwMDQxOTM2MDZaMDMxMTAvBgNV
BAMTKEJFNjNCOENCOTNGMkJBNkZFNjc5QzU0NjMwQjUyODVGRDc4NzhDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuj7vnds91z0KNCQ8RfMHSXaR
8fy17XyrFBTyMcIYwZ3DP3d21xHWsbj0/+gGChRUKV2eFhe5G3GL8rF/oW1m9s/f
BnLO2l46GC11kUw5oJQARCwQoTZ8szkEcjaCPpKjN7CPv4HfLgQ+zuuPSwRifcoV
JhEW/8zRV7AG/oPKtp/su9E11PYZio18viwLh3krMtLOxQnCA7ytF9nKPdXfkw7h
3psW8TapYO6/CyJA5FsLwD+ZvHQSwf7ms73u1x1iuLbcwPBbCgIqtvCZ8H+UNx5z
Q/VSf79Z8yZkBRpAh1s7biaeb5g/ypiO06uYpkUwrZvaBsCFaI4UDFOEUXXpAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+Y7jLk/K6b+Z5
xUYwtShf14eM8zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GSFJpckV6NUVZTjZSMUxnNm1uVWlIc0pVaEFSVzdudEhp
cUZKZzZQQ3hzSi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GSFJpckV6NUVZTjZSMUxnNm1uVWlIc0pVaEFSVzdudEhp
cUZKZzZQQ3hzSi8wL0JFNjNCOENCOTNGMkJBNkZFNjc5QzU0NjMwQjUyODVGRDc4
NzhDRjMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBL1+IDANBAIAAjAHAwUA
KASErDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuPzANBgkqhkiG9w0BAQsFAAOC
AQEAg3A4Vx1IFlLtAN8zxHchcWXOnAZLd2pN7l5LV+eH4HT/VNZiK7g97rZy67TW
sgNO3c1k9fpNoNlJk+4Og8O896zWXL2lX0HEhjTXeuGeM0COF+vaYtXR++cG8Ule
P0L80s69KZVg5O1fJIYwfxIvlClT6ropk8HJAEM0LB5LfR0/E2guUx8py+UFaF7w
9kGZ2NYamQfLuGQJr0omkEEvT5Ydb827gUieo/wn7qZPqQTRxIkQHHrDvJeYNM8Z
cNjno9VjV90ybA3rnODQkXcsO4hMkzRXg3k34KRlLJZ7BH9v3dln5BedDu/fcb3Q
qHeLBWZj4CMwksxamYBZPfVLDQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org