Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer
File:                     BEC1956E0160C92FCE70593490DE15F0A183223A.cer (raw, json)
Hash identifier:          dLvGwzgsd5d8cTZdN33A0IjjISQ6V2HNDSiUfNt4jMo=
Subject key identifier:   BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FA6EDA9B622ACC55EF21C9A09B149EC99AE7F8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 00:53:09 +0000
Certificate not after:    Thu 21 Nov 2024 00:58:09 +0000
Subordinate resources:    AS: 271599
                          IP: 45.174.196.0/22
                          IP: 2804:7e0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a6:ed:a9:b6:22:ac:c5:5e:f2:1c:9a:09:b1:49:ec:99:ae:7f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 00:53:09 2023 GMT
            Not After : Nov 21 00:58:09 2024 GMT
        Subject: CN=BEC1956E0160C92FCE70593490DE15F0A183223A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:9e:c7:3e:1b:3c:7b:bb:19:3a:3c:1f:bc:
                    37:46:d1:eb:f5:db:cf:f2:10:1b:88:e3:d7:8b:b0:
                    8a:32:5d:7c:4e:97:a2:6b:64:a7:82:91:44:c7:8f:
                    f4:50:4a:28:86:43:ee:96:97:11:52:fd:c0:bc:2e:
                    57:84:61:1c:bb:d6:d4:62:93:f8:f4:8f:80:0c:6d:
                    30:be:d7:8f:ec:40:7d:c2:76:6b:58:a5:1d:c9:7d:
                    07:70:42:da:b8:54:ee:5a:87:61:5e:0d:39:86:09:
                    5f:8f:c6:13:1c:fa:42:06:1f:c7:db:a5:bb:9c:e4:
                    77:be:ba:4b:4c:ea:a3:bb:9e:85:99:ee:ca:de:c6:
                    87:8c:25:88:ee:9a:6b:b3:b3:d0:a5:6c:aa:cd:3b:
                    9a:20:79:7a:68:ad:ea:e3:6d:c7:3b:82:2f:44:18:
                    8f:05:9a:c3:b5:76:bf:fd:ec:54:e0:63:2a:31:cb:
                    79:8e:ce:e5:08:df:a2:2f:e0:2c:99:1f:de:03:33:
                    92:eb:a6:2b:4b:89:f5:3b:8c:fa:cb:cc:62:72:6d:
                    3d:b1:ac:d4:73:e4:d4:d4:4a:d4:9b:ec:8e:60:c9:
                    8d:24:5a:34:fb:6e:43:d6:d4:0c:59:c2:ae:6b:b7:
                    b6:1c:21:a1:03:ee:5e:be:4c:2c:5a:40:31:23:8f:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/22
                IPv6:
                  2804:7e0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271599

    Signature Algorithm: sha256WithRSAEncryption
         3b:af:3e:78:1d:db:d8:58:a1:3f:44:24:23:e8:46:26:2a:de:
         ab:a9:1a:ac:0d:ad:a7:6f:21:23:b2:57:02:13:fb:79:08:4d:
         6f:6d:03:6f:e3:7c:f3:2e:48:78:c1:76:e2:e7:e7:a3:f4:2c:
         2a:84:20:91:e5:cb:21:b4:ba:c7:59:7f:7a:71:ab:93:4c:90:
         e2:c0:0a:e5:82:a6:a4:89:13:5f:15:d4:f6:bc:85:0a:30:a7:
         7b:42:8e:60:4c:39:38:0d:f1:80:b2:5b:74:a2:f2:80:fb:7c:
         c8:11:54:df:a5:4b:42:55:98:08:90:ac:65:44:d9:4e:94:9f:
         3e:38:c9:07:b8:97:35:ca:33:4b:12:a6:a0:b0:a6:52:33:37:
         22:8c:8b:8d:1c:a5:3c:dd:e7:9d:83:6b:52:e3:44:cf:98:0a:
         a8:54:cf:07:3c:fc:9e:8c:77:2c:12:5e:e7:2c:17:3d:c6:af:
         14:ea:88:1d:d3:48:87:0f:64:15:76:d7:ac:ce:04:67:bc:b7:
         ef:c4:8f:77:66:79:dd:57:91:23:ea:99:a3:30:dd:6d:50:17:
         81:a3:20:57:fd:91:61:3c:b0:39:93:cc:b8:05:fd:85:bf:f5:
         86:d4:ad:c4:fb:5d:bd:ac:07:1f:26:4f:db:a1:bf:9a:73:14:
         58:65:b9:12
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUb6btqbYirMVe8hyaCbFJ7Jmuf48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjMwMDUzMDlaFw0yNDExMjEwMDU4MDlaMDMxMTAvBgNV
BAMTKEJFQzE5NTZFMDE2MEM5MkZDRTcwNTkzNDkwREUxNUYwQTE4MzIyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1p7HPhs8e7sZOjwfvDdG0ev1
28/yEBuI49eLsIoyXXxOl6JrZKeCkUTHj/RQSiiGQ+6WlxFS/cC8LleEYRy71tRi
k/j0j4AMbTC+14/sQH3CdmtYpR3JfQdwQtq4VO5ah2FeDTmGCV+PxhMc+kIGH8fb
pbuc5He+uktM6qO7noWZ7srexoeMJYjummuzs9ClbKrNO5ogeXporerjbcc7gi9E
GI8FmsO1dr/97FTgYyoxy3mOzuUI36Iv4CyZH94DM5LrpitLifU7jPrLzGJybT2x
rNRz5NTUStSb7I5gyY0kWjT7bkPW1AxZwq5rt7YcIaED7l6+TCxaQDEjj7rZAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+wZVuAWDJL85w
WTSQ3hXwoYMiOjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydlBLZ29YaG9WTkJOZlg0SDJSRUVGWjFQVm1GOFI4WG1V
OHExVVVkaW1HYi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMnZQS2dvWGhvVk5CTmZYNEgyUkVFRloxUFZtRjhSOFht
VThxMVVVZGltR2IvMC9CRUMxOTU2RTAxNjBDOTJGQ0U3MDU5MzQ5MERFMTVGMEEx
ODMyMjNBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItrsQwDQQCAAIwBwMF
ACgEfgwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCTvMA0GCSqGSIb3DQEBCwUA
A4IBAQA7rz54HdvYWKE/RCQj6EYmKt6rqRqsDa2nbyEjslcCE/t5CE1vbQNv43zz
Lkh4wXbi5+ej9CwqhCCR5cshtLrHWX96cauTTJDiwArlgqakiRNfFdT2vIUKMKd7
Qo5gTDk4DfGAslt0ovKA+3zIEVTfpUtCVZgIkKxlRNlOlJ8+OMkHuJc1yjNLEqag
sKZSMzcijIuNHKU83eedg2tS40TPmAqoVM8HPPyejHcsEl7nLBc9xq8U6ogd00iH
D2QVdteszgRnvLfvxI93ZnndV5Ej6pmjMN1tUBeBoyBX/ZFhPLA5k8y4Bf2Fv/WG
1K3E+129rAcfJk/bob+acxRYZbkS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org