Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BEDCBC73757301ABC89BE0E7375CDB5682FF64A6.cer
File:                     BEDCBC73757301ABC89BE0E7375CDB5682FF64A6.cer (raw, json)
Hash identifier:          lkDSOj1wW3ePxXFX7CSVl9KDJtXoL/kzAQUkOMGsIXM=
Subject key identifier:   BE:DC:BC:73:75:73:01:AB:C8:9B:E0:E7:37:5C:DB:56:82:FF:64:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BD520DD8E9DBAC277F8F41134FC9F36EC8CB107
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/BEDCBC73757301ABC89BE0E7375CDB5682FF64A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 16:28:19 +0000
Certificate not after:    Mon 22 Jul 2024 16:33:19 +0000
Subordinate resources:    AS: 262403
                          IP: 177.38.96.0/21
                          IP: 187.61.88.0/22
                          IP: 187.85.60.0/22
                          IP: 2804:3e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:20:dd:8e:9d:ba:c2:77:f8:f4:11:34:fc:9f:36:ec:8c:b1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 16:28:19 2023 GMT
            Not After : Jul 22 16:33:19 2024 GMT
        Subject: CN=BEDCBC73757301ABC89BE0E7375CDB5682FF64A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:70:7b:c7:5b:14:63:05:eb:d0:d1:bb:d1:18:
                    38:0c:29:96:fc:79:24:8a:25:c9:ae:09:e6:50:c4:
                    b3:d9:72:20:65:3c:46:ac:db:20:39:2a:4a:85:dc:
                    5f:81:6d:0e:8d:97:01:a1:80:b1:67:27:6c:f7:91:
                    fb:51:57:71:54:c3:4e:b4:55:a8:b1:01:89:4c:a9:
                    07:09:8c:9b:cb:b0:26:98:1f:07:f1:15:e1:23:82:
                    37:34:f1:42:c3:b5:03:a1:05:53:df:0c:f8:fa:c3:
                    a1:10:10:3b:41:f1:1c:fb:54:e6:67:d1:bb:20:43:
                    b5:22:ce:e9:de:73:24:44:da:27:b9:2d:f2:1c:19:
                    95:27:7b:09:df:35:37:0e:a4:94:d5:9c:4c:c6:63:
                    07:c8:54:14:c5:d3:0f:90:cd:cd:27:58:1c:cd:62:
                    30:25:c1:d6:94:b9:d6:54:cf:6f:6c:f4:3b:1d:df:
                    35:aa:d0:c9:98:56:56:26:54:1c:fd:21:7b:a0:18:
                    ae:74:5d:9b:41:82:fb:37:f5:60:8e:f9:62:e4:65:
                    97:20:cd:8b:4d:57:a2:b2:40:1e:89:29:4d:3a:b6:
                    d6:1a:b1:7d:72:0a:88:95:5f:a5:63:16:8e:44:07:
                    18:a2:f2:da:bc:40:f6:90:f4:24:73:09:22:0d:39:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:DC:BC:73:75:73:01:AB:C8:9B:E0:E7:37:5C:DB:56:82:FF:64:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/BEDCBC73757301ABC89BE0E7375CDB5682FF64A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.96.0/21
                  187.61.88.0/22
                  187.85.60.0/22
                IPv6:
                  2804:3e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262403

    Signature Algorithm: sha256WithRSAEncryption
         6c:a6:81:1a:1f:ac:70:b2:4a:cf:c2:f4:bf:13:d4:ad:41:09:
         68:54:c3:a4:85:82:a3:42:57:1c:11:3b:47:c1:d8:1e:40:72:
         7d:07:bb:69:16:37:44:37:ed:8e:68:67:fe:b5:6f:17:d2:bb:
         b2:0b:b3:b8:6c:10:e3:a4:c2:45:c3:87:b5:5b:38:d0:8e:86:
         9e:dc:45:a0:b5:e0:fc:50:09:92:c3:51:07:75:c0:cf:4c:d7:
         7f:04:cf:9a:6f:46:8c:aa:c9:cb:36:fb:7f:ee:d1:2a:80:35:
         fb:5d:d2:36:7d:ba:0b:e9:c0:7b:4c:d5:2b:23:94:da:ed:34:
         25:30:d6:ac:cf:1e:e7:4a:2b:ea:aa:68:f0:0c:0b:05:ae:09:
         68:2f:f2:f1:74:91:45:8e:32:22:9d:5d:5a:17:00:b6:1a:9f:
         2c:e0:16:1c:9c:a7:57:b9:7f:23:90:14:48:80:2d:24:a7:c5:
         f5:4f:28:47:7a:87:3c:10:77:f3:8b:74:f6:6c:18:50:0a:dd:
         1a:54:46:4b:24:46:dd:79:eb:70:ac:09:de:12:d0:84:f0:3e:
         04:04:bf:0c:32:c2:f5:68:fd:78:d3:49:3a:8f:12:02:3d:d4:
         c0:fd:41:11:f6:79:69:8b:37:41:48:17:a4:f3:a8:4a:22:dc:
         2e:4c:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:13:00 2025 by rpki-client