Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF0969A87A651DD5C1C8760D84A68C61AF655BC9.cer
File:                     BF0969A87A651DD5C1C8760D84A68C61AF655BC9.cer (raw, json)
Hash identifier:          x9/4o9C74vqinKuthBsAYWbmlYIhv19IVpZs9rcz1is=
Subject key identifier:   BF:09:69:A8:7A:65:1D:D5:C1:C8:76:0D:84:A6:8C:61:AF:65:5B:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D1EC172E544BA56F27C2E7F54AC1A25F2397B05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/BF0969A87A651DD5C1C8760D84A68C61AF655BC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 09:36:31 +0000
Certificate not after:    Tue 01 Oct 2024 09:41:31 +0000
Subordinate resources:    AS: 264046
                          IP: 143.137.216.0/22
                          IP: 2804:29f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1e:c1:72:e5:44:ba:56:f2:7c:2e:7f:54:ac:1a:25:f2:39:7b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  3 09:36:31 2023 GMT
            Not After : Oct  1 09:41:31 2024 GMT
        Subject: CN=BF0969A87A651DD5C1C8760D84A68C61AF655BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:71:45:07:46:3b:74:11:10:41:2b:84:72:
                    f9:83:35:1b:a2:c2:ca:88:62:a4:c4:aa:dd:f2:76:
                    39:9c:fd:64:74:2b:75:55:18:43:fd:2b:97:6d:c7:
                    17:e1:6c:e0:2f:1d:80:74:78:bd:54:a0:d5:9d:87:
                    5e:48:7a:f2:d7:76:f4:36:49:32:e4:1c:83:53:97:
                    78:94:f6:18:44:5d:f4:16:74:ee:b0:83:9e:1f:f0:
                    9f:bd:51:2e:a2:85:1b:bd:28:70:49:90:d7:56:54:
                    72:8f:00:6f:49:67:d6:af:f6:42:b6:4a:d6:54:3f:
                    a9:6c:47:36:4f:00:50:11:d1:ad:40:a4:d3:d0:f6:
                    4b:b7:ae:06:c6:88:e7:b6:83:0e:6d:4e:20:8b:0b:
                    d5:0c:d9:e3:b0:b3:e1:4e:e6:17:c4:ac:bd:ed:7a:
                    24:ac:28:cf:31:5c:26:8e:83:e7:64:be:3f:aa:de:
                    3d:3c:88:59:1f:0d:f7:ea:1e:2e:1a:1d:93:d0:3b:
                    da:d4:97:a0:e5:25:e7:cf:a7:57:08:92:c3:bd:e2:
                    a8:c8:ad:8c:03:a1:b9:ce:2f:a7:3b:80:df:1f:dd:
                    be:a2:49:36:7d:c4:fb:ab:db:78:e8:60:c2:36:24:
                    99:90:b0:aa:be:85:0a:0a:02:b9:3f:29:e5:b3:45:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:09:69:A8:7A:65:1D:D5:C1:C8:76:0D:84:A6:8C:61:AF:65:5B:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/BF0969A87A651DD5C1C8760D84A68C61AF655BC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.216.0/22
                IPv6:
                  2804:29f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264046

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:06:40:a9:2b:a4:37:8f:c5:77:87:4f:c9:c5:ac:ab:13:
         ae:e2:0f:f4:9f:07:fd:1e:e2:62:32:00:f5:33:0a:d0:af:de:
         96:87:44:a7:9a:21:64:cc:da:74:41:ff:ce:a0:e1:d1:68:98:
         fc:d0:de:22:df:8c:a9:e2:7f:72:9d:2b:c6:a6:64:5e:98:5e:
         77:b8:40:87:68:c2:13:df:f5:ad:71:89:ba:32:f3:86:04:fb:
         78:f7:bf:88:a4:00:b0:91:d1:d1:f7:80:b5:59:1f:a0:8a:b3:
         ec:67:4e:17:b3:18:cf:20:81:39:85:3e:79:fa:41:e9:98:ad:
         c4:25:25:e8:7d:cc:49:43:94:1e:8c:6e:b3:25:03:3d:ca:33:
         c3:09:30:85:1f:ee:2e:37:ab:10:41:ac:30:58:ea:b5:db:71:
         17:4d:d6:4e:90:6a:cc:54:20:9a:34:9a:b7:a3:15:73:57:c8:
         f3:6c:87:6f:3c:4c:cf:74:f3:48:6f:c8:09:4e:71:5a:c5:6a:
         56:08:f3:a2:f2:e3:0a:ad:81:c8:27:7c:f5:f5:30:61:c1:e3:
         ff:cf:be:a1:fc:b9:a8:41:5d:d5:b6:7a:55:64:37:6f:2d:11:
         7b:f7:99:94:c1:01:fb:16:47:f7:1b:80:95:c2:25:b8:12:1d:
         a2:9c:21:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org