Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer
File:                     BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer (raw, json)
Hash identifier:          P0LBRExWzSQJ8bY9n6BuvLh9pjY9NsOHdFNDQJTbrrU=
Subject key identifier:   BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C8180EC126FB542F577AB3E007C987C26914611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:08 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:08 +0000
Subordinate resources:    AS: 267622
                          IP: 45.71.168.0/22
                          IP: 2804:4448::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:81:80:ec:12:6f:b5:42:f5:77:ab:3e:00:7c:98:7c:26:91:46:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:08 2023 GMT
            Not After : Aug 10 02:59:08 2024 GMT
        Subject: CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:a7:ee:70:d9:71:a8:dd:66:77:09:b1:4e:
                    4e:45:d0:46:1c:55:1b:cc:f7:79:35:26:98:18:b8:
                    f9:42:9e:f9:be:c3:71:39:b3:95:bf:42:2f:df:ab:
                    d6:42:b9:1e:f3:3a:f3:5b:b0:79:8d:5d:19:79:1e:
                    20:43:43:b7:15:f3:da:61:88:98:0e:a6:45:32:fc:
                    91:27:b8:56:c6:29:19:d3:dc:34:4f:3a:a9:a7:75:
                    3c:6d:5e:78:98:77:09:76:c9:a1:1d:81:e3:46:0d:
                    da:58:c7:f0:a6:17:f6:35:22:71:1a:6f:fc:aa:c8:
                    57:a4:32:e3:7b:a8:d8:8f:79:0a:88:9c:eb:7b:58:
                    83:30:0c:63:b7:79:6c:4d:23:6f:30:2e:c7:d7:16:
                    89:2c:86:50:4a:ca:02:8a:cb:91:80:64:d1:8c:5d:
                    32:e6:5e:ec:18:d6:bf:f1:67:38:59:bc:2a:99:7d:
                    04:05:5e:13:ad:a6:e7:33:f1:1a:ce:18:4d:1d:1c:
                    ec:e3:32:02:1c:1c:8b:86:1f:02:ce:8c:54:7e:ed:
                    62:cf:b7:99:7b:6c:8a:f6:88:e6:7a:af:a1:32:85:
                    82:33:9f:99:4a:2d:9c:c7:45:b9:89:ce:d6:1b:73:
                    ab:d5:3a:68:6a:22:1a:f0:79:72:98:3f:7d:b2:bb:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.168.0/22
                IPv6:
                  2804:4448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267622

    Signature Algorithm: sha256WithRSAEncryption
         b5:0a:05:4c:3a:69:b0:55:65:8d:5c:e9:4d:0d:e0:be:2b:cf:
         d1:71:ba:a8:ec:c0:5e:26:54:8c:55:70:8e:0d:03:eb:ee:dd:
         18:d3:d3:6f:a2:63:0f:21:bb:c0:47:a6:30:49:59:c0:87:f9:
         39:ce:f1:16:fb:66:c7:ec:a8:42:ae:54:77:7d:fc:e6:48:29:
         e0:6b:f3:ed:ef:ac:8d:bb:3a:ff:9a:8d:4b:41:4e:d1:1d:c9:
         dc:69:1b:7e:6e:ad:27:eb:ca:3e:8b:85:4b:44:a9:ac:25:47:
         6d:4b:c9:42:0b:b0:63:11:fd:26:ca:05:90:17:f9:a1:33:10:
         97:80:31:6d:30:73:bf:eb:2b:fe:c6:c1:3a:3a:78:5c:84:3c:
         b4:90:5b:e9:5c:c3:d4:9b:17:5f:9c:d5:e6:b0:43:96:b7:7f:
         e6:0f:16:6f:7b:6a:23:56:e3:3d:eb:d8:b4:5c:1c:a3:f8:5a:
         8e:c3:11:2d:ea:c1:fd:a7:b2:65:be:82:33:ab:13:8b:bb:6b:
         fb:98:d4:3a:92:59:de:00:21:38:b9:29:fb:de:2a:06:ce:e0:
         d0:b9:c9:60:d4:8c:07:dd:f7:25:79:f3:c3:b5:05:c3:43:e7:
         14:72:1d:9d:80:7a:2d:ad:17:85:3f:a4:f0:b5:74:b6:13:75:
         25:73:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org