Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.cer
File:                     BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.cer (raw, json)
Hash identifier:          N59gS5gScdhXIoFoTwSfRRXNo9O6thxBMuE1mnrwCcU=
Subject key identifier:   BF:16:DE:EF:D6:9A:72:FC:7C:AA:C9:CE:1B:19:0A:1D:D2:DC:E3:65
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       410CC2616C3AA229266299F64FEF2582117BC07B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 15:40:16 +0000
Certificate not after:    Fri 07 Feb 2025 15:45:16 +0000
Subordinate resources:    AS: 28605
                          IP: 179.127.112.0/22
                          IP: 201.20.144.0/20
                          IP: 2804:3c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0c:c2:61:6c:3a:a2:29:26:62:99:f6:4f:ef:25:82:11:7b:c0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 15:40:16 2024 GMT
            Not After : Feb  7 15:45:16 2025 GMT
        Subject: CN=BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:4f:cb:b2:ea:45:c9:3a:ac:80:f2:9e:33:
                    51:d3:f4:a0:31:07:8b:75:82:7c:77:3e:5f:76:e4:
                    3a:0c:4b:a3:71:5f:73:03:07:c8:e2:70:88:e1:59:
                    1e:4e:b8:4d:47:cf:da:a6:d0:10:0c:d0:31:28:c3:
                    31:ff:4f:36:0b:fe:2a:c7:b6:a9:c1:29:18:ea:33:
                    e0:9f:f9:d5:fe:16:2f:e1:51:b2:3c:19:f2:c5:b2:
                    b3:39:75:72:6c:63:51:0f:a0:ca:87:64:ee:7c:01:
                    f6:b9:4a:4b:87:73:f0:ed:db:b1:17:f6:1f:06:2d:
                    10:bd:c2:dd:63:17:2a:f3:93:38:ba:f0:fd:e4:36:
                    52:e4:06:ed:97:02:3b:68:c0:de:29:2f:eb:7d:5f:
                    ff:53:fc:0c:e1:4c:78:94:a8:3d:07:7f:c8:8f:ba:
                    e9:4c:f9:34:2f:0f:f9:29:14:45:d6:13:62:90:36:
                    2a:97:c5:3d:b7:77:2f:6e:5e:f5:9b:56:df:1f:7c:
                    40:ad:3e:5f:36:16:5e:bd:2c:ac:ae:80:77:9a:6f:
                    ea:81:7b:04:c1:1d:07:92:5b:44:99:6a:0b:56:78:
                    ee:a7:01:4d:95:c3:b5:83:92:f6:0d:73:2a:e0:98:
                    c3:93:3b:65:d0:a8:d4:12:a6:08:0b:0f:e3:76:0a:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:16:DE:EF:D6:9A:72:FC:7C:AA:C9:CE:1B:19:0A:1D:D2:DC:E3:65
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/BF16DEEFD69A72FC7CAAC9CE1B190A1DD2DCE365.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.112.0/22
                  201.20.144.0/20
                IPv6:
                  2804:3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28605

    Signature Algorithm: sha256WithRSAEncryption
         44:17:79:69:df:2c:8c:5b:fa:79:95:ad:d7:a6:25:e8:04:53:
         51:d7:6d:5d:d2:f7:a9:1a:31:19:55:22:dc:73:5b:ea:71:2d:
         c1:7e:35:f5:eb:df:b7:d9:81:cf:c1:8c:27:bc:03:18:b5:6c:
         8c:eb:75:26:3a:91:3a:06:c5:50:ff:9c:e8:0c:cf:10:57:df:
         c2:4a:01:82:d2:b8:c3:3c:b1:8f:cc:d7:d2:cd:eb:b2:91:c4:
         e9:ec:e1:25:46:09:fc:b0:53:be:84:d5:57:43:ae:ca:c3:4a:
         62:80:c9:c9:b2:bf:4f:3c:98:57:24:bb:e5:01:1a:79:bb:60:
         20:16:c4:96:f5:a7:d6:31:c8:98:a0:84:ea:ce:47:c2:16:ed:
         97:54:43:6a:a0:83:9b:5e:e8:68:23:e6:46:2e:83:bf:e3:00:
         c5:00:6e:22:5b:b0:06:4c:79:0c:e9:fd:d8:a9:4f:09:b2:a4:
         fd:54:c7:30:0b:94:64:d2:ab:a3:57:f4:50:93:69:70:3d:ef:
         a8:1d:f3:9d:93:18:6a:c8:d8:ca:28:5d:e1:63:c6:5f:b4:d4:
         d3:c4:fa:86:34:18:c8:f1:db:57:f2:60:b8:68:c4:ae:16:b6:
         a3:92:4b:34:c9:21:58:4c:73:25:36:92:e9:7c:cd:3e:6f:0a:
         eb:f8:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org