Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.cer
File:                     BF2434F6AFBB8BD8B67E22ECA836AE9865448230.cer (raw, json)
Hash identifier:          hTWEZlGs5GuE6EuenhJ2AZEzfEH1qBsnOf6Kfh/E0nQ=
Subject key identifier:   BF:24:34:F6:AF:BB:8B:D8:B6:7E:22:EC:A8:36:AE:98:65:44:82:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7223A8E08C80B3A7039C7CEDDE4738A8DD3CA2C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 12:45:42 +0000
Certificate not after:    Mon 25 Mar 2024 12:50:42 +0000
Subordinate resources:    AS: 267605
                          IP: 45.71.116.0/22
                          IP: 2804:4424::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:23:a8:e0:8c:80:b3:a7:03:9c:7c:ed:de:47:38:a8:dd:3c:a2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 12:45:42 2023 GMT
            Not After : Mar 25 12:50:42 2024 GMT
        Subject: CN=BF2434F6AFBB8BD8B67E22ECA836AE9865448230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:e3:b3:96:15:1c:58:3a:17:43:27:3d:66:
                    1b:8d:b7:e0:6f:7c:68:27:50:a9:22:9e:29:c1:61:
                    f8:b4:f5:47:e2:0f:dc:9f:96:bc:97:31:65:c3:cd:
                    00:83:3b:fe:fe:f1:8f:6b:1e:9d:e8:8f:f3:30:1a:
                    6a:15:68:6c:e9:5f:71:14:a0:1a:42:45:b6:11:1b:
                    28:9c:07:cd:eb:d0:dd:1e:d6:e9:e2:fb:2e:94:50:
                    35:63:14:29:ff:81:8a:46:c7:5f:77:17:d6:64:2e:
                    49:a7:44:0a:fa:df:f0:f5:9f:5d:b8:46:98:54:bb:
                    b4:48:18:10:a0:d3:25:b3:85:8d:ae:8a:eb:7c:86:
                    8f:a1:6e:c4:e2:0b:41:92:e7:f4:2d:fd:be:86:92:
                    6b:8c:6d:92:f3:f6:99:90:3e:55:21:f9:66:2c:c1:
                    78:15:a5:d9:5c:a9:e0:0a:24:d3:b4:5d:c6:fa:4e:
                    4e:dd:a5:31:aa:b6:d1:65:43:f8:06:6a:4b:68:dc:
                    3e:84:77:7b:b4:f4:a9:6a:99:c5:07:30:44:a9:bc:
                    14:84:d5:17:92:d6:aa:97:d7:37:29:03:d3:07:8b:
                    59:88:43:f1:c0:46:bf:ce:05:c4:ab:07:5b:2d:53:
                    3d:f0:77:e3:c7:4d:b8:c9:23:1d:ca:e4:46:24:17:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:24:34:F6:AF:BB:8B:D8:B6:7E:22:EC:A8:36:AE:98:65:44:82:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.116.0/22
                IPv6:
                  2804:4424::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267605

    Signature Algorithm: sha256WithRSAEncryption
         52:09:5b:3d:cb:12:4e:64:9c:c8:c4:87:3b:04:ae:4b:fc:2d:
         02:60:2e:34:89:b9:76:36:d7:31:c6:83:80:c8:41:f7:7d:2b:
         4a:38:94:3b:c0:1d:67:33:fd:31:7d:7c:e0:73:be:02:0a:5e:
         f4:81:a5:d5:65:da:bb:d4:a8:23:e6:d0:1c:e4:56:5b:b3:2d:
         e6:e7:b0:d0:85:d9:a7:09:58:1e:64:17:fb:d6:6d:ab:98:ab:
         b5:06:09:4a:dc:f2:30:02:8e:24:25:72:e0:43:8e:c3:59:c6:
         16:c3:43:b3:d2:b9:4f:f0:b8:00:dd:ba:bc:0c:cb:21:ee:ae:
         31:32:90:35:e3:f1:26:80:93:17:0a:59:b3:a5:4d:b7:4e:a3:
         fb:69:39:1c:2d:1f:cf:ff:84:ae:1c:2c:54:35:0f:6a:63:f6:
         e9:9e:0f:44:7a:d4:19:3a:54:7d:fd:04:42:dc:cc:ff:a7:aa:
         83:7c:94:e2:b7:b6:54:e1:3e:21:2a:74:dd:f8:17:57:43:8f:
         53:7e:8b:d7:bd:de:1c:2e:ea:f9:81:01:01:2b:c2:21:c8:68:
         30:59:e2:5f:51:70:14:71:a4:00:48:5a:d0:67:7c:29:43:73:
         e7:98:2e:87:8a:80:a4:07:06:61:f5:89:1c:22:45:d0:61:b8:
         2d:f8:81:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org