Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
File:                     BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer (raw, json)
Hash identifier:          3hfmnMeZSx+bvW/wNEJLW1Lwk57Q/Ir/lKyAzW31G3c=
Subject key identifier:   BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6ECBA6F1AC61387A08BE220426CCA0F68073BBCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 12:28:21 +0000
Certificate not after:    Thu 24 Oct 2024 12:33:21 +0000
Subordinate resources:    AS: 270956
                          IP: 131.221.76.0/22
                          IP: 2804:7410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cb:a6:f1:ac:61:38:7a:08:be:22:04:26:cc:a0:f6:80:73:bb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 12:28:21 2023 GMT
            Not After : Oct 24 12:33:21 2024 GMT
        Subject: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:b0:a6:11:26:bd:18:85:8d:57:01:57:de:
                    90:b4:40:a5:2c:59:8e:dd:44:90:f5:a7:4e:e5:ab:
                    4f:9b:73:21:c2:8c:4d:00:e1:ee:24:04:21:da:4f:
                    57:c3:8e:c4:69:27:0c:0e:00:48:64:c0:4b:be:dc:
                    6d:5c:7d:83:63:9f:4d:8d:ed:34:fa:bb:19:f4:9e:
                    65:55:51:82:42:ea:02:23:60:13:b2:fa:d0:34:5a:
                    e0:9c:3e:8d:03:86:83:2c:2f:34:07:10:8d:38:93:
                    31:50:bd:11:19:bb:cf:d3:06:85:f4:48:eb:3d:d2:
                    7f:c8:96:4e:67:db:56:5d:d8:2e:67:e4:14:53:26:
                    36:ca:f0:d6:06:95:04:6e:24:25:72:ff:b0:86:03:
                    61:46:e7:1e:cc:9f:fd:2d:8e:e1:5f:ae:0f:75:9a:
                    f2:b6:ea:05:2f:06:e9:ce:35:99:9e:be:b2:c3:e9:
                    12:a6:72:16:4d:9f:57:1e:13:5c:04:39:3c:fb:3c:
                    de:f1:38:fa:7b:3d:e3:05:24:2f:ad:be:68:7c:6d:
                    eb:a3:9c:aa:25:35:96:bf:10:c7:eb:66:eb:e9:ba:
                    c7:cd:3f:98:6b:81:08:d0:e6:a8:6d:fa:4e:bc:b2:
                    e7:e3:b8:89:2e:4a:b0:17:99:cc:13:52:d0:8b:f5:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/22
                IPv6:
                  2804:7410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270956

    Signature Algorithm: sha256WithRSAEncryption
         a8:05:4b:6c:32:de:71:2c:a0:df:c1:6f:4a:c8:e8:97:41:d7:
         2d:3f:42:cf:29:05:e5:62:27:d1:2c:ca:1e:25:4c:b6:12:66:
         2e:42:26:e3:45:96:83:de:40:54:e4:cb:cf:27:20:ab:d3:00:
         1f:a4:b9:3b:c4:e3:29:11:fd:cc:e9:07:da:bf:af:f6:89:31:
         6c:48:0f:ef:8b:f5:95:47:98:b7:22:5d:5d:32:22:a8:8d:c0:
         f7:64:7d:c5:af:11:aa:0a:10:71:5e:5d:4d:54:b3:8c:96:b1:
         b0:ad:68:de:ee:48:2d:45:eb:fc:eb:53:04:5a:61:20:3e:15:
         ea:16:91:4b:b7:aa:71:8a:53:1f:79:51:a8:d9:db:a2:b0:c1:
         a5:ec:b9:83:e4:85:b7:08:1e:36:f7:11:98:af:ab:f4:fc:c1:
         4d:8e:f8:b5:d1:b1:92:7b:f1:96:8c:61:11:c7:8f:b4:53:99:
         e8:1d:6b:2d:4b:28:8a:83:f7:56:37:47:30:93:44:3f:e2:7b:
         52:8d:aa:fa:8b:18:67:46:15:8c:83:cd:76:04:c8:8c:d6:77:
         c6:51:ce:99:b5:61:e4:bf:41:ee:bf:30:18:1a:3a:ed:b5:3f:
         94:bb:98:8d:d2:e7:3e:e7:81:11:15:e6:75:8d:be:7d:a2:fa:
         49:87:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org