Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
File:                     BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer (raw, json)
Hash identifier:          ZBdtQEv8lUmtiMXD++K1hVdVHdjwG/mcbnvnPIURzAs=
Subject key identifier:   BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D8DCF6B88920B0EDE7B987E64294EFA156EEF6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 13 May 2023 14:23:45 +0000
Certificate not after:    Sat 11 May 2024 14:28:45 +0000
Subordinate resources:    AS: 263427
                          IP: 45.162.240.0/22
                          IP: 170.0.200.0/22
                          IP: 177.91.44.0/22
                          IP: 2804:119c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8d:cf:6b:88:92:0b:0e:de:7b:98:7e:64:29:4e:fa:15:6e:ef:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 13 14:23:45 2023 GMT
            Not After : May 11 14:28:45 2024 GMT
        Subject: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:a2:b6:0c:6e:00:53:b7:21:ee:5d:7b:3b:
                    51:a1:8a:76:7c:b9:68:2a:5e:b8:2d:1c:e6:bc:d0:
                    6e:53:d6:df:04:b6:2f:a6:3d:97:eb:0a:b3:cb:9a:
                    01:07:d2:1e:f0:ed:d0:f7:32:87:68:fe:a6:df:31:
                    d3:6e:d8:e4:21:ce:0a:09:11:a0:0b:dc:db:e1:d9:
                    04:ab:4c:b9:bf:d5:2a:d5:02:77:52:34:9d:5c:fc:
                    6d:5c:5a:79:8a:08:d1:ce:af:f9:01:fe:83:f8:f4:
                    f4:05:bc:ab:12:4b:ca:05:84:3e:2a:4b:b8:0a:7a:
                    79:80:ab:4b:c5:e3:0e:cf:a6:88:1a:5e:19:4c:6c:
                    24:0c:a1:a5:57:a2:d4:84:68:84:0e:6a:40:81:dd:
                    00:6d:a9:59:bf:5c:b5:2c:92:02:7c:70:ac:8e:f1:
                    d4:99:b3:86:1a:dd:b8:c2:b8:36:33:81:e8:18:f7:
                    3a:73:63:86:b1:f6:b0:63:b2:71:58:7f:cd:3d:f7:
                    da:fd:6f:e0:2c:c0:36:9c:df:4b:0f:bf:7b:59:27:
                    3e:48:6f:27:91:9a:28:1f:0c:84:27:3d:93:a8:49:
                    ae:45:05:a3:d6:3a:d1:5c:7e:4d:72:72:e3:9c:8a:
                    4d:34:c9:1c:bb:51:e9:41:9e:6d:f6:a9:fb:9d:89:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.240.0/22
                  170.0.200.0/22
                  177.91.44.0/22
                IPv6:
                  2804:119c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263427

    Signature Algorithm: sha256WithRSAEncryption
         4f:98:e1:6a:a8:29:df:9c:c3:08:b9:f2:15:34:ab:0a:fa:d4:
         39:3a:59:ce:9d:66:1d:71:5d:9c:30:34:51:ee:63:93:ed:60:
         18:7f:a6:b5:7b:b8:a7:d4:96:ec:56:89:80:9a:cb:45:26:b5:
         83:87:02:3f:ed:41:a0:6e:a0:30:b2:90:1d:86:24:66:80:2c:
         00:27:d5:3f:02:3a:6b:a1:e7:77:5f:62:73:3d:2f:33:19:1c:
         d4:26:c3:15:57:0b:28:6b:01:ba:6a:84:a1:74:cb:d8:7a:dd:
         13:c7:33:99:86:58:7a:29:ac:6b:dd:86:ff:3a:97:46:ad:e6:
         89:ec:48:e9:33:75:cb:36:2a:ec:6e:5a:4c:c0:8a:ff:f8:d0:
         47:1f:45:ce:67:9e:ab:37:df:ec:12:47:fc:a5:57:87:85:6c:
         2a:bd:82:24:7f:9a:ad:68:ca:e1:6f:2d:d8:8f:47:93:c9:8a:
         b4:ab:31:3d:6e:22:ac:e1:c0:c1:8f:c5:86:18:38:6a:3d:e4:
         0d:47:ee:ee:b0:6a:ba:f4:29:4b:c0:7a:15:1a:99:2f:1c:03:
         c7:e2:36:fd:6b:0c:57:f8:23:07:d8:a5:d9:eb:57:c1:43:c6:
         f2:30:14:c3:b7:7f:5a:88:74:55:4f:51:86:60:06:56:8c:36:
         64:a8:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org