Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.cer
File:                     BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.cer (raw, json)
Hash identifier:          iaPB/LoROQF2nDrL0v0KHgt1CozBD1OhPlU58IoqKS4=
Subject key identifier:   BF:45:2E:56:56:E5:58:04:F6:9F:C4:B6:02:5C:FD:C4:F4:BC:8E:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A1C253BCF6B79269E32B4F04A243EA463AEA370
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 15:43:56 +0000
Certificate not after:    Wed 18 Dec 2024 15:48:56 +0000
Subordinate resources:    AS: 266314
                          IP: 170.238.52.0/22
                          IP: 2804:35e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:25:3b:cf:6b:79:26:9e:32:b4:f0:4a:24:3e:a4:63:ae:a3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 15:43:56 2023 GMT
            Not After : Dec 18 15:48:56 2024 GMT
        Subject: CN=BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:ac:48:84:d4:50:a6:e5:f2:9e:85:7f:b5:
                    c1:99:41:78:af:19:6a:7b:87:76:cb:6e:e6:6d:61:
                    7a:b3:97:0c:ae:0a:a6:c0:c6:1b:33:be:75:68:a6:
                    61:f9:26:2c:87:b7:18:61:d3:b0:b9:34:3c:34:51:
                    1a:5a:2b:10:6b:84:cf:0c:8a:51:1c:18:50:80:b6:
                    c9:95:af:5b:5a:cc:f0:ac:59:79:10:c5:4d:d3:8d:
                    34:31:64:b5:fa:ea:b8:12:6e:1f:86:77:cf:6e:84:
                    4e:79:73:e0:48:fa:f7:d2:49:1c:9e:9e:63:71:67:
                    0a:b8:d1:f3:34:2e:cc:c9:a5:ad:ab:e1:0e:6f:21:
                    31:f2:38:d0:71:9c:9c:b5:1d:28:92:9f:9b:69:8c:
                    15:85:00:2d:7c:e9:8e:f3:90:de:45:db:a6:70:7e:
                    e4:86:f1:53:78:7b:00:c7:a1:37:fc:06:d6:02:3c:
                    69:6b:a6:f3:8b:97:2c:8f:d9:64:85:94:8b:70:4a:
                    22:34:04:23:9d:72:24:69:bd:30:c6:e9:7b:07:35:
                    83:82:de:e7:de:61:b6:f3:e2:f7:a9:c9:54:e1:c1:
                    5b:a8:c5:c1:c2:6e:73:22:4d:21:d4:ca:81:33:a9:
                    f1:80:17:e7:17:77:72:e7:ac:49:ea:cb:d2:cd:0a:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:45:2E:56:56:E5:58:04:F6:9F:C4:B6:02:5C:FD:C4:F4:BC:8E:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/0/BF452E5656E55804F69FC4B6025CFDC4F4BC8EF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.52.0/22
                IPv6:
                  2804:35e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266314

    Signature Algorithm: sha256WithRSAEncryption
         1a:1b:0a:7c:09:d3:14:09:43:2a:be:fd:fa:ac:b9:76:4c:c8:
         6d:7d:d6:ae:32:d1:eb:46:ff:92:90:65:07:d6:94:06:14:fe:
         89:2a:b3:2b:4d:5a:66:7e:6b:ae:ce:33:32:5a:af:14:45:b3:
         2f:3b:71:f2:64:fc:66:e0:10:17:a8:ba:cc:b7:59:bf:17:e6:
         14:36:d1:a6:c2:84:53:a1:c8:50:05:50:1b:42:c6:4b:f6:72:
         08:fa:fb:c5:ee:5c:c5:aa:9a:98:a3:6d:3c:46:89:6e:80:8c:
         d0:1f:a3:de:a4:08:8d:83:45:b4:03:41:4e:83:52:02:92:2a:
         05:65:4e:65:74:25:4a:e3:21:c2:b4:52:4e:cb:00:3e:ba:5d:
         97:a4:45:92:bb:12:c5:d9:73:e6:6f:67:d8:0f:26:09:b0:3b:
         a4:62:86:98:1e:0c:f4:62:ff:a6:61:33:0f:2e:dc:4c:bd:f4:
         aa:cb:b6:49:31:b7:78:55:8f:2d:31:00:0a:de:dc:c2:f3:5f:
         80:78:31:ca:55:d0:a7:22:b3:d8:c1:35:be:d4:4b:17:90:06:
         c6:14:34:d9:96:dc:ca:55:d7:9b:ad:73:ff:72:cd:fe:8a:a9:
         b8:03:a9:60:63:ea:bb:fc:58:03:51:4b:4c:42:f1:63:97:85:
         13:d1:d0:8c
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUGhwlO89reSaeMrTwSiQ+pGOuo3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjAxNTQzNTZaFw0yNDEyMTgxNTQ4NTZaMDMxMTAvBgNV
BAMTKEJGNDUyRTU2NTZFNTU4MDRGNjlGQzRCNjAyNUNGREM0RjRCQzhFRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSKxIhNRQpuXynoV/tcGZQXiv
GWp7h3bLbuZtYXqzlwyuCqbAxhszvnVopmH5JiyHtxhh07C5NDw0URpaKxBrhM8M
ilEcGFCAtsmVr1tazPCsWXkQxU3TjTQxZLX66rgSbh+Gd89uhE55c+BI+vfSSRye
nmNxZwq40fM0LszJpa2r4Q5vITHyONBxnJy1HSiSn5tpjBWFAC186Y7zkN5F26Zw
fuSG8VN4ewDHoTf8BtYCPGlrpvOLlyyP2WSFlItwSiI0BCOdciRpvTDG6XsHNYOC
3ufeYbbz4vepyVThwVuoxcHCbnMiTSHUyoEzqfGAF+cXd3LnrEnqy9LNCqIRAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/RS5WVuVYBPaf
xLYCXP3E9LyO8jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FQkwzUjVIZHpkbXY1NXAybWVDc2JNQ0ZrUE5zdWJFVkJ4
aWtBZmV2Rm83dC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FQkwzUjVIZHpkbXY1NXAybWVDc2JNQ0ZrUE5zdWJFVkJ4
aWtBZmV2Rm83dC8wL0JGNDUyRTU2NTZFNTU4MDRGNjlGQzRCNjAyNUNGREM0RjRC
QzhFRjIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqruNDANBAIAAjAHAwUA
KAQ16DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEEowDQYJKoZIhvcNAQELBQAD
ggEBABobCnwJ0xQJQyq+/fqsuXZMyG191q4y0etG/5KQZQfWlAYU/okqsytNWmZ+
a67OMzJarxRFsy87cfJk/GbgEBeousy3Wb8X5hQ20abChFOhyFAFUBtCxkv2cgj6
+8XuXMWqmpijbTxGiW6AjNAfo96kCI2DRbQDQU6DUgKSKgVlTmV0JUrjIcK0Uk7L
AD66XZekRZK7EsXZc+ZvZ9gPJgmwO6RihpgeDPRi/6ZhMw8u3Ey99KrLtkkxt3hV
jy0xAAre3MLzX4B4McpV0Kcis9jBNb7USxeQBsYUNNmW3MpV15utc/9yzf6KqbgD
qWBj6rv8WANRS0xC8WOXhRPR0Iw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org