Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.cer
File:                     BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.cer (raw, json)
Hash identifier:          K7xB10Q1ZXhbpjD/ctEEMlBnKlg1svqJxu+doAei8hA=
Subject key identifier:   BF:4A:62:08:1D:DF:9D:BF:FD:D7:B8:42:8E:72:14:8E:DE:AC:DC:75
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7118B150EAE51F3AD8221C68A0F83A407D423CDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 18:03:57 +0000
Certificate not after:    Tue 23 Jul 2024 18:08:57 +0000
Subordinate resources:    AS: 52629
                          IP: 177.124.164.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:18:b1:50:ea:e5:1f:3a:d8:22:1c:68:a0:f8:3a:40:7d:42:3c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 18:03:57 2023 GMT
            Not After : Jul 23 18:08:57 2024 GMT
        Subject: CN=BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:d6:75:43:46:5a:22:f9:08:85:01:d4:5d:
                    29:c3:cb:76:d4:7a:05:fb:06:3e:2c:67:09:a0:6c:
                    aa:a9:ec:1c:50:54:38:3b:08:58:3f:41:19:7d:ef:
                    be:18:39:87:5e:09:c2:af:a4:93:ba:82:29:9f:62:
                    ea:8c:b2:a3:28:d0:6f:44:cb:a6:ca:c2:ee:93:15:
                    17:2c:1b:82:e4:f9:46:6d:2d:62:ec:d2:5b:ce:a1:
                    f3:a9:36:0e:1c:81:f2:f0:56:a9:64:87:49:53:6e:
                    bc:d1:e3:d8:32:86:65:29:49:e8:c3:30:3d:fc:00:
                    6a:ef:ea:f4:3f:d8:a8:d8:9f:bb:90:d0:84:53:7d:
                    c5:50:18:f6:93:8e:52:54:03:3f:0b:98:f7:e5:f5:
                    16:2e:74:62:52:9e:4b:d6:bb:a3:b1:da:65:1e:55:
                    e9:05:01:cd:92:96:b8:73:be:13:ad:80:e0:c4:c2:
                    eb:e2:5b:d7:a1:1a:3f:0e:68:8d:b1:31:ed:de:80:
                    65:10:0a:59:bc:77:0d:ea:6e:c7:a7:8d:49:06:bd:
                    f8:ef:4d:88:a0:e9:2a:b5:6d:bd:39:6f:0a:cf:2c:
                    ed:97:70:e4:f8:41:22:47:c8:ea:f6:87:00:df:ae:
                    e6:f7:48:f5:a2:ed:2b:5d:ba:0c:90:1b:50:3c:7e:
                    7a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:4A:62:08:1D:DF:9D:BF:FD:D7:B8:42:8E:72:14:8E:DE:AC:DC:75
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.164.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52629

    Signature Algorithm: sha256WithRSAEncryption
         09:38:1e:d6:a9:93:c1:46:b2:72:78:9f:25:d7:9f:b3:7e:46:
         19:d6:d1:10:56:64:4e:16:9e:32:ea:09:38:9c:76:2f:55:53:
         6e:26:3b:2e:99:6d:47:92:d1:38:fe:f9:d8:9e:a4:0e:62:c6:
         02:b5:0d:8b:9b:12:5a:d4:17:e3:74:81:7e:68:52:f6:30:2f:
         b7:52:54:64:0a:1b:3f:dc:b9:d3:df:4a:23:f4:61:c0:af:66:
         33:f4:35:1b:4c:47:b4:05:fb:38:37:31:02:1c:b6:42:8c:08:
         38:79:7c:bd:4b:18:51:58:38:30:ac:25:16:41:96:a9:73:c3:
         ea:ea:e4:83:11:11:64:c9:8a:d6:27:19:1c:0c:a2:67:e2:aa:
         d9:c2:6e:6b:15:2b:ee:37:aa:ed:a4:e1:2e:86:c7:e2:fe:e5:
         8a:71:a1:13:5b:96:6f:f3:68:b7:be:d5:59:34:1f:a8:0b:04:
         94:0e:8d:f1:a9:90:07:48:32:02:78:63:51:8e:75:77:cb:77:
         55:60:74:22:db:09:31:ed:86:06:3d:6a:92:4b:27:48:c7:c2:
         f0:9c:54:17:61:08:d9:15:2e:91:39:1b:0c:d3:c9:44:19:78:
         7b:24:91:e9:ec:6e:5d:27:8e:a9:4a:8b:d4:4b:06:e3:28:8d:
         b9:8b:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org