Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
File:                     BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer (raw, json)
Hash identifier:          BldknPWSSr29tY7zSny7C3USHbvFTM3aRiit5YkbHn8=
Subject key identifier:   BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       272319804C58CDFF3DBE055D128AB996BD04132B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 21:24:08 +0000
Certificate not after:    Wed 29 Jan 2025 21:29:08 +0000
Subordinate resources:    AS: 266152
                          IP: 45.6.36.0/22
                          IP: 2804:3b7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:23:19:80:4c:58:cd:ff:3d:be:05:5d:12:8a:b9:96:bd:04:13:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 21:24:08 2024 GMT
            Not After : Jan 29 21:29:08 2025 GMT
        Subject: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:fb:36:6b:16:e4:eb:ab:d9:49:b0:c7:e8:
                    19:12:30:39:45:1d:9e:80:af:9c:06:89:25:86:db:
                    c8:60:16:4a:92:38:c2:41:7b:33:9e:32:98:73:2e:
                    40:18:54:a3:01:88:06:94:ae:6e:38:56:49:84:cd:
                    14:1f:e3:1d:8e:43:4e:6e:4e:be:76:2b:f5:06:68:
                    41:eb:a4:99:13:41:86:e2:36:75:33:a8:fc:d0:e5:
                    b7:01:67:b7:a6:05:d6:d3:76:7f:38:71:03:7f:71:
                    03:0c:a1:4c:a0:ad:d5:95:12:41:b4:ef:48:da:c4:
                    68:39:f5:15:27:f8:ce:8b:f6:14:9c:25:1e:60:0a:
                    8c:e2:f7:2a:f0:13:19:ea:ea:05:14:03:54:23:3d:
                    2b:cc:6b:a7:5b:27:2d:77:c5:b0:8b:56:d9:48:af:
                    8a:dc:ca:1c:50:00:78:65:47:03:37:dd:09:49:ec:
                    5b:2e:cf:53:e6:a5:d1:89:6a:ca:5e:e5:03:0e:ec:
                    7d:59:30:05:b4:63:e6:6c:f8:32:0b:02:22:dd:90:
                    f9:17:ef:5b:37:fc:53:80:a2:24:1d:2e:69:0b:fc:
                    d5:44:11:f8:c9:5d:e5:2d:43:c4:9d:8b:a7:7c:79:
                    2a:58:5d:9d:28:0f:3e:da:80:51:99:aa:f6:73:18:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.36.0/22
                IPv6:
                  2804:3b7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266152

    Signature Algorithm: sha256WithRSAEncryption
         8d:c7:b0:12:9e:db:a0:1b:71:dd:50:64:f9:90:98:2e:65:00:
         86:79:4a:10:59:72:92:5a:f1:da:de:a8:83:a0:25:cb:94:06:
         26:c5:34:f3:74:95:f0:c0:6e:e6:c7:c4:cf:a2:73:53:71:c1:
         cd:87:a0:ba:79:43:2a:00:6d:2e:2c:37:1a:ee:15:47:d3:f6:
         e5:6b:60:be:c4:02:77:60:9b:8d:17:77:39:6a:d5:ce:15:2c:
         50:0b:7b:18:98:f5:2c:f7:53:cb:bf:c5:26:23:14:17:68:e6:
         f5:1c:c0:ed:47:38:33:48:f2:06:14:ba:9a:74:d0:00:2a:30:
         cd:00:05:03:b2:86:92:78:ae:18:40:94:06:03:20:cf:35:b5:
         ca:1e:40:1b:6e:a7:06:83:e0:42:c1:49:f6:ef:42:3b:0e:b3:
         36:94:30:02:26:4e:3c:74:13:94:6b:ae:8f:3b:b5:c3:e5:1a:
         92:f7:b4:f2:93:b2:dd:a7:1f:45:00:fe:29:79:37:b1:ea:2b:
         5a:24:db:d5:73:d4:4e:2a:18:35:19:e8:99:14:e3:4f:96:f3:
         bd:6e:8e:70:56:69:8c:b6:f7:a7:22:95:1c:2b:8c:94:83:e1:
         44:5d:76:ab:e1:15:62:8c:0b:18:fb:fe:42:1d:01:09:b6:17:
         a1:bc:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 12:26:51 2025 by rpki-client