Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer
File:                     BF74D0DF34465209B429D590F319EC137C0F9331.cer (raw, json)
Hash identifier:          6g9gKVXgrP3Z+1iXOGTR2S3arO0Itb/VeptHem8zKrg=
Subject key identifier:   BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E1B239646E310B25E4BFE85E94A50B04BAB764B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/BF74D0DF34465209B429D590F319EC137C0F9331.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 17:37:28 +0000
Certificate not after:    Thu 09 Jan 2025 17:42:28 +0000
Subordinate resources:    AS: 264998
                          IP: 170.84.156.0/22
                          IP: 2804:312c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1b:23:96:46:e3:10:b2:5e:4b:fe:85:e9:4a:50:b0:4b:ab:76:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 17:37:28 2024 GMT
            Not After : Jan  9 17:42:28 2025 GMT
        Subject: CN=BF74D0DF34465209B429D590F319EC137C0F9331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:89:5b:92:4d:57:b1:7f:0f:6d:4b:2d:c9:
                    ea:2e:66:ee:b4:b7:2d:15:70:00:39:a5:26:ad:ab:
                    3a:ad:89:ef:27:b5:b6:56:aa:95:49:ab:29:5e:c5:
                    aa:28:22:5b:75:0f:ac:ad:20:35:68:5d:01:da:ef:
                    90:85:d9:ef:9e:09:55:4b:05:d0:fd:84:00:2f:0d:
                    ac:44:d0:82:09:ef:33:49:90:bf:de:17:e3:18:59:
                    51:e9:49:7d:62:7f:9e:d7:e8:da:a0:32:67:f9:de:
                    19:4f:3c:b2:78:f5:d9:c4:1e:14:45:fc:65:6b:5e:
                    a3:8e:8c:31:60:0a:b9:81:ba:10:a6:5c:31:4a:db:
                    1e:ea:23:3e:73:7f:10:40:9c:3e:08:dd:c3:45:bd:
                    5b:1f:cc:a9:3e:e5:04:a4:12:fe:21:ca:c8:6e:c1:
                    7b:84:00:3b:df:45:18:ea:47:23:3b:50:bd:d1:c2:
                    f3:0a:25:c5:01:b1:f4:98:33:56:d0:cc:a3:50:63:
                    dd:5b:65:11:c5:6d:25:18:10:2b:e1:4e:b8:c3:73:
                    b3:9f:75:8f:28:1a:07:b9:fb:5a:bc:d0:79:7a:1a:
                    d2:29:cb:95:fa:12:08:a1:02:33:21:79:68:b7:27:
                    ea:18:d2:a6:e3:74:d9:e4:bb:bd:da:6a:dd:0c:80:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/BF74D0DF34465209B429D590F319EC137C0F9331.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.156.0/22
                IPv6:
                  2804:312c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264998

    Signature Algorithm: sha256WithRSAEncryption
         b3:9a:2f:83:10:ec:85:4c:29:6b:a3:0c:8c:90:d6:34:9f:e2:
         78:01:9b:01:b6:c3:ec:c0:a8:cc:d6:f7:3a:85:8b:f5:86:f7:
         52:40:d1:ed:a5:cc:cc:f0:d8:b2:36:3e:f3:76:ce:5f:a6:33:
         b0:58:90:7f:30:ab:b8:60:75:2c:b3:60:cf:a2:ac:4f:e2:be:
         81:b9:c6:4e:64:71:3c:98:ef:1d:63:50:df:60:56:3b:f1:70:
         b7:ed:d4:4c:d6:16:4d:d8:f5:63:25:dd:72:b8:47:55:dc:e5:
         9d:51:67:8e:14:c7:6b:1c:5a:c3:04:cc:fb:4f:18:15:1b:aa:
         fd:14:d9:a0:98:e4:87:7e:16:80:07:62:f2:c1:a7:45:f2:cb:
         4a:62:40:2b:ec:d8:9c:84:7a:33:85:60:65:d0:64:00:71:17:
         9a:9c:9b:44:4d:8b:e5:3c:34:32:95:c2:97:8c:04:86:36:80:
         23:7d:b2:79:38:81:9b:6b:42:12:e6:28:a2:ad:54:27:25:57:
         e8:17:25:8b:16:c5:d4:aa:27:5f:69:05:1e:07:cd:f0:d7:d6:
         a2:1d:eb:ed:2f:6a:79:ba:5f:3c:30:0d:9e:37:a9:c8:10:5b:
         c6:57:4d:82:22:61:83:17:c4:8a:30:6c:26:ba:cc:91:c3:84:
         3f:29:ec:83
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUHhsjlkbjELJeS/6F6UpQsEurdkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTExNzM3MjhaFw0yNTAxMDkxNzQyMjhaMDMxMTAvBgNV
BAMTKEJGNzREMERGMzQ0NjUyMDlCNDI5RDU5MEYzMTlFQzEzN0MwRjkzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfx4lbkk1XsX8PbUstyeouZu60
ty0VcAA5pSatqzqtie8ntbZWqpVJqylexaooIlt1D6ytIDVoXQHa75CF2e+eCVVL
BdD9hAAvDaxE0IIJ7zNJkL/eF+MYWVHpSX1if57X6NqgMmf53hlPPLJ49dnEHhRF
/GVrXqOOjDFgCrmBuhCmXDFK2x7qIz5zfxBAnD4I3cNFvVsfzKk+5QSkEv4hyshu
wXuEADvfRRjqRyM7UL3RwvMKJcUBsfSYM1bQzKNQY91bZRHFbSUYECvhTrjDc7Of
dY8oGge5+1q80Hl6GtIpy5X6EgihAjMheWi3J+oY0qbjdNnku73aat0MgHpbAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/dNDfNEZSCbQp
1ZDzGewTfA+TMTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HdEx4QkZ0QkhqTUpZTFVZUGFONFdLOUFVYkNzZktkU2tl
NnZGUDRZcld4WS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNr
ZTZ2RlA0WXJXeFkvMC9CRjc0RDBERjM0NDY1MjA5QjQyOUQ1OTBGMzE5RUMxMzdD
MEY5MzMxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqVJwwDQQCAAIwBwMF
ACgEMSwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAsmMA0GCSqGSIb3DQEBCwUA
A4IBAQCzmi+DEOyFTClrowyMkNY0n+J4AZsBtsPswKjM1vc6hYv1hvdSQNHtpczM
8NiyNj7zds5fpjOwWJB/MKu4YHUss2DPoqxP4r6BucZOZHE8mO8dY1DfYFY78XC3
7dRM1hZN2PVjJd1yuEdV3OWdUWeOFMdrHFrDBMz7TxgVG6r9FNmgmOSHfhaAB2Ly
wadF8stKYkAr7NichHozhWBl0GQAcReanJtETYvlPDQylcKXjASGNoAjfbJ5OIGb
a0IS5iiirVQnJVfoFyWLFsXUqidfaQUeB83w19aiHevtL2p5ul88MA2eN6nIEFvG
V02CImGDF8SKMGwmusyRw4Q/KeyD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org