Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.cer
File:                     BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.cer (raw, json)
Hash identifier:          VmpszF+yjvD4GyoiA0UxUyUS788rrL7vkzAlnNrleR4=
Subject key identifier:   BF:7E:A7:36:40:E6:02:9F:6A:17:BE:AA:62:D4:4D:3E:AB:DA:4A:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53C2C728F82D0F777C73C534369D8710C76B99BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 23:32:26 +0000
Certificate not after:    Thu 13 Feb 2025 23:37:26 +0000
Subordinate resources:    AS: 267246
                          IP: 45.230.208.0/22
                          IP: 2804:4a88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c2:c7:28:f8:2d:0f:77:7c:73:c5:34:36:9d:87:10:c7:6b:99:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 23:32:26 2024 GMT
            Not After : Feb 13 23:37:26 2025 GMT
        Subject: CN=BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:85:4f:7b:6e:6c:7d:2a:e4:59:6f:a2:84:
                    42:a5:a2:e1:0b:3e:96:d9:75:18:50:91:e8:05:1b:
                    e9:48:15:8e:10:9b:c9:f1:52:db:bd:94:41:97:19:
                    ec:51:82:96:64:2c:f5:16:0e:44:92:35:31:a4:80:
                    30:97:71:8c:b3:4a:7b:b8:e8:37:d1:0b:6b:01:72:
                    43:6e:68:39:54:4d:da:b3:67:33:c2:ef:5e:e0:9c:
                    43:39:54:cc:36:21:bd:58:d2:dc:69:7b:81:c4:b2:
                    aa:52:0d:25:5f:45:e1:56:38:f4:20:61:f2:63:89:
                    4b:e6:2c:d6:3d:79:e9:52:12:cc:83:0a:97:74:7c:
                    88:84:f2:5d:8c:a5:80:c8:39:0c:e5:13:6d:82:57:
                    80:4a:fe:f3:56:ba:31:30:76:3d:e7:ee:e7:e9:d4:
                    e1:78:c8:eb:0f:76:2f:10:29:2d:b1:05:48:da:bc:
                    d6:2a:36:22:f2:33:5e:91:43:72:a1:54:b7:5c:48:
                    0d:06:aa:d7:43:d9:6e:b0:48:2d:00:28:39:15:05:
                    03:31:16:38:67:ea:06:f3:18:45:db:69:ff:39:91:
                    c3:c3:a9:46:5b:26:d2:f4:23:f4:e2:a8:c6:62:49:
                    5e:bb:ab:82:fd:e6:d9:f9:c4:21:58:60:b1:42:eb:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:7E:A7:36:40:E6:02:9F:6A:17:BE:AA:62:D4:4D:3E:AB:DA:4A:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.208.0/22
                IPv6:
                  2804:4a88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267246

    Signature Algorithm: sha256WithRSAEncryption
         af:c6:21:19:93:a6:f3:1f:c7:a9:3a:1e:16:0c:a1:4c:97:18:
         15:f0:b5:2b:cd:a8:39:fc:b3:1d:64:de:0b:a5:d0:44:42:69:
         e5:8c:81:79:a0:b6:33:e6:be:12:90:40:cb:69:cb:e3:1c:bd:
         c1:e3:44:27:63:a4:06:ac:81:a6:2d:c3:9a:02:05:ec:11:85:
         36:de:b0:87:53:77:ba:ab:0f:41:91:ce:01:8b:55:29:40:69:
         6a:0c:e9:0e:47:9c:73:d1:c4:1d:28:89:0d:e3:8a:4a:51:96:
         12:29:2e:be:fb:06:95:af:fa:9f:1f:f5:d0:de:66:2a:b3:12:
         50:de:e7:95:db:89:83:5c:c1:2e:2d:7f:b0:ba:cd:ea:7c:91:
         e2:a9:55:d0:e3:46:1d:50:2b:60:be:6c:5d:1a:fc:3b:0f:f5:
         ff:9b:e4:51:55:d4:79:8a:79:3a:cf:ce:98:7a:86:a2:78:ac:
         74:d8:66:76:a3:e1:f1:77:de:b0:6d:24:9e:af:d6:65:07:a7:
         88:23:ed:c1:4f:4a:d4:ee:5b:e9:a0:07:5b:e2:33:6d:17:18:
         ff:50:89:45:76:98:7d:8e:ee:2e:ed:59:36:95:2d:63:80:b9:
         e2:51:be:f3:62:d4:50:38:94:0e:d5:5f:26:49:7e:0f:7a:ec:
         61:e9:ab:8a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUU8LHKPgtD3d8c8U0Np2HEMdrmb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUyMzMyMjZaFw0yNTAyMTMyMzM3MjZaMDMxMTAvBgNV
BAMTKEJGN0VBNzM2NDBFNjAyOUY2QTE3QkVBQTYyRDQ0RDNFQUJEQTRBQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLdIVPe25sfSrkWW+ihEKlouEL
PpbZdRhQkegFG+lIFY4Qm8nxUtu9lEGXGexRgpZkLPUWDkSSNTGkgDCXcYyzSnu4
6DfRC2sBckNuaDlUTdqzZzPC717gnEM5VMw2Ib1Y0txpe4HEsqpSDSVfReFWOPQg
YfJjiUvmLNY9eelSEsyDCpd0fIiE8l2MpYDIOQzlE22CV4BK/vNWujEwdj3n7ufp
1OF4yOsPdi8QKS2xBUjavNYqNiLyM16RQ3KhVLdcSA0GqtdD2W6wSC0AKDkVBQMx
Fjhn6gbzGEXbaf85kcPDqUZbJtL0I/TiqMZiSV67q4L95tn5xCFYYLFC6zpVAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/fqc2QOYCn2oX
vqpi1E0+q9pKtTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KM1Z1NnFxN3pGYWdVMjJ5c210dUpCV3hUQTNOQk1vYzFl
OHF3Q2VZRXJvby8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSjNWdTZxcTd6RmFnVTIyeXNtdHVKQld4VEEzTkJNb2Mx
ZThxd0NlWUVyb28vMC9CRjdFQTczNjQwRTYwMjlGNkExN0JFQUE2MkQ0NEQzRUFC
REE0QUI1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5tAwDQQCAAIwBwMF
ACgESogwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBPuMA0GCSqGSIb3DQEBCwUA
A4IBAQCvxiEZk6bzH8epOh4WDKFMlxgV8LUrzag5/LMdZN4LpdBEQmnljIF5oLYz
5r4SkEDLacvjHL3B40QnY6QGrIGmLcOaAgXsEYU23rCHU3e6qw9Bkc4Bi1UpQGlq
DOkOR5xz0cQdKIkN44pKUZYSKS6++waVr/qfH/XQ3mYqsxJQ3ueV24mDXMEuLX+w
us3qfJHiqVXQ40YdUCtgvmxdGvw7D/X/m+RRVdR5ink6z86YeoaieKx02GZ2o+Hx
d96wbSSer9ZlB6eII+3BT0rU7lvpoAdb4jNtFxj/UIlFdph9ju4u7Vk2lS1jgLni
Ub7zYtRQOJQO1V8mSX4Peuxh6auK
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org