Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer
File:                     BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer (raw, json)
Hash identifier:          6n8LpOvfmKv5hmAIbPkit/g0jumWX2PjcgD4GJO32Ec=
Subject key identifier:   BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AE9081471F75E893CE2CFB8F026A0A6877B1EF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 03:20:49 +0000
Certificate not after:    Sat 16 Nov 2024 03:25:49 +0000
Subordinate resources:    AS: 262502
                          IP: 167.250.80.0/22
                          IP: 177.66.184.0/21
                          IP: 190.7.176.0/20
                          IP: 2804:18a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e9:08:14:71:f7:5e:89:3c:e2:cf:b8:f0:26:a0:a6:87:7b:1e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 03:20:49 2023 GMT
            Not After : Nov 16 03:25:49 2024 GMT
        Subject: CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:38:47:8d:1d:96:fb:8e:e2:7b:5d:b7:57:
                    f4:51:4d:e5:06:97:fe:ec:d1:33:16:b3:fa:ed:c0:
                    62:70:83:35:88:40:5f:8f:1c:7f:d4:45:f9:d7:c8:
                    6d:c6:93:2f:9b:35:f4:57:8c:e9:9a:5e:d7:d9:71:
                    ef:3f:c5:4e:74:69:94:0e:d2:c0:0a:43:b9:7f:a9:
                    cf:3f:dc:eb:d4:77:a0:53:41:4d:af:90:e8:b2:3f:
                    bb:70:bf:81:8c:8d:b5:8a:2b:5a:2c:54:7f:3e:37:
                    82:ce:c8:65:bb:4a:6f:99:6f:d3:8c:8b:5a:b6:ae:
                    3b:2a:d6:62:fa:3c:d5:c9:2a:a5:fc:9d:17:a0:55:
                    4b:ab:5f:ea:36:d3:c0:0a:ce:52:f6:91:5f:3d:8b:
                    55:40:10:68:dc:ce:7e:bb:6e:b8:d8:29:c9:7c:81:
                    dd:c2:d0:e9:a3:15:b8:e9:06:cb:49:62:a1:28:04:
                    10:12:bb:9e:87:c9:16:f1:3b:77:19:fc:95:9d:b6:
                    1d:26:f9:15:8d:b7:8c:02:0b:2f:02:24:9b:40:5b:
                    95:a9:21:67:f9:d6:f0:1d:9a:7b:15:0a:52:1e:d7:
                    c9:e1:da:69:73:bd:56:09:0a:80:51:8b:70:e8:32:
                    96:58:d4:08:4b:d9:96:df:75:82:8f:5f:c2:60:e7:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.80.0/22
                  177.66.184.0/21
                  190.7.176.0/20
                IPv6:
                  2804:18a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262502

    Signature Algorithm: sha256WithRSAEncryption
         b0:43:6a:0a:8b:62:08:fe:57:34:e4:7b:a5:75:e8:f3:f5:20:
         7c:9b:3c:81:de:a4:27:ee:f4:6d:5a:1e:45:9e:61:04:b6:63:
         8f:41:d4:e7:72:64:c5:cf:0c:f5:43:c9:73:84:62:ec:4b:87:
         b2:88:ab:4d:73:76:bc:98:6a:c0:d7:d9:94:3a:af:43:23:79:
         aa:1b:df:83:ee:40:64:b7:3c:cf:83:14:6b:cf:54:be:39:c2:
         b1:20:70:2d:ec:f3:d4:af:15:3f:60:46:76:f7:72:e0:84:67:
         0c:9b:16:8c:8b:49:d5:d7:80:66:04:af:0d:a8:52:34:2f:cc:
         50:92:8e:47:44:26:b5:01:2a:b5:24:ac:05:72:26:64:58:9f:
         5a:b2:82:68:ed:c4:b4:c7:8f:b3:9f:67:e9:bf:a7:07:12:4b:
         e0:73:0f:c0:b8:77:5f:f5:0f:a1:85:66:89:3b:89:93:ce:d4:
         6d:36:ad:54:58:da:30:1c:8b:7c:f7:cf:d9:c9:54:17:c1:8c:
         90:a8:2f:aa:3a:ae:47:44:b0:26:6d:53:cb:e5:ce:f5:80:75:
         60:32:3d:eb:b3:35:ba:30:1d:49:0e:0c:b6:10:d2:ef:4a:ce:
         cf:85:db:b9:90:01:40:bb:6a:ae:df:3c:e3:0d:c1:0b:0f:62:
         0f:3e:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org