Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BFA6780B802891D58966074FB59B9B2AFFE85C29.cer
File:                     BFA6780B802891D58966074FB59B9B2AFFE85C29.cer (raw, json)
Hash identifier:          58GMd08GVs7jTpULPk0BUtLOLsXo3tA2pm+7hT1ENFQ=
Subject key identifier:   BF:A6:78:0B:80:28:91:D5:89:66:07:4F:B5:9B:9B:2A:FF:E8:5C:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A94BDDE60B95AC7881F144D1DFE32EFFC3B036A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/BFA6780B802891D58966074FB59B9B2AFFE85C29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Nov 2022 11:34:46 +0000
Certificate not after:    Mon 06 Nov 2023 11:39:46 +0000
Subordinate resources:    AS: 264086
                          IP: 143.208.24.0/22
                          IP: 2804:2aa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:94:bd:de:60:b9:5a:c7:88:1f:14:4d:1d:fe:32:ef:fc:3b:03:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 11:34:46 2022 GMT
            Not After : Nov  6 11:39:46 2023 GMT
        Subject: CN=BFA6780B802891D58966074FB59B9B2AFFE85C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:e8:f1:d6:15:fb:53:3b:08:55:6b:08:47:
                    32:94:b0:35:d9:00:ee:75:f4:27:c7:bf:4a:54:41:
                    10:aa:a8:8c:a7:3e:48:21:11:9d:af:27:5b:d1:d4:
                    6e:8a:04:3e:13:43:54:97:0f:5f:85:2d:4c:88:29:
                    d2:5c:ee:02:72:59:eb:fc:64:8e:d4:76:ce:78:76:
                    f2:db:30:af:df:4b:da:e4:59:d0:40:ef:5b:46:17:
                    fe:ed:fb:ba:88:59:e8:44:08:a8:fd:d7:54:33:78:
                    6a:21:68:29:79:9d:6e:3a:b4:98:31:97:83:9f:b1:
                    d0:a1:66:92:54:32:4b:9d:b2:dd:bb:c2:be:30:52:
                    cd:b6:c0:41:02:32:4d:f8:fb:53:b0:78:ea:62:45:
                    0f:1b:bc:e8:fe:23:6e:c3:b6:dd:65:94:77:1e:12:
                    23:ec:64:9d:3e:c6:a8:1b:9a:fd:c1:13:b1:14:c6:
                    79:4d:91:4c:b0:38:4a:74:d9:47:0a:cb:ee:23:95:
                    5e:f4:01:78:4c:42:d9:64:24:0b:2c:2a:df:7d:8f:
                    3c:e7:90:b8:7e:20:45:72:3b:2c:b9:e1:22:fc:63:
                    8a:1b:ff:0e:66:76:f7:64:17:8b:bc:09:a3:1f:b9:
                    ad:de:db:7f:7a:ca:c7:b6:bd:b8:ff:a1:f5:37:d9:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:A6:78:0B:80:28:91:D5:89:66:07:4F:B5:9B:9B:2A:FF:E8:5C:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/BFA6780B802891D58966074FB59B9B2AFFE85C29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.24.0/22
                IPv6:
                  2804:2aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264086

    Signature Algorithm: sha256WithRSAEncryption
         56:48:ac:6e:56:47:19:77:92:d2:23:d4:4c:d2:8e:96:0f:57:
         76:aa:0b:7f:4d:62:37:09:e2:0b:61:b7:8a:11:28:d9:5d:0f:
         16:96:83:9a:34:d3:cb:d4:8b:92:77:9f:6e:85:c6:e4:b8:d4:
         b8:a7:66:85:72:80:1e:1d:4e:3f:77:55:e7:02:b5:1b:2d:31:
         2e:14:17:02:7d:f7:5a:cb:7c:88:9b:77:3f:05:1c:cd:df:c3:
         0e:10:af:c4:6d:69:f6:c7:eb:1a:08:3c:89:eb:31:8b:a5:cd:
         76:47:2b:ae:a1:9a:30:06:44:01:69:10:3b:29:77:53:84:b9:
         cb:9a:05:d9:f4:12:1a:71:79:14:18:29:96:82:4e:b8:ec:0c:
         10:a7:ba:9a:8d:a5:2d:39:2c:8d:72:56:cb:98:47:7c:b3:73:
         03:c7:f3:26:7e:fc:2e:6a:1e:56:09:dd:c9:11:2b:f1:e6:d0:
         d6:e4:6a:68:b8:86:4d:61:3e:94:c3:29:41:8d:c6:fb:c3:20:
         e8:41:9f:bd:17:20:fd:88:46:56:6b:fe:b8:b5:6c:57:a3:23:
         a3:38:16:e9:35:23:88:a1:9a:17:21:cc:6d:5d:5d:27:a8:ab:
         49:c7:00:49:fa:ef:5a:72:df:96:78:b1:b4:cf:64:4d:51:00:
         01:eb:35:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org