Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BFE3F66A397CD33566E464F94E92472FC3777480.cer
File:                     BFE3F66A397CD33566E464F94E92472FC3777480.cer (raw, json)
Hash identifier:          0amvpJmGNGZzIxFjywhR9Vy/fiIAkohFShdH8Vk1n34=
Subject key identifier:   BF:E3:F6:6A:39:7C:D3:35:66:E4:64:F9:4E:92:47:2F:C3:77:74:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EF860CAFE0497C96094610A9FBCAADB8F01E552
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/BFE3F66A397CD33566E464F94E92472FC3777480.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 17:32:03 +0000
Certificate not after:    Tue 18 Feb 2025 17:37:03 +0000
Subordinate resources:    AS: 272238
                          IP: 2804:8414::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f8:60:ca:fe:04:97:c9:60:94:61:0a:9f:bc:aa:db:8f:01:e5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 17:32:03 2024 GMT
            Not After : Feb 18 17:37:03 2025 GMT
        Subject: CN=BFE3F66A397CD33566E464F94E92472FC3777480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:e0:44:e4:83:cf:5d:f3:1b:80:ae:3a:ae:
                    ae:76:8e:d0:e3:dc:d5:0e:d8:a5:5e:fd:cf:d7:8f:
                    6b:ed:4f:57:68:61:db:f0:c6:f3:5c:a3:1c:87:5c:
                    e1:05:88:c4:07:fa:96:e6:12:8a:97:a5:4f:ca:40:
                    f8:dd:a9:6d:08:ea:90:cf:54:58:56:34:f8:d1:c1:
                    dd:b7:19:a5:3f:69:19:6f:d0:48:a2:0e:b2:8c:db:
                    a2:ee:bb:cb:44:ef:c2:dd:86:38:cb:d4:7a:55:31:
                    25:68:4e:24:c0:77:b1:db:44:61:d1:a0:27:7f:62:
                    78:87:25:8d:4f:e2:c5:b0:02:d0:70:14:c5:62:a6:
                    68:86:09:b0:1b:9b:8d:e8:41:2c:aa:e3:07:72:56:
                    4f:77:91:0c:c3:24:40:12:a6:9e:2c:c6:83:eb:9f:
                    70:c3:15:ee:50:b0:0b:87:f5:21:95:c6:5e:57:00:
                    28:2b:9f:60:52:02:5a:e2:6a:4a:b2:31:6a:1e:4c:
                    c1:02:76:02:4d:92:a5:36:e3:4d:bb:8f:3b:a4:3f:
                    6a:97:49:a5:2c:2a:64:cf:27:09:8d:53:9b:bb:a0:
                    9e:a8:1b:a9:98:43:dc:f6:6d:0e:1c:0a:25:26:c2:
                    3d:d3:60:ce:b5:1f:28:da:64:08:b6:c3:7a:56:cb:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:E3:F6:6A:39:7C:D3:35:66:E4:64:F9:4E:92:47:2F:C3:77:74:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/BFE3F66A397CD33566E464F94E92472FC3777480.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8414::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272238

    Signature Algorithm: sha256WithRSAEncryption
         99:83:6b:fa:93:01:a3:d0:f4:72:2e:40:e3:e4:bf:90:93:59:
         f0:9e:45:84:1f:79:65:22:1c:fe:51:26:c6:24:24:6a:a4:50:
         48:2d:19:d8:0c:5b:62:83:6a:fc:fe:8c:96:63:bd:ae:fb:1f:
         5c:58:e4:07:f0:94:0e:c0:ce:8c:51:e3:60:0b:15:7d:0a:07:
         ce:d4:ab:5a:04:7c:15:23:0e:28:fc:60:fd:16:62:37:36:d8:
         88:39:26:6c:d6:df:c7:50:e9:84:f5:3c:ef:76:88:84:c4:83:
         60:52:9b:c9:f9:67:a1:96:9a:34:ed:f1:9e:88:96:ee:ca:c1:
         61:62:c5:8b:58:6f:db:46:ab:27:d2:4b:f2:4c:98:69:67:a8:
         4c:77:c7:fa:dd:12:34:40:c1:42:e9:45:6f:ec:d5:03:ef:57:
         a6:09:33:af:75:f9:ea:87:c0:b8:67:e0:df:77:3a:b5:0e:fc:
         02:bb:ac:1d:27:e4:99:c4:64:32:29:70:44:60:bb:08:93:d4:
         d6:90:bf:0f:e8:0d:8e:ca:60:a6:fb:ff:d0:f8:30:99:25:e2:
         c3:05:89:ba:9e:9c:4a:73:de:87:db:6d:c7:ce:cf:b8:6b:89:
         24:b3:9d:05:63:66:6c:39:88:40:ae:6f:11:ff:d5:f6:9e:b1:
         cb:3b:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:35:40 2025 by rpki-client