Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.cer
File:                     BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.cer (raw, json)
Hash identifier:          1CW20cp3vK6lzy29oOhLlnHhxMChf8Fr4MK+T6ar9AM=
Subject key identifier:   BF:E6:A5:A9:E8:2E:60:6B:09:47:93:1E:BB:02:C7:0F:D3:ED:1A:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0820B8713EC8D6CA8420638A022D3D584CF0FA4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Sep 2022 12:55:35 +0000
Certificate not after:    Fri 08 Sep 2023 13:00:35 +0000
Subordinate resources:    AS: 265314
                          IP: 168.90.52.0/22
                          IP: 2804:2df4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:20:b8:71:3e:c8:d6:ca:84:20:63:8a:02:2d:3d:58:4c:f0:fa:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  9 12:55:35 2022 GMT
            Not After : Sep  8 13:00:35 2023 GMT
        Subject: CN=BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:ea:47:bf:df:0f:34:78:fe:59:2e:32:c4:
                    d7:57:e5:bc:a0:69:e9:7e:29:43:50:be:3d:2e:fa:
                    6e:6b:19:83:76:30:31:8a:75:b3:ad:2e:f1:e9:4d:
                    95:0b:46:2a:cd:f8:c1:63:a3:e3:fa:97:be:0d:c9:
                    90:4d:8e:46:c0:37:99:73:50:e5:03:3a:6b:fd:4b:
                    bb:ac:1d:e4:ab:dc:c7:3c:ce:6d:d2:78:c0:b0:19:
                    a8:1f:42:9a:22:ae:12:2a:6d:80:97:cd:19:82:7b:
                    c1:f3:79:ae:91:9c:e0:a7:91:85:b8:1b:03:3a:8c:
                    52:e2:87:02:73:5f:84:d2:16:46:21:8e:ed:e0:54:
                    f6:d7:e0:08:54:18:c7:eb:30:e6:6d:12:5a:92:63:
                    83:3e:30:71:ab:73:54:d1:f4:d8:77:3f:61:3c:17:
                    8f:9d:8f:67:ee:6e:79:c3:8e:a7:67:34:f2:61:a7:
                    6d:ff:b4:22:9e:85:eb:53:d5:aa:e2:6f:3b:38:ab:
                    4e:3d:04:e5:2c:f4:80:92:c0:35:df:cf:af:b1:6c:
                    41:a0:26:7a:03:d3:17:52:ff:11:0c:c7:7c:65:c0:
                    52:97:20:de:41:00:d8:19:fb:b3:2a:87:1a:99:8f:
                    cc:d3:2e:52:20:e6:f7:15:da:94:b8:8e:4d:4e:72:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:E6:A5:A9:E8:2E:60:6B:09:47:93:1E:BB:02:C7:0F:D3:ED:1A:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/BFE6A5A9E82E606B0947931EBB02C70FD3ED1A77.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.52.0/22
                IPv6:
                  2804:2df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265314

    Signature Algorithm: sha256WithRSAEncryption
         90:0c:5f:bf:41:8c:e3:d8:76:a5:cf:30:ed:5b:bf:6e:8b:82:
         28:12:72:ed:9e:66:15:82:5a:6d:d9:6c:c5:32:45:91:93:46:
         46:21:68:d5:0c:77:79:7b:83:53:8c:d4:84:34:77:0b:44:4a:
         d5:53:f1:93:b8:4d:40:a4:b8:d4:4c:91:a6:27:c1:9b:41:19:
         cd:c1:1f:77:e9:d1:0b:82:ce:fa:a6:26:7b:81:e5:b6:4d:c1:
         9d:22:7a:13:fe:fd:8f:95:e1:08:39:8a:90:d1:d1:01:60:e4:
         ae:30:99:82:1d:35:c0:f5:74:67:d3:9f:99:54:70:5e:98:fc:
         a3:4a:45:bb:19:4d:1d:a4:59:77:af:e5:ac:6e:c9:d4:df:49:
         85:4a:b3:70:1d:2d:89:03:1e:50:d9:6b:97:7a:2f:60:e8:a0:
         0b:79:7c:2d:d0:b1:18:57:0b:6e:59:c0:3b:7b:ff:b7:08:6c:
         5c:1f:d9:f1:ca:bb:f3:94:d8:27:84:02:19:93:6f:6c:ff:95:
         29:c7:97:7a:fa:91:a8:b9:67:e0:85:af:1c:0b:31:6e:97:de:
         bc:34:e8:2c:e8:f3:cb:9f:17:a9:89:d7:4f:d5:e7:17:b4:f0:
         16:97:8b:60:5b:20:76:9f:66:90:ce:83:44:ae:f9:3e:95:0a:
         41:7c:c0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org