Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.cer
File:                     BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.cer (raw, json)
Hash identifier:          /TiL14gksr4nTxkk8KBPqyLFBS3IYH9YwFTaZYnXLow=
Subject key identifier:   BF:E8:EA:8B:A4:57:05:88:5E:AA:A9:FF:DB:C9:8A:83:D1:1B:27:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       501338BF9DEE1F1A6B290C1D3EDE2843C9FB736C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 00:12:40 +0000
Certificate not after:    Wed 25 Dec 2024 00:17:40 +0000
Subordinate resources:    AS: 268195
                          IP: 45.235.100.0/22
                          IP: 2804:4d6c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:13:38:bf:9d:ee:1f:1a:6b:29:0c:1d:3e:de:28:43:c9:fb:73:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 00:12:40 2023 GMT
            Not After : Dec 25 00:17:40 2024 GMT
        Subject: CN=BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:08:1a:e3:a1:66:ee:b1:22:18:e8:bf:7d:
                    18:1f:15:5e:d0:ac:74:ce:7f:3f:4a:d4:6f:cc:22:
                    85:be:fb:5f:39:ea:6a:53:1e:06:dd:16:54:f8:cd:
                    3e:b7:39:92:95:21:48:a6:16:c3:4c:7b:a3:7f:77:
                    d3:29:cf:ec:0e:bc:5f:9a:2a:9e:f5:ee:59:4b:04:
                    ff:a9:e3:e5:25:46:91:bd:eb:27:3d:1a:d9:a4:16:
                    a8:ec:f8:4f:08:e2:56:31:91:5a:ae:cd:15:bf:68:
                    7c:c0:59:36:af:f5:b2:c9:5b:fe:5f:56:a4:28:de:
                    98:9e:a4:10:5c:a4:f0:77:fa:de:bb:b1:59:54:90:
                    f4:5a:c8:2d:87:06:24:f1:3b:4b:c9:2f:1b:e7:0e:
                    c7:f6:0f:bd:7c:c7:36:8e:f4:25:1f:5c:21:a9:b5:
                    44:da:8d:94:f8:c0:1e:9b:41:ee:a9:3f:b2:ec:63:
                    48:31:0b:4e:8a:35:33:4e:d8:85:ab:23:c0:74:b8:
                    29:2b:1d:b4:d0:dc:e6:a0:01:f9:0d:4a:fc:52:04:
                    56:73:eb:73:e6:4a:8e:8a:9d:bb:92:f1:e1:82:7d:
                    88:58:13:89:2f:8e:bb:26:c0:0a:a3:7d:7c:41:dc:
                    a3:90:42:f2:b0:d6:df:8c:a4:32:66:65:5a:0d:45:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:E8:EA:8B:A4:57:05:88:5E:AA:A9:FF:DB:C9:8A:83:D1:1B:27:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/BFE8EA8BA45705885EAAA9FFDBC98A83D11B2794.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.100.0/22
                IPv6:
                  2804:4d6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268195

    Signature Algorithm: sha256WithRSAEncryption
         b6:c5:48:66:3f:4e:25:66:5f:84:c1:5a:9d:d6:2d:35:df:48:
         9d:c1:cc:ca:12:16:47:85:0f:72:03:33:6e:59:53:37:63:d6:
         ed:19:d9:90:61:c6:06:bb:11:6a:5f:e4:77:59:03:69:90:3b:
         db:91:b4:56:a2:60:b4:f8:9b:25:c3:88:2f:86:56:8c:fd:5e:
         0a:ba:5c:65:3a:51:84:66:7a:94:11:ec:77:34:66:c2:15:87:
         b1:08:ca:f3:69:d0:e2:bc:b3:d3:09:6a:6e:46:0f:28:7e:39:
         43:46:99:12:d7:42:c3:d1:8c:18:b9:7d:e5:a0:db:81:63:87:
         46:06:00:f1:86:75:63:53:07:f6:b4:d1:6a:dc:e5:8b:8b:e5:
         6d:c7:46:00:fa:85:c2:bf:e9:b9:78:bc:36:4b:cb:2a:9e:f8:
         92:0d:c8:96:8a:da:3d:35:b1:1b:32:25:c2:fc:dd:e2:72:34:
         03:b4:f3:94:59:7e:fb:64:2e:16:20:d9:8e:c5:9d:d9:35:94:
         95:6b:c7:08:22:45:4e:5b:4f:78:6a:e5:e9:8c:74:43:8d:85:
         b3:31:50:81:77:df:a9:67:66:dd:db:99:4c:1f:bf:88:97:97:
         cc:76:ff:b6:25:76:86:83:f4:7b:73:ee:b0:5c:c6:80:64:25:
         7d:74:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org