Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA7E89727323D83349D5995D267D020FF0260C80.cer
File:                     BA7E89727323D83349D5995D267D020FF0260C80.cer (raw, json)
Hash identifier:          ImFZH+qG8DHTUEO3mQd3b0NV+gVRcm0US1EGMQKD46I=
Subject key identifier:   BA:7E:89:72:73:23:D8:33:49:D5:99:5D:26:7D:02:0F:F0:26:0C:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CEC025005AE67EB1C5EE83BCDF1F632EB14EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/BA7E89727323D83349D5995D267D020FF0260C80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Jun 2023 16:24:57 +0000
Certificate not after:    Tue 11 Jun 2024 16:29:57 +0000
Subordinate resources:    AS: 269111
                          IP: 45.178.212.0/22
                          IP: 2804:5f98::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ec:02:50:05:ae:67:eb:1c:5e:e8:3b:cd:f1:f6:32:eb:14:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 13 16:24:57 2023 GMT
            Not After : Jun 11 16:29:57 2024 GMT
        Subject: CN=BA7E89727323D83349D5995D267D020FF0260C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0b:3f:eb:ab:e8:15:88:84:68:62:e0:8a:0c:
                    39:85:5f:4a:01:59:51:99:0a:81:32:a3:88:61:e3:
                    2c:e9:06:f1:e2:45:17:09:b9:b5:77:ab:6b:1c:5a:
                    7c:6b:5f:ad:d2:2c:b0:f4:19:f4:2f:c9:6f:ed:71:
                    a8:c3:a1:dc:f4:fa:2c:4e:64:3c:b2:ae:a7:9a:29:
                    c7:b5:95:3f:76:17:c7:ee:7e:83:2a:bb:c3:4a:e1:
                    c5:14:61:88:af:4c:f4:21:6f:95:9e:a9:81:97:20:
                    39:67:f9:ae:c5:9c:36:3e:4d:4b:36:22:e3:fd:b2:
                    aa:f6:c2:0d:91:b4:8d:28:1a:9d:92:85:82:2c:b1:
                    82:97:bf:7e:b6:cb:5e:37:7e:12:48:00:d4:e1:33:
                    ae:17:9c:36:6f:96:bd:52:2f:ef:d6:0d:c3:1d:27:
                    58:79:c1:9c:1c:18:8e:97:0e:7c:8e:2e:9f:7a:5e:
                    1b:62:58:3b:ed:4d:bd:c0:da:67:8f:1e:dc:79:23:
                    28:71:1b:99:c2:61:c2:d4:1d:5d:4d:97:80:25:0f:
                    e4:12:c5:88:20:ca:11:69:32:ac:9e:73:a2:73:41:
                    26:8b:cf:f4:94:17:82:23:15:89:a7:17:ba:f8:d8:
                    b6:6b:77:5a:89:a9:16:3b:90:ab:19:e4:7e:b4:99:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:7E:89:72:73:23:D8:33:49:D5:99:5D:26:7D:02:0F:F0:26:0C:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/BA7E89727323D83349D5995D267D020FF0260C80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.212.0/22
                IPv6:
                  2804:5f98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269111

    Signature Algorithm: sha256WithRSAEncryption
         4f:ab:d3:d3:8c:e8:d1:96:04:da:f9:2f:e7:98:3a:16:cc:bc:
         e9:5c:ff:40:97:62:5d:2e:d1:f0:27:af:be:b5:20:e5:8e:e2:
         bc:7e:c4:51:e7:90:58:31:be:e6:13:d8:7a:40:77:8d:be:ae:
         ed:8d:50:7c:21:8f:0a:69:51:15:5f:ef:41:33:91:c8:2e:68:
         d9:75:30:9d:b5:e8:19:70:3d:fc:c6:a4:84:29:13:4c:13:93:
         a5:f5:be:70:9b:08:25:4d:80:e1:db:6c:aa:02:40:85:aa:64:
         dc:be:8d:40:74:22:65:7a:2c:ac:c4:66:93:e5:8a:43:b8:e3:
         4a:f3:43:ff:9f:b7:50:75:2c:e4:f2:78:4a:17:02:03:b7:6e:
         e5:ca:0c:d1:58:26:a2:d7:20:35:52:f3:a3:83:80:c6:df:ed:
         d4:fd:58:2c:28:11:8e:7c:79:d2:d4:99:ce:15:16:21:ef:42:
         22:f4:7e:15:28:6f:47:1f:48:37:e9:a7:ca:2c:cc:16:03:47:
         fc:b2:7d:c6:f3:48:90:a0:7f:52:86:b0:94:1f:64:4d:af:15:
         59:c9:f4:8e:00:7e:1a:4c:82:70:48:c3:8c:a6:78:8e:54:9a:
         26:42:9a:c8:d6:0b:7a:a5:4d:25:59:b7:dc:79:12:25:98:bc:
         b7:a9:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:33:18 2025 by rpki-client