Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.cer
File:                     BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.cer (raw, json)
Hash identifier:          hKQ9wyoljzYw7SYuym1xhkqpIC4O9Hr+Pjd2kLjSUaU=
Subject key identifier:   BB:F0:2F:7F:9F:1C:A6:82:FB:06:D3:40:78:9D:F8:EF:85:CF:AB:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E37ABA6D11EA089A59C2D2598EA273229D53B63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Feb 2023 14:31:00 +0000
Certificate not after:    Mon 12 Feb 2024 14:36:00 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:37:ab:a6:d1:1e:a0:89:a5:9c:2d:25:98:ea:27:32:29:d5:3b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 14:31:00 2023 GMT
            Not After : Feb 12 14:36:00 2024 GMT
        Subject: CN=BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:99:8b:ae:67:3a:d7:9a:24:f0:89:4f:78:
                    5f:fa:a4:0b:e1:e0:1a:ed:2e:97:6d:38:be:00:7f:
                    50:d5:3e:e6:25:3e:d9:14:52:3f:b8:4b:f0:cf:80:
                    24:bd:03:45:fb:68:17:f2:bb:67:7c:78:c5:7a:6c:
                    8b:58:bd:0b:f8:a0:68:4d:f1:43:d9:d8:34:c9:ce:
                    22:39:b1:a4:a0:c5:8c:c7:b5:4d:16:ee:10:2c:75:
                    c0:0d:af:fb:a6:5c:6d:46:2e:6b:76:49:e9:72:dd:
                    44:94:bd:f6:ca:73:c7:92:98:47:e4:62:e6:9d:99:
                    75:f5:af:82:7d:49:dd:32:f1:1e:f7:09:4a:8f:54:
                    94:8c:c3:37:87:b1:0c:ce:33:b4:57:a3:68:75:81:
                    b2:ee:94:34:0b:f3:bc:2c:e2:3a:e7:48:13:4a:9b:
                    54:99:d6:c3:7b:3e:9e:6b:2c:16:0d:48:3d:69:5b:
                    ba:ff:7d:62:c0:77:b8:ba:b0:8a:91:4d:dd:fe:7c:
                    bc:69:87:9a:2f:82:65:b2:14:c6:85:1c:51:a2:9f:
                    8a:08:e4:ec:e3:11:95:92:39:4d:e3:cc:96:51:5d:
                    68:79:18:32:49:46:9a:75:bf:51:59:96:1f:9a:56:
                    24:6f:93:9a:2c:81:87:6b:9d:9c:8e:85:3a:6a:b1:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:F0:2F:7F:9F:1C:A6:82:FB:06:D3:40:78:9D:F8:EF:85:CF:AB:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/BBF02F7F9F1CA682FB06D340789DF8EF85CFAB15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         a8:ce:03:08:06:98:46:1c:a7:53:c8:c7:f6:e3:dd:25:8d:86:
         76:c2:37:f6:c5:5b:73:3b:a5:47:25:79:c5:9b:33:d9:13:06:
         fa:24:d0:ab:3c:48:38:57:76:80:84:25:9e:61:c9:74:37:5e:
         e9:db:3e:a3:c8:ab:a9:65:cb:3a:3f:a8:dc:0d:b6:f4:31:6f:
         13:e2:19:53:97:5a:20:39:60:9a:10:d9:3b:15:b2:a1:63:fe:
         16:09:f8:66:20:3e:6c:7c:1f:52:5b:3b:12:19:7f:18:46:45:
         c6:7c:ef:b7:35:47:a6:e5:69:f5:1e:cf:f5:86:5a:1c:ba:50:
         c6:32:5d:70:2c:d1:24:37:24:b1:09:9a:97:55:79:cb:6a:09:
         62:dd:55:66:c8:98:97:f8:aa:43:de:b7:6c:4c:7b:df:89:ef:
         d7:85:e1:d3:28:b5:c1:6e:b8:12:12:99:92:e2:31:9f:de:68:
         4e:d6:4d:e4:2f:1d:11:bc:76:ca:84:9d:2c:0a:df:53:f7:f7:
         c9:6c:d3:e0:e1:bc:2e:a6:d5:5d:8a:55:b3:0c:0c:90:d6:0d:
         8a:1a:5f:5c:ad:6d:4a:d7:e8:c5:38:95:b8:2a:7e:8c:e2:68:
         b8:cb:fb:bc:47:42:21:f1:39:3a:1f:2c:c9:9a:c4:89:81:9b:
         ff:8f:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:11:48 2025 by rpki-client