Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.cer
File:                     04AFE5BFE3D946811341B0DCBC883C99338E067B.cer (raw, json)
Hash identifier:          3PKNG0IQyOOt3q8HMuXnKn9Z002p9R/JX8dXBH+2c90=
Subject key identifier:   04:AF:E5:BF:E3:D9:46:81:13:41:B0:DC:BC:88:3C:99:33:8E:06:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31C3C49C37DE0F71F7F898330A5AE975E6D7193A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 10:53:23 +0000
Certificate not after:    Wed 06 Nov 2024 10:58:23 +0000
Subordinate resources:    AS: 271130
                          IP: 179.42.70.0/23
                          IP: 2804:76b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c3:c4:9c:37:de:0f:71:f7:f8:98:33:0a:5a:e9:75:e6:d7:19:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 10:53:23 2023 GMT
            Not After : Nov  6 10:58:23 2024 GMT
        Subject: CN=04AFE5BFE3D946811341B0DCBC883C99338E067B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:74:0d:cb:7d:41:48:7d:46:9c:ad:89:05:
                    f7:ad:a8:1e:8f:e7:7b:b5:9a:25:d5:fc:e0:5b:fe:
                    30:59:60:9d:c6:b8:9c:e2:d0:b0:3f:a8:9d:0f:82:
                    37:90:f9:70:2e:83:17:d1:4a:87:84:3c:8e:e6:45:
                    d4:e6:0a:a2:e3:19:7d:1d:cf:67:72:95:5d:e9:41:
                    35:8a:00:c3:ab:b6:24:fd:68:ec:fe:b1:91:4c:5f:
                    02:82:a0:5c:2d:ec:c8:ae:ee:b3:01:43:0c:c4:48:
                    ba:19:64:65:0f:46:d4:28:c7:33:65:da:0f:c7:a3:
                    ce:7a:b0:ef:1e:aa:3b:14:23:2d:c0:df:3f:79:42:
                    c4:2f:59:f4:e2:74:2e:23:0d:bc:e7:08:fc:28:c6:
                    e4:93:b5:76:ab:3f:77:6b:b0:ff:e1:d4:09:68:e5:
                    c7:e6:89:0f:18:e2:34:c1:c8:05:12:49:67:b5:9b:
                    57:fe:7a:dc:a4:b6:e9:78:f6:41:49:dd:67:84:0a:
                    77:ea:77:e9:6f:98:1e:23:55:1d:39:07:03:ce:47:
                    0d:0d:5a:0b:80:9a:1e:1f:8d:f6:a5:cf:f7:34:cf:
                    b2:cc:d4:34:99:c0:a1:e4:13:49:99:20:99:e7:bf:
                    74:2b:d8:9d:29:3c:89:62:5c:c2:a7:b7:f1:f6:1d:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:AF:E5:BF:E3:D9:46:81:13:41:B0:DC:BC:88:3C:99:33:8E:06:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/04AFE5BFE3D946811341B0DCBC883C99338E067B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.70.0/23
                IPv6:
                  2804:76b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271130

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:17:4e:dc:58:3a:ad:69:cf:56:6c:7a:54:ae:a0:ae:79:
         12:10:7f:ee:89:56:d0:2f:12:a8:6e:04:8c:5b:fa:53:c6:ee:
         65:af:2d:89:1a:80:6a:b3:23:4b:14:74:76:d0:c1:ac:4d:0d:
         37:b8:cb:73:7f:a9:09:12:04:2b:e0:6c:a0:f9:0e:58:f8:a1:
         66:f2:d2:33:5d:28:a3:84:0f:c7:5a:c1:2a:ed:22:5d:a0:3a:
         24:82:28:e7:e3:a6:c8:5c:79:4f:05:69:b6:c5:c3:e5:a5:5f:
         be:4d:2c:97:d6:81:f9:d4:69:d4:31:e8:12:06:35:ac:89:29:
         03:2b:59:8d:df:d6:50:90:ae:03:f0:7a:35:de:95:c5:67:b9:
         43:39:ff:9a:53:f3:8f:71:0e:7d:06:ab:a4:45:e2:18:72:16:
         b2:9c:c7:b0:4c:24:f6:40:9b:a0:d4:db:b1:05:23:c1:ca:b6:
         78:f3:64:cf:da:fa:3d:2c:43:e4:d7:a0:9d:52:8b:a0:be:e7:
         e9:d1:c2:7f:f0:72:8b:bd:c6:c8:c4:74:c7:53:7e:aa:ce:6f:
         c6:0c:e1:90:4c:f4:e6:f0:79:37:2a:91:b1:04:6d:5d:47:2d:
         a8:aa:09:67:91:9c:24:85:3c:f4:9b:01:b1:06:c5:e3:6c:c1:
         1d:4d:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org