Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/05AAFD14E0B9AB9182B76DFB343E2B1B0AB6D5E1.cer
File:                     05AAFD14E0B9AB9182B76DFB343E2B1B0AB6D5E1.cer (raw, json)
Hash identifier:          64le3CGVD256S/D877FEPYowy1ikMxGufJCVXnxG01Y=
Subject key identifier:   05:AA:FD:14:E0:B9:AB:91:82:B7:6D:FB:34:3E:2B:1B:0A:B6:D5:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B1ECAB5C848B13A6B934F8A5A05AFC17F9314C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLmnazUwUSTSvwFqUofHwP2V4L4ZGcj77LJr4zspCevD/0/05AAFD14E0B9AB9182B76DFB343E2B1B0AB6D5E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLmnazUwUSTSvwFqUofHwP2V4L4ZGcj77LJr4zspCevD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 21 Jan 2023 18:36:35 +0000
Certificate not after:    Sat 20 Jan 2024 18:41:35 +0000
Subordinate resources:    AS: 271518
                          IP: 186.209.168.0/22
                          IP: 2804:7cc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1e:ca:b5:c8:48:b1:3a:6b:93:4f:8a:5a:05:af:c1:7f:93:14:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 21 18:36:35 2023 GMT
            Not After : Jan 20 18:41:35 2024 GMT
        Subject: CN=05AAFD14E0B9AB9182B76DFB343E2B1B0AB6D5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:12:95:8c:54:52:e0:33:c9:e1:e2:8f:85:0e:
                    2f:8a:95:b1:6e:86:e7:f4:21:8f:5b:28:3f:15:77:
                    99:24:be:d0:3d:bd:98:50:74:1f:a5:d0:1e:e3:96:
                    16:8d:f4:a5:94:c0:5d:f5:57:dd:b5:54:fa:49:3b:
                    fb:43:85:d6:8f:75:19:2d:4e:91:08:6a:36:d5:12:
                    75:49:8d:25:b8:d8:36:e7:cd:c8:7e:7b:92:5b:f0:
                    57:3b:dc:6a:57:7b:1b:81:34:a2:9e:a1:db:cb:c9:
                    ae:0f:c6:30:4b:1f:63:bf:42:26:04:a6:1c:46:a4:
                    f7:1b:3e:4a:68:b8:45:3a:aa:31:71:d9:ff:7f:be:
                    d1:a0:5f:d1:f2:c1:1f:3f:56:f1:53:55:37:28:58:
                    6e:f0:2d:dd:ed:4e:14:f6:4c:b7:e8:54:3c:5e:a0:
                    ea:ae:02:d8:9a:f5:cf:e8:0b:42:60:32:bc:81:c9:
                    3b:fc:79:91:62:59:93:5a:e5:43:d4:84:71:51:46:
                    37:d2:6a:9c:41:06:51:f2:ed:94:6f:64:e0:e5:05:
                    97:13:a1:f2:3b:43:47:7d:bf:24:4d:c8:ab:ff:6a:
                    87:bc:68:b0:a0:11:05:c0:99:de:ab:1d:4c:79:0e:
                    06:a0:3a:a7:e3:39:2a:9a:3f:82:50:8e:27:eb:cb:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:AA:FD:14:E0:B9:AB:91:82:B7:6D:FB:34:3E:2B:1B:0A:B6:D5:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLmnazUwUSTSvwFqUofHwP2V4L4ZGcj77LJr4zspCevD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLmnazUwUSTSvwFqUofHwP2V4L4ZGcj77LJr4zspCevD/0/05AAFD14E0B9AB9182B76DFB343E2B1B0AB6D5E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.168.0/22
                IPv6:
                  2804:7cc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271518

    Signature Algorithm: sha256WithRSAEncryption
         50:06:62:a5:fe:b0:77:48:61:e8:21:43:cf:b9:93:8b:ba:f3:
         28:c0:f7:de:c7:4f:b3:be:63:16:33:d9:20:01:72:dd:c1:4c:
         80:7f:46:b9:d0:07:2d:ed:b8:57:60:70:7e:b0:de:b8:73:36:
         38:d3:bb:b0:50:95:27:b4:47:92:87:fd:01:b4:3b:e7:ca:e6:
         9c:aa:10:77:76:9e:f0:c1:a1:1a:05:99:80:a9:17:33:55:df:
         05:2d:3b:ea:24:0d:28:81:28:1f:a0:2d:6d:91:e1:5d:4c:c5:
         d2:f0:cf:7e:30:ac:dd:19:31:79:97:5d:28:be:41:70:2d:93:
         a7:d7:af:1a:ee:57:04:26:7f:de:c5:f6:f0:36:b8:f5:52:70:
         d4:55:4e:85:bd:c5:db:70:aa:b9:d0:3f:95:60:72:37:e0:e8:
         ec:37:30:00:33:a3:09:d4:62:a8:62:48:34:69:f3:e3:a3:5e:
         c6:af:b5:b2:d3:d7:b4:8d:d9:8f:ab:cb:a1:ae:3f:2c:46:3f:
         4a:4c:94:7b:27:a6:fe:5c:a8:f9:ff:90:d4:b6:fa:e5:52:d1:
         79:d6:c4:7b:d9:e6:9a:08:e9:0c:f5:9b:46:56:69:08:26:79:
         09:c5:52:6c:cd:11:15:1b:99:50:64:04:b8:ed:83:98:aa:09:
         62:f9:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org