Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/05AEB0BCD230080D126E63FE723A02C56389B127.cer
File:                     05AEB0BCD230080D126E63FE723A02C56389B127.cer (raw, json)
Hash identifier:          2Qg0Pn9ns2KH69yAQdnRPSf9ssa9QG4KFu7cnpUNV6M=
Subject key identifier:   05:AE:B0:BC:D2:30:08:0D:12:6E:63:FE:72:3A:02:C5:63:89:B1:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       605C15757196F47D6853DC35B9EB3F0BBE0E3359
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/05AEB0BCD230080D126E63FE723A02C56389B127.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 17:02:59 +0000
Certificate not after:    Fri 24 Jan 2025 17:07:59 +0000
Subordinate resources:    AS: 263411
                          IP: 179.97.24.0/21
                          IP: 2804:15cc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5c:15:75:71:96:f4:7d:68:53:dc:35:b9:eb:3f:0b:be:0e:33:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 17:02:59 2024 GMT
            Not After : Jan 24 17:07:59 2025 GMT
        Subject: CN=05AEB0BCD230080D126E63FE723A02C56389B127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7b:5b:89:4d:94:b9:a7:58:0e:fe:8d:e7:6f:
                    38:42:f2:ac:7c:47:3e:8d:14:55:bb:1f:66:04:b8:
                    fc:70:32:47:8b:9d:17:c7:83:5c:38:92:b6:b6:36:
                    27:f8:61:9d:f2:aa:8f:4b:4c:88:76:2a:db:b8:2c:
                    b5:04:d6:00:c4:75:f3:51:92:02:69:b2:89:cf:8a:
                    7b:92:ff:d1:dd:27:f6:32:a4:5b:16:ca:0e:9e:63:
                    e7:04:6f:77:5b:4a:f7:a5:b5:64:c7:3c:ff:d3:30:
                    58:d1:c3:ad:36:1e:71:bf:65:90:ce:4b:c5:2f:e9:
                    85:e8:46:61:41:f7:a1:e9:54:3a:6b:c4:7c:c4:8c:
                    e2:05:5e:d7:bd:ca:30:d3:5d:53:0a:cd:ee:d7:b5:
                    20:16:8a:49:0a:91:7b:3d:66:ac:a0:74:b2:10:66:
                    06:49:af:08:3b:34:36:d4:c8:37:ae:a4:62:c5:ee:
                    01:da:a6:56:81:7f:b6:6f:77:ba:2c:f6:65:de:25:
                    93:90:dc:24:1b:0b:56:90:fd:5b:35:c2:ec:66:85:
                    6a:20:bc:40:b4:88:52:b3:17:d8:98:5a:9e:b7:da:
                    14:13:69:df:dc:1f:d3:7f:b3:fa:3b:ab:9f:52:1b:
                    04:b0:af:5c:fa:5d:7c:db:8b:93:da:cc:c1:45:a3:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:AE:B0:BC:D2:30:08:0D:12:6E:63:FE:72:3A:02:C5:63:89:B1:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/05AEB0BCD230080D126E63FE723A02C56389B127.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/21
                IPv6:
                  2804:15cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263411

    Signature Algorithm: sha256WithRSAEncryption
         73:01:0c:92:18:3b:bf:7f:89:ee:82:0a:e8:ca:8e:d7:88:2f:
         0f:4b:4f:40:f1:1d:2d:a6:60:79:41:23:00:e7:68:fc:88:f8:
         0f:dd:55:37:c2:b8:30:16:f0:b4:88:ff:2b:7f:2d:fb:b3:41:
         f0:01:da:ac:ae:3c:45:04:32:ee:4e:70:e2:4a:2f:6f:ed:41:
         37:06:ea:02:1b:cb:44:68:9a:f9:85:90:10:68:dd:06:fd:11:
         5b:ea:9f:bc:ea:ef:7a:2d:ee:77:a7:0d:68:b4:d8:85:bd:2b:
         6c:71:54:1f:8d:ab:80:13:3b:94:4c:f7:72:dc:00:ad:8b:fe:
         08:cb:ce:9e:b0:c8:03:41:f7:7d:35:3b:b8:ac:b0:00:76:c7:
         30:b4:75:b4:c7:54:b3:dd:5b:62:82:a5:a9:43:a0:93:07:d9:
         78:72:93:2f:54:9c:9e:cb:19:a7:1f:38:13:26:00:28:a5:b7:
         20:14:df:ff:07:4a:c5:a2:6b:2a:95:69:ff:34:21:96:8f:62:
         36:0f:5f:03:3c:be:5a:96:1c:28:0d:e2:49:2a:a5:dd:64:59:
         57:98:68:ab:92:12:d1:bb:41:79:7b:9d:7b:84:93:59:c8:3d:
         f6:4f:f9:1c:d5:99:b6:6c:4b:df:ff:2e:f7:6d:1a:36:86:c0:
         b5:c9:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:21:19 2025 by rpki-client