Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
File:                     0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer (raw, json)
Hash identifier:          YlKITZEav8eNPrH2yXc91s95mo2UkhtO2acQYzqL+UE=
Subject key identifier:   0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31EFE1526815D1F528745C73CFF3827694F724C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 19:18:27 +0000
Certificate not after:    Mon 20 May 2024 19:23:27 +0000
Subordinate resources:    AS: 268346
                          IP: 45.239.12.0/22
                          IP: 2804:4fbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ef:e1:52:68:15:d1:f5:28:74:5c:73:cf:f3:82:76:94:f7:24:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 19:18:27 2023 GMT
            Not After : May 20 19:23:27 2024 GMT
        Subject: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:cd:a9:15:54:4f:ba:b2:fc:92:4e:c3:b7:
                    4c:9b:6d:96:bd:31:8a:bd:5c:14:dd:7a:71:4e:6a:
                    05:48:70:fe:aa:2f:4b:be:cb:ab:ca:98:0a:37:2a:
                    4a:9e:f3:5d:a2:f5:94:1e:01:0c:20:0b:b8:5e:09:
                    4e:40:9b:21:9b:d2:8f:af:14:39:90:0c:54:cd:de:
                    0f:b1:f5:75:ee:c2:04:6a:02:41:17:29:62:a3:fb:
                    fc:95:ba:54:ce:99:43:90:9b:be:e7:7b:70:19:a8:
                    7a:2d:b9:3f:61:9a:58:df:56:d4:cc:d7:49:ee:2d:
                    2c:d1:49:9b:0b:58:79:09:87:b2:fd:af:86:65:ee:
                    d5:fb:ab:7d:07:e8:3e:c5:31:69:6c:6b:c4:42:76:
                    db:38:55:bd:15:d4:f8:d9:4e:be:40:a7:de:71:0d:
                    1d:d3:fb:0e:80:be:c2:c4:c1:98:67:20:11:47:5a:
                    4c:23:ea:49:2e:ef:1a:e7:c6:28:8f:2b:2f:cf:30:
                    7f:38:5d:d1:19:e7:1d:f6:f2:61:14:27:25:b3:f0:
                    c5:f9:a0:e0:cb:fc:55:8c:c2:6e:94:d9:75:18:84:
                    fa:03:05:01:41:61:f4:9e:4d:49:16:e3:a4:50:ef:
                    18:8d:29:69:77:f4:32:15:15:b5:57:38:22:3d:2e:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.12.0/22
                IPv6:
                  2804:4fbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268346

    Signature Algorithm: sha256WithRSAEncryption
         9a:d5:0c:ef:6d:f3:f2:9c:a9:02:93:8d:11:75:b4:d7:15:58:
         0d:a4:99:d5:aa:b1:67:5a:9c:64:fc:07:58:35:a6:56:8a:a3:
         0e:13:9d:a8:86:3b:bd:35:d4:b6:0e:e3:98:d5:e5:1a:45:66:
         c1:a8:8a:07:e1:06:9c:b8:84:b5:d0:40:ab:ca:44:b5:0f:c7:
         6a:94:38:d2:0f:2b:6d:85:32:99:65:4c:ab:95:1d:17:05:5c:
         61:32:a1:bb:2e:06:07:09:f8:ab:ba:78:a4:d8:bd:0d:8b:43:
         1f:51:7e:30:f3:91:5f:a7:ef:37:70:a9:ec:a3:b4:d8:e6:b6:
         bc:36:f0:d9:bd:1f:45:ab:42:92:db:95:f3:9d:ff:db:c2:20:
         29:30:f9:ad:3b:79:c1:0a:94:aa:74:b7:23:93:77:84:a0:b8:
         dc:e3:d7:cf:9c:18:7e:b2:b3:f8:76:4f:0d:1d:a7:1c:f1:cb:
         f1:30:a5:2e:4c:62:c4:7a:a8:4c:3b:10:86:f0:dd:cc:f8:3d:
         c6:64:b0:b8:86:3a:66:df:3c:a8:46:5f:1c:cc:f4:a4:ef:8d:
         b5:ef:c0:d7:83:85:92:a9:1f:dc:da:b5:06:c4:72:fc:c8:58:
         72:80:ed:0c:33:94:f5:14:21:8b:8a:74:8a:e9:9e:0a:d9:95:
         5e:8c:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org