Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer
File:                     0AB0B7534BC55CA95964EE69B4FB10297B042818.cer (raw, json)
Hash identifier:          YaqS0TfaTz9eyeMmuS+ek6KFqJ7QvV82nUIq424e95o=
Subject key identifier:   0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78B2D2568D6DFFB502833CC5C6E7A689BFB57DCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 21:05:07 +0000
Certificate not after:    Fri 12 Apr 2024 21:10:07 +0000
Subordinate resources:    AS: 264525
                          IP: 45.71.80.0/22
                          IP: 128.201.208.0/22
                          IP: 138.0.52.0/22
                          IP: 138.122.240.0/22
                          IP: 2804:20fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b2:d2:56:8d:6d:ff:b5:02:83:3c:c5:c6:e7:a6:89:bf:b5:7d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 14 21:05:07 2023 GMT
            Not After : Apr 12 21:10:07 2024 GMT
        Subject: CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:a5:4e:61:0b:0b:00:e8:58:3a:86:e2:23:
                    06:b8:20:a2:48:65:08:8a:89:51:68:1c:2c:fe:29:
                    c1:41:a7:b1:fb:7f:10:4d:88:6a:3e:b2:d4:16:4c:
                    8c:e3:f1:4c:ae:eb:46:aa:71:1f:33:e5:1c:fa:81:
                    da:38:ca:15:35:38:71:16:64:f4:a8:26:35:7a:db:
                    f5:91:50:c3:8f:81:d8:4b:89:c7:78:76:c2:e1:6b:
                    b4:67:09:d2:a9:45:61:34:75:b0:d5:36:68:f7:11:
                    7e:7b:73:12:8e:57:4a:e6:82:0f:ae:63:9a:d9:ce:
                    6f:fa:f8:ec:44:64:a9:71:d2:39:79:80:80:c7:bc:
                    e5:27:d7:bf:0b:6c:33:d0:8a:4d:c6:e3:d9:fc:b3:
                    25:59:53:04:87:da:3b:5c:65:ef:bf:be:bf:e6:75:
                    5b:6f:6e:6d:58:5d:66:df:18:ff:d6:6d:6e:8d:0f:
                    d7:15:c0:e4:b8:91:ea:be:90:89:97:d6:78:66:0a:
                    82:44:4e:50:22:45:b9:b7:10:96:9a:56:0b:f6:23:
                    01:87:aa:53:e4:ab:e2:46:d2:19:a2:9d:bf:9c:db:
                    0f:b7:ff:5e:7e:1e:67:a1:01:ab:6f:a7:13:8e:f3:
                    73:ca:23:74:17:ad:9f:65:e3:6e:20:e4:13:d4:76:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.80.0/22
                  128.201.208.0/22
                  138.0.52.0/22
                  138.122.240.0/22
                IPv6:
                  2804:20fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264525

    Signature Algorithm: sha256WithRSAEncryption
         86:3b:d7:70:fa:7d:8c:17:f4:c8:0b:8c:bd:b9:26:c4:53:53:
         e6:d7:f9:11:11:f4:86:9c:c3:93:f1:6d:63:cd:95:a1:6d:4b:
         76:85:f7:07:5d:01:f0:2c:ce:7f:92:9d:32:f4:09:e2:0c:b1:
         c1:24:cc:c6:7b:66:54:d4:21:49:c9:0c:1f:3b:c1:68:2d:89:
         29:77:77:4a:b2:95:5c:32:d7:2d:0a:43:44:5b:0c:23:c4:21:
         b2:76:35:ea:c8:83:f2:7d:42:07:92:b3:1b:c3:aa:95:64:94:
         59:49:02:88:0d:1e:85:93:2e:ad:80:45:93:34:22:74:3c:b0:
         84:3e:6d:27:fb:07:95:0e:8d:a1:7b:b8:b7:5f:f8:5e:3e:e3:
         41:eb:87:fe:d4:7b:e6:12:6b:03:bb:75:11:c4:36:56:5d:ab:
         b0:82:5d:d3:e1:a3:dc:e8:e2:b4:83:ca:0b:6f:60:3b:61:89:
         24:91:c4:d4:76:9b:83:cb:7d:d5:e9:51:eb:ca:01:68:80:04:
         11:ef:97:1a:e5:19:54:4c:1c:f3:fe:11:45:70:d7:d1:5b:8c:
         a7:25:1d:25:97:d6:df:aa:49:db:83:f8:1b:2e:ba:6d:e5:42:
         60:7c:5a:7a:f5:e9:6e:25:75:eb:1b:55:dc:da:b3:e8:db:57:
         d4:36:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org