Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0ABCC24D9042D878C138BB44FE08B34367601A60.cer
File:                     0ABCC24D9042D878C138BB44FE08B34367601A60.cer (raw, json)
Hash identifier:          H0lXqv4UmHKX+xtlJHNnpkjQih8RZTq1YIumn9W6btU=
Subject key identifier:   0A:BC:C2:4D:90:42:D8:78:C1:38:BB:44:FE:08:B3:43:67:60:1A:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       063FC70A5CF42618B6ABB00362E4CFB9A32B0325
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/0ABCC24D9042D878C138BB44FE08B34367601A60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 19:40:20 +0000
Certificate not after:    Tue 11 Mar 2025 19:45:20 +0000
Subordinate resources:    AS: 28270
                          IP: 131.196.76.0/22
                          IP: 131.221.68.0/22
                          IP: 138.117.124.0/22
                          IP: 138.121.220.0/22
                          IP: 138.122.236.0/22
                          IP: 143.255.112.0/22
                          IP: 160.238.220.0/22
                          IP: 168.121.52.0/22
                          IP: 168.227.44.0/22
                          IP: 168.228.128.0/22
                          IP: 168.232.116.0/22
                          IP: 170.0.204.0/22
                          IP: 170.245.100.0/22
                          IP: 170.247.52.0/22
                          IP: 177.66.64.0/21
                          IP: 177.67.0.0/21
                          IP: 177.70.128.0/20
                          IP: 177.75.192.0/19
                          IP: 177.87.144.0/21
                          IP: 177.130.192.0/19
                          IP: 179.191.128.0/19
                          IP: 186.219.144.0/20
                          IP: 186.233.72.0/21
                          IP: 187.18.128.0/17
                          IP: 187.108.96.0/20
                          IP: 187.110.208.0/20
                          IP: 189.45.64.0/18
                          IP: 189.50.144.0/20
                          IP: 191.6.80.0/21
                          IP: 200.94.240.0/22
                          IP: 201.149.120.0/22
                          IP: 2804:880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3f:c7:0a:5c:f4:26:18:b6:ab:b0:03:62:e4:cf:b9:a3:2b:03:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 19:40:20 2024 GMT
            Not After : Mar 11 19:45:20 2025 GMT
        Subject: CN=0ABCC24D9042D878C138BB44FE08B34367601A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:6b:39:e3:b0:2d:61:64:fb:cd:29:68:a5:
                    bc:38:22:91:4b:eb:3a:81:ff:61:12:18:3c:f3:97:
                    43:15:7b:b0:af:74:85:12:97:39:89:37:1e:24:55:
                    49:71:b2:5b:f1:8c:e5:37:89:fb:67:5f:18:c0:50:
                    ff:5b:3a:7d:0d:aa:61:d4:19:42:e6:ab:a4:92:ae:
                    6c:35:be:85:27:d3:83:7e:95:7c:f3:98:a8:1e:16:
                    9d:97:b1:5d:1c:22:31:fd:99:1e:59:b7:8e:0f:d8:
                    52:24:23:06:3a:78:fa:21:fe:c7:82:e3:a2:41:bf:
                    c9:ba:9c:da:71:cd:7c:01:f7:cf:04:c1:27:97:f9:
                    26:41:9a:cf:e3:83:c5:bf:26:61:b0:94:7d:29:b5:
                    36:ad:97:f1:4a:a6:19:dd:22:8c:67:73:45:92:83:
                    bf:40:4b:f6:50:77:86:f4:54:09:55:25:a0:a8:b1:
                    53:df:dd:6b:db:6c:b2:63:18:85:ed:1a:36:1d:7d:
                    d0:04:ab:a7:3f:99:44:b3:02:9c:d8:3d:a3:bf:1a:
                    f9:bf:e5:39:3c:e8:39:aa:44:8f:1b:ca:9b:78:63:
                    0a:fc:c8:9b:2a:2f:8c:a6:66:f8:28:ee:f8:6b:b7:
                    4f:6b:2f:32:e9:5b:39:44:72:25:e3:d1:8a:87:4e:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:BC:C2:4D:90:42:D8:78:C1:38:BB:44:FE:08:B3:43:67:60:1A:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/0ABCC24D9042D878C138BB44FE08B34367601A60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22
                  131.221.68.0/22
                  138.117.124.0/22
                  138.121.220.0/22
                  138.122.236.0/22
                  143.255.112.0/22
                  160.238.220.0/22
                  168.121.52.0/22
                  168.227.44.0/22
                  168.228.128.0/22
                  168.232.116.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  170.247.52.0/22
                  177.66.64.0/21
                  177.67.0.0/21
                  177.70.128.0/20
                  177.75.192.0/19
                  177.87.144.0/21
                  177.130.192.0/19
                  179.191.128.0/19
                  186.219.144.0/20
                  186.233.72.0/21
                  187.18.128.0/17
                  187.108.96.0/20
                  187.110.208.0/20
                  189.45.64.0/18
                  189.50.144.0/20
                  191.6.80.0/21
                  200.94.240.0/22
                  201.149.120.0/22
                IPv6:
                  2804:880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28270

    Signature Algorithm: sha256WithRSAEncryption
         8d:9a:ce:a6:52:7f:82:b0:3a:ba:08:14:cc:f9:6d:15:ae:6f:
         ac:6d:7e:38:68:1f:30:c1:9c:ed:ae:6e:93:9a:cb:84:a6:7b:
         20:d3:0c:73:03:d5:fa:b5:98:34:27:54:81:4f:69:57:70:59:
         e2:25:cb:4d:05:b9:d7:2c:e3:71:cf:69:ad:76:bf:2f:89:5f:
         5e:d7:ea:ca:81:a9:10:bd:bb:e2:f5:7f:74:a2:fe:01:4c:01:
         72:c0:d8:e7:2e:fc:11:a6:ae:a5:08:c7:72:da:80:b4:78:1c:
         bc:24:0e:5d:5e:fe:a7:3f:13:a3:b2:03:70:d6:ca:5c:50:37:
         c5:e2:e1:7a:c1:c2:50:78:23:6f:3e:ee:f0:4d:c8:b2:36:1f:
         08:19:bf:67:c5:9f:bd:c2:f4:07:4b:b0:08:ff:3c:69:79:b0:
         1e:df:e7:89:8a:da:a6:c2:5e:2d:31:2d:79:08:66:0c:43:e5:
         1a:a1:82:ca:fd:14:bc:f9:cc:69:c5:71:87:78:e2:94:ed:c8:
         6b:4e:e3:97:d4:92:88:60:a0:3b:7d:65:cb:31:47:87:03:c6:
         c6:58:14:67:85:bf:b6:a5:49:34:b9:0b:d6:8e:55:c5:92:60:
         05:de:ad:b2:9e:0a:4d:6f:26:12:b6:d7:3b:c9:7e:d9:ec:83:
         73:ac:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org