Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1AAEAEEFF371872F26F56999867D8002C310CBE9.cer
File:                     1AAEAEEFF371872F26F56999867D8002C310CBE9.cer (raw, json)
Hash identifier:          ii8L4Wvuc7ABrbLsS8yV5dsJ7YNrLiOLqRtswxyciW8=
Subject key identifier:   1A:AE:AE:EF:F3:71:87:2F:26:F5:69:99:86:7D:80:02:C3:10:CB:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25498C856A338189B3E800C9BC46F00EBF383C36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/1AAEAEEFF371872F26F56999867D8002C310CBE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Dec 2022 16:37:00 +0000
Certificate not after:    Thu 28 Dec 2023 16:42:00 +0000
Subordinate resources:    AS: 268585
                          IP: 45.164.8.0/22
                          IP: 2804:5374::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:49:8c:85:6a:33:81:89:b3:e8:00:c9:bc:46:f0:0e:bf:38:3c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 16:37:00 2022 GMT
            Not After : Dec 28 16:42:00 2023 GMT
        Subject: CN=1AAEAEEFF371872F26F56999867D8002C310CBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:4b:0c:4d:dd:6b:f4:06:97:83:0d:e3:02:
                    ac:10:f8:60:6b:b8:57:e2:a7:b5:fb:09:1b:fa:08:
                    52:6c:7a:fb:d6:bc:d2:47:01:f5:46:f2:da:00:c7:
                    28:fa:58:8b:56:5e:90:f6:14:83:2f:85:7a:cc:2e:
                    b1:eb:55:59:0e:8f:9f:80:76:9a:87:0a:78:9e:d0:
                    3a:52:52:98:e0:46:81:7b:a5:51:cd:c1:96:d0:06:
                    df:3f:d3:2b:39:c6:d0:16:d7:e3:ee:ee:c8:6e:d6:
                    fd:37:f4:fa:81:31:a2:90:8e:70:31:16:b3:5f:91:
                    34:cf:c9:2c:3a:88:2c:f2:51:3c:d9:ed:32:dd:5b:
                    3f:da:51:c0:3a:75:a7:00:34:d1:c1:9c:ea:8d:ac:
                    d7:f3:e3:35:51:fe:eb:24:5e:b5:d6:30:ef:af:4f:
                    3f:94:13:0d:91:25:76:4b:c0:8e:b8:c0:e2:bb:81:
                    ee:c3:a3:36:c2:96:60:e9:2a:54:18:50:65:f5:f4:
                    9e:21:8a:25:8e:8a:86:3a:9b:c5:9d:40:17:6c:54:
                    29:31:fe:d1:0d:c5:96:ef:9a:41:ec:fc:75:d3:67:
                    00:2e:d3:95:65:0b:0f:11:82:08:b6:2a:34:12:94:
                    87:7a:a9:5d:ef:25:e3:a3:40:83:03:01:cf:a5:da:
                    ea:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:AE:AE:EF:F3:71:87:2F:26:F5:69:99:86:7D:80:02:C3:10:CB:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/1AAEAEEFF371872F26F56999867D8002C310CBE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.8.0/22
                IPv6:
                  2804:5374::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268585

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:78:cb:dd:53:b2:f6:14:e8:ae:69:df:1b:0e:72:c8:23:
         be:88:61:44:a0:84:dd:59:2a:7f:c8:b6:c6:89:5d:c1:b5:ef:
         56:9a:93:09:ba:ec:b8:fa:3d:7f:9a:77:dc:69:03:1d:76:b9:
         98:f8:f3:fe:6c:37:97:f7:9e:34:18:bb:1a:69:a1:5b:d4:7e:
         5e:03:39:4a:c1:e1:05:4a:65:34:a1:ea:d2:b2:2f:c9:26:2f:
         7d:a1:ef:b8:b7:9b:22:9c:65:a8:2b:79:83:8f:73:9b:29:4f:
         1e:c0:8d:c8:9f:aa:9e:86:1c:21:c5:38:84:df:ca:83:0c:f1:
         9c:5d:74:9f:f0:0e:fc:33:15:7a:4d:1d:b6:b3:c3:31:8f:2b:
         05:7c:20:8a:2c:4c:25:f8:43:4d:d2:df:30:20:24:86:94:86:
         45:88:34:70:1c:fb:37:ca:cf:f9:b0:b4:e8:3e:27:90:1c:1b:
         56:39:49:36:f6:af:02:5c:6c:9a:10:8a:bb:e0:6a:24:f2:b5:
         78:e9:ee:e1:24:fd:c9:41:63:ec:5d:99:e5:54:bc:3d:b0:71:
         11:49:6c:74:bd:31:00:25:c4:a1:46:dd:1d:22:0f:bc:a4:24:
         07:58:1f:87:56:75:13:f3:52:00:09:94:e6:85:c5:32:67:12:
         7d:3f:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org