Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
File:                     28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer (raw, json)
Hash identifier:          sWcV7RJbqvhtW/+cLp6DZaQ2oZ7d1UlVRFekqwre14M=
Subject key identifier:   28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68A609B0BC3636152290E6EDF2EC782438BF7B7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 17:31:22 +0000
Certificate not after:    Fri 15 Nov 2024 17:36:22 +0000
Subordinate resources:    AS: 271251
                          IP: 177.85.12.0/22
                          IP: 2804:7890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a6:09:b0:bc:36:36:15:22:90:e6:ed:f2:ec:78:24:38:bf:7b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 17:31:22 2023 GMT
            Not After : Nov 15 17:36:22 2024 GMT
        Subject: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:72:18:2f:d8:c0:38:c6:14:5c:a3:fc:df:
                    d1:88:55:a9:71:10:95:b1:b0:87:cd:29:1c:1a:bd:
                    19:9a:8e:df:6f:72:d2:94:45:f8:5a:20:f1:08:3e:
                    99:eb:f7:15:72:ff:00:24:db:95:dd:fc:a3:f2:9b:
                    84:0e:e3:11:8a:df:b7:2a:0c:0b:2a:be:68:1d:d7:
                    b4:39:31:91:e1:83:e0:a0:87:d6:d8:03:c5:ec:4d:
                    ea:1a:7e:6e:73:36:57:43:78:79:87:57:e0:fb:1e:
                    6b:fc:aa:5e:01:ea:3e:68:bb:17:5c:b3:2b:75:c0:
                    38:56:90:38:29:4d:a5:bd:69:b6:e5:8e:49:36:35:
                    42:cd:26:c3:fe:9b:ea:01:97:a9:0f:99:ff:4a:c1:
                    fa:a0:91:77:c7:27:c6:9b:54:8c:a5:ba:81:45:92:
                    23:6c:38:cb:ed:cc:e2:af:c2:eb:34:3e:97:b7:3c:
                    b4:b7:f7:5d:5e:31:0f:c5:ce:cd:d5:9f:57:e6:4c:
                    5b:1f:18:78:ad:8c:56:87:12:27:e0:e8:72:62:c7:
                    ae:99:0a:20:ac:bf:76:44:5c:39:e1:2f:05:62:c4:
                    f6:82:0d:c8:87:87:ed:e1:ff:75:a5:cf:1e:2e:47:
                    10:e6:19:e7:74:cc:8e:fe:14:79:21:c7:a4:3b:42:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.12.0/22
                IPv6:
                  2804:7890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271251

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:48:20:00:7a:d9:46:b8:bb:83:14:55:99:5d:ea:09:99:
         1d:d0:04:ec:e7:5a:71:18:33:da:72:2c:05:80:ea:73:30:64:
         c2:cf:fd:86:8a:2c:30:1e:b9:14:5b:3e:3d:6b:14:87:50:2b:
         a8:98:7b:c6:41:b9:23:b5:ae:97:a7:03:e8:fa:d3:ba:ab:fb:
         71:bc:8f:6f:55:0a:22:ba:b5:ba:8b:6b:0f:46:88:14:7e:26:
         f9:fd:ee:1d:7c:92:ba:eb:17:9e:3f:50:39:4f:4a:9e:57:7d:
         bc:ec:67:31:60:ad:67:e7:de:68:0d:29:05:87:26:1b:e7:3f:
         be:80:b3:d1:49:4f:1e:7f:29:92:78:2a:8c:19:40:33:7e:e5:
         52:9d:ca:c6:50:a0:66:34:77:3b:44:35:48:83:e0:f1:07:9a:
         c6:30:d5:2f:f3:61:a6:e2:f4:4e:5c:8f:34:14:8e:0c:f8:d8:
         35:5c:b8:2d:9c:2c:f2:ca:6b:ac:a6:4e:76:26:4f:97:80:5c:
         e0:39:b4:6c:ec:57:04:a8:f5:e4:6b:fa:ac:75:8a:13:75:af:
         6b:b2:88:10:a3:48:10:2d:d5:8c:a0:1d:a9:30:16:18:a7:c2:
         67:de:94:c5:61:5d:b2:4a:8b:dc:c2:7d:a8:22:29:ec:34:5c:
         c3:11:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org