Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0597ACE056437153CB72D554FEAB59CAC3FD0F2.cer
File:                     A0597ACE056437153CB72D554FEAB59CAC3FD0F2.cer (raw, json)
Hash identifier:          cm/4v8VpdMzwBqeexE2B44FKHNNDlADC8fgXecICMJU=
Subject key identifier:   A0:59:7A:CE:05:64:37:15:3C:B7:2D:55:4F:EA:B5:9C:AC:3F:D0:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BABAB560B0DFC6C3DFEA5CB1053938E2C8C487F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/A0597ACE056437153CB72D554FEAB59CAC3FD0F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 17:27:32 +0000
Certificate not after:    Tue 27 Feb 2024 17:32:32 +0000
Subordinate resources:    AS: 267328
                          IP: 45.233.152.0/22
                          IP: 2804:4bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ab:ab:56:0b:0d:fc:6c:3d:fe:a5:cb:10:53:93:8e:2c:8c:48:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 17:27:32 2023 GMT
            Not After : Feb 27 17:32:32 2024 GMT
        Subject: CN=A0597ACE056437153CB72D554FEAB59CAC3FD0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:f1:bb:c4:b1:0f:f5:fa:3b:05:a5:c6:4d:
                    9e:a8:86:54:d7:cd:fb:f4:4b:df:c7:c0:c9:3a:38:
                    a8:a9:13:4a:bf:2a:21:f1:5d:b9:c4:41:e4:17:20:
                    79:20:55:93:14:24:c2:c4:45:e9:35:0a:2e:8c:02:
                    a7:d1:48:f7:23:72:26:9d:37:1c:93:de:99:84:17:
                    61:9f:92:0f:2d:d4:1e:7f:9f:b6:3c:0b:90:90:71:
                    67:de:15:01:56:96:40:89:86:2b:c5:27:07:64:5c:
                    38:50:0a:64:d9:2c:89:95:ab:08:04:82:15:cf:82:
                    a3:30:d6:0b:fb:1d:13:b2:cb:16:54:7c:4a:bd:87:
                    c5:d9:74:23:54:f2:ff:41:27:95:f9:10:d9:0a:bb:
                    48:6e:5f:38:f8:62:0f:4e:88:e3:68:a9:5c:8b:73:
                    f1:37:d2:3d:d1:d7:18:ab:55:a6:37:cc:c0:12:62:
                    fe:04:cb:d0:96:02:c8:74:19:f5:df:18:9a:90:d0:
                    e4:7e:0b:65:01:e2:12:0e:c6:82:f7:3c:26:2f:56:
                    d0:85:e6:4b:86:c2:1e:96:94:29:62:00:21:aa:b2:
                    f9:74:a6:f8:5e:35:6e:f4:3c:98:4e:a0:98:8e:c7:
                    90:c1:90:4c:70:13:ae:33:68:69:29:82:a5:2f:4d:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:59:7A:CE:05:64:37:15:3C:B7:2D:55:4F:EA:B5:9C:AC:3F:D0:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/A0597ACE056437153CB72D554FEAB59CAC3FD0F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.152.0/22
                IPv6:
                  2804:4bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267328

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:50:b8:cc:91:1d:6a:19:f5:53:83:38:41:64:cd:a2:4b:
         2a:dd:19:c3:ea:35:20:00:8e:ec:2a:43:31:24:72:8a:00:84:
         78:65:b7:cf:03:ac:ba:d4:6c:1b:54:85:ad:65:7f:55:d3:e4:
         d8:ab:2b:cc:5c:8b:1e:7e:ee:c4:0d:93:6c:86:16:1c:88:54:
         a9:d6:92:7e:c3:b2:a3:8f:ee:14:30:af:b4:2e:32:d4:4e:08:
         84:49:27:de:26:38:93:4f:b2:09:ab:cb:43:0e:69:7d:97:59:
         b3:d7:1d:d4:ed:84:96:12:4d:67:58:4b:29:02:b6:f5:4b:73:
         20:86:77:1e:67:cd:01:7d:44:d9:01:a2:60:8e:6e:20:45:ea:
         9e:e9:fe:8a:9d:89:d5:2c:e5:18:77:c0:0e:7a:46:b4:76:8f:
         2b:c9:08:9d:3b:ae:c7:ef:b4:85:e0:de:da:e4:46:9b:e2:3f:
         9a:9b:6b:3e:67:88:5c:61:27:50:ea:14:00:c7:74:87:ac:1a:
         f9:56:a3:17:1e:4d:8b:b1:91:47:6b:1f:ec:4a:bf:7b:63:1e:
         fb:1e:82:06:50:2b:02:21:73:fb:82:ed:62:9b:c1:8d:fb:5f:
         5e:69:84:5c:89:f4:9e:4c:e7:bb:a2:82:4b:94:91:0a:93:ad:
         92:d7:49:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org