Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.cer
File:                     A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.cer (raw, json)
Hash identifier:          rjemoAqu+ABqMbB5MEigQFURqzmas05o0c9o0YS5RLg=
Subject key identifier:   A0:75:17:34:EC:AA:A4:CA:4F:27:E6:F5:7D:46:AB:3A:41:24:B6:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       452CE9589A99948C9DE7E83E7E1AB30A1AE8F6B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 13:06:46 +0000
Certificate not after:    Tue 18 Feb 2025 13:11:46 +0000
Subordinate resources:    AS: 53209
                          IP: 177.11.136.0/21
                          IP: 186.233.176.0/21
                          IP: 2804:295c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2c:e9:58:9a:99:94:8c:9d:e7:e8:3e:7e:1a:b3:0a:1a:e8:f6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 13:06:46 2024 GMT
            Not After : Feb 18 13:11:46 2025 GMT
        Subject: CN=A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:46:09:c8:92:2a:97:5f:43:d1:94:22:3b:
                    f8:76:6e:4a:f9:6c:f5:72:58:80:c9:72:7c:28:b7:
                    96:bd:3d:8e:34:dc:f9:3e:bc:50:41:ce:f7:57:ff:
                    8d:30:cb:8d:1c:a4:1f:dc:b4:cb:73:79:9c:1e:16:
                    c4:12:59:69:82:3e:2d:af:9e:d2:82:e5:a2:84:a3:
                    0e:a7:90:10:cb:de:d6:ba:e8:00:c0:c2:54:f7:23:
                    85:e7:19:1f:da:fa:fb:87:60:b0:fd:a0:29:21:b2:
                    8e:ea:2b:dd:45:00:d2:fb:ac:bb:3b:63:1a:2f:11:
                    70:d6:20:fa:d7:44:4c:24:dc:45:d1:55:2d:90:e4:
                    e2:28:61:51:8c:32:e1:8b:12:33:0a:26:ad:e0:54:
                    06:8b:c9:a9:63:98:c2:70:80:4e:45:a5:dc:17:9f:
                    1b:d9:bd:2c:7d:b9:d2:8c:9d:d5:d5:f7:5d:61:62:
                    2d:66:d7:9e:1c:fe:d7:de:5d:60:30:21:dd:69:45:
                    e5:44:bb:53:35:43:60:87:d0:8b:ea:f9:23:45:94:
                    58:f4:42:90:50:5d:a3:15:90:63:d6:24:ce:31:4d:
                    f2:fd:21:c2:3c:4d:af:26:4b:50:63:23:09:93:77:
                    87:a7:c9:ad:87:9a:86:d8:b7:48:17:eb:53:44:7d:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:75:17:34:EC:AA:A4:CA:4F:27:E6:F5:7D:46:AB:3A:41:24:B6:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/21
                  186.233.176.0/21
                IPv6:
                  2804:295c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53209

    Signature Algorithm: sha256WithRSAEncryption
         7c:4c:4e:5b:52:91:fa:4c:ba:ea:6f:8e:0b:87:04:1d:e9:d2:
         17:67:d2:00:0c:b5:f6:46:36:5a:36:36:1b:cc:5b:b1:7c:4b:
         f9:b5:97:7e:f8:ed:ab:10:10:cc:f9:4c:1f:da:1f:12:8e:54:
         8c:7d:fb:13:6f:59:ea:d1:27:bc:98:8e:3a:7b:da:a8:e2:63:
         fe:4e:02:6d:6a:c4:54:ad:3d:a8:dd:9c:eb:0f:af:c1:7f:29:
         2a:85:2b:86:bf:fc:d9:cc:a7:ba:40:ed:d4:65:54:15:99:4e:
         4a:84:40:3c:e9:d1:6b:ec:f4:20:a5:d9:c6:4b:61:cd:e8:00:
         58:dd:47:79:46:65:31:f1:9b:ac:08:4e:ff:6a:e9:8d:69:8f:
         6b:da:54:4f:fd:46:26:d8:33:c5:6c:80:8e:68:05:a6:56:c7:
         5b:53:ed:bb:52:73:5c:2c:8e:df:d0:dc:85:52:25:60:ce:48:
         61:58:33:a5:ec:b6:a7:df:70:7f:27:99:19:33:2f:a8:36:4f:
         82:19:45:e4:3c:d0:85:a1:43:3a:fc:da:b2:45:93:e3:78:04:
         6c:0d:3e:bf:48:c9:b6:2a:b5:c3:40:c6:4b:ff:ba:f3:58:77:
         87:b1:10:ce:26:47:09:a8:91:93:85:08:7f:99:42:4e:63:86:
         a3:9c:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org