Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0A3727E275947AD7C7114D9AC617F976007DBD9.cer
File:                     A0A3727E275947AD7C7114D9AC617F976007DBD9.cer (raw, json)
Hash identifier:          bNstHX6qPYVtH26I9tn6CGqtblDBI+MFcPcDFNfjbNE=
Subject key identifier:   A0:A3:72:7E:27:59:47:AD:7C:71:14:D9:AC:61:7F:97:60:07:DB:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32E99DA0FCF86181B8043E7D1C6AF97B85DFE412
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/A0A3727E275947AD7C7114D9AC617F976007DBD9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jun 2022 22:24:04 +0000
Certificate not after:    Tue 13 Jun 2023 22:29:04 +0000
Subordinate resources:    AS: 271422
                          IP: 181.189.68.0/22
                          IP: 2804:7b48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e9:9d:a0:fc:f8:61:81:b8:04:3e:7d:1c:6a:f9:7b:85:df:e4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 22:24:04 2022 GMT
            Not After : Jun 13 22:29:04 2023 GMT
        Subject: CN=A0A3727E275947AD7C7114D9AC617F976007DBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:3c:c8:7c:8e:cf:7f:d4:ce:bf:b6:1d:df:
                    5b:08:aa:f6:b8:c0:0f:84:aa:c1:fd:71:2f:da:6f:
                    21:7f:8e:a1:fb:1f:a1:d1:b1:e9:47:a6:b2:a2:eb:
                    b2:3b:2c:e3:af:60:85:03:e7:52:40:d4:23:87:75:
                    8c:f8:e2:12:b9:23:18:98:90:c5:4c:15:6e:7a:2f:
                    9c:e9:9a:99:74:ab:ca:e4:bc:bd:1d:4d:45:ac:b7:
                    89:e6:d3:9d:08:fa:86:eb:19:1e:e9:a4:ae:1a:58:
                    8f:84:7e:0d:cb:37:ad:52:cb:db:68:8e:f9:e6:61:
                    69:f9:45:58:50:1b:54:53:99:17:79:09:4f:4f:80:
                    80:81:be:8c:a2:2d:f3:74:7c:bb:cc:40:ad:8d:1e:
                    48:00:5d:c0:54:e1:46:1a:cb:ca:7d:a1:b2:66:fa:
                    37:6e:a9:49:4f:9c:86:b2:85:36:e0:7f:88:7d:c5:
                    33:51:ea:48:70:0a:8c:4c:17:93:ae:08:fc:10:87:
                    42:42:83:66:20:fb:f4:4a:7f:49:f7:c0:da:7c:c4:
                    97:a2:52:dc:d4:e7:16:77:71:1b:de:38:34:d4:f4:
                    37:09:01:00:cd:7f:8c:aa:a4:93:64:1c:49:24:a7:
                    63:8f:84:04:91:17:90:5a:c6:c9:07:03:72:ce:a0:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:A3:72:7E:27:59:47:AD:7C:71:14:D9:AC:61:7F:97:60:07:DB:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/A0A3727E275947AD7C7114D9AC617F976007DBD9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.68.0/22
                IPv6:
                  2804:7b48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271422

    Signature Algorithm: sha256WithRSAEncryption
         09:23:dc:22:16:d2:22:fa:2d:80:08:0b:fb:fc:c9:8a:bb:cc:
         62:a0:2a:d5:c5:be:1c:c1:cd:a6:c2:14:a9:14:c3:5e:0c:81:
         a9:6a:6e:00:98:67:08:36:92:c7:52:10:df:bc:b2:51:c4:69:
         58:98:87:95:af:a9:6c:f6:8d:79:71:01:c2:e2:e1:0a:24:15:
         c9:10:40:a8:31:b7:1b:a7:ac:42:09:4f:5a:8c:18:4e:4a:68:
         58:76:f5:3f:7d:f0:0b:55:82:81:d2:ad:f8:56:18:71:27:00:
         52:4b:1f:22:72:ea:52:8e:e7:e8:4e:d7:e5:7b:21:17:ec:b1:
         93:56:00:8c:97:ed:40:70:46:02:a4:77:ba:3e:d1:96:af:1d:
         75:ad:54:22:68:c7:86:ce:38:8f:ef:26:ca:f5:1b:31:4e:3e:
         84:8c:5b:53:53:3a:1e:7f:36:2b:c0:9b:b9:5c:37:4a:4c:f1:
         d0:ec:49:0d:e2:88:53:63:ae:36:67:8d:83:f5:14:a0:2f:09:
         a6:a0:63:43:92:9d:a8:cd:a9:af:0b:f0:a3:a2:23:49:5a:94:
         af:2f:ce:3a:5b:a3:29:3a:9f:17:a1:34:90:a7:ae:e6:af:57:
         d0:15:4e:23:29:ea:5a:12:80:f0:66:d5:49:6d:21:31:75:8e:
         cb:b8:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org