Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.cer
File:                     A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.cer (raw, json)
Hash identifier:          ICf8sL9fBZtqsiXZF94P3VtU2XP1F+ZS3Ev8LJJQaig=
Subject key identifier:   A0:BF:27:22:63:CB:0F:3B:93:DC:90:64:3A:26:B1:B2:01:C8:CA:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       127F527C93A0BB08E9D9DF77B125CE186FDC9004
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 17:49:19 +0000
Certificate not after:    Thu 05 Dec 2024 17:54:19 +0000
Subordinate resources:    AS: 266440
                          IP: 170.82.20.0/22
                          IP: 2804:37dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7f:52:7c:93:a0:bb:08:e9:d9:df:77:b1:25:ce:18:6f:dc:90:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 17:49:19 2023 GMT
            Not After : Dec  5 17:54:19 2024 GMT
        Subject: CN=A0BF272263CB0F3B93DC90643A26B1B201C8CA5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:ba:27:2f:42:9e:ac:2f:97:9b:b6:c1:89:
                    5e:78:bf:f5:ec:b2:cd:9b:86:54:b5:5a:10:f8:19:
                    cd:70:30:97:a9:65:c6:7e:4e:0d:fb:0b:79:15:b7:
                    85:9c:96:cc:c6:fc:71:4d:53:e8:49:d1:1d:a9:e6:
                    ae:e5:ec:96:85:b4:ce:0b:26:03:23:8d:f0:8e:e0:
                    3c:d3:dd:9b:05:28:35:42:59:67:e0:ca:3b:a5:2c:
                    aa:93:eb:64:1b:9c:7f:86:80:8e:81:12:ee:96:32:
                    46:4e:b5:ac:52:e7:79:63:bb:a2:a0:a8:1a:87:9c:
                    9a:fe:87:9e:fa:9c:e7:5a:3e:8d:b3:cc:c2:c5:4e:
                    ea:5c:ff:5b:83:86:5d:4c:77:81:bf:e4:ae:21:c0:
                    54:f8:71:2c:56:ad:bb:a3:d5:c2:fc:9c:68:eb:96:
                    a4:ec:09:80:df:70:d0:dc:c1:05:c6:00:4c:a2:bf:
                    d1:0d:db:ca:83:9c:9a:b3:23:a7:9e:7f:7b:e4:8a:
                    2d:22:b6:68:8d:a0:4f:88:38:a1:15:21:65:f3:b0:
                    21:ce:f3:d5:26:52:28:5e:4c:8b:8b:26:0f:38:1f:
                    ac:89:00:ab:72:8b:bb:45:fb:2c:c5:fd:e2:8a:f2:
                    f1:84:d7:2a:8b:d6:59:f0:b7:d8:ce:b1:1b:62:5e:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:BF:27:22:63:CB:0F:3B:93:DC:90:64:3A:26:B1:B2:01:C8:CA:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.20.0/22
                IPv6:
                  2804:37dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266440

    Signature Algorithm: sha256WithRSAEncryption
         2c:d1:c5:b9:7b:6b:62:30:08:3d:10:d5:2f:40:37:5d:8b:ad:
         5e:bf:4f:94:b6:66:ce:20:aa:fa:e2:8f:f4:d8:00:39:7c:00:
         71:0b:ad:af:b3:28:e3:9b:f7:ae:e5:99:8d:f9:cb:53:11:86:
         2c:48:95:9e:f0:3b:f9:62:d1:a1:22:92:97:88:34:fd:d3:83:
         b7:33:8d:24:53:ee:3d:ac:36:31:85:08:2f:da:9f:05:66:8a:
         29:81:5b:11:c5:e8:0a:b9:76:e9:1a:b2:17:b9:50:65:45:15:
         65:18:6d:77:f8:87:3d:63:93:89:93:1a:37:1f:30:ae:19:bd:
         25:fa:d8:2d:fd:a5:94:52:db:f0:64:47:95:25:9e:20:b9:06:
         d7:18:41:26:b9:b9:1b:86:ce:4b:dc:0f:b2:bc:34:61:57:13:
         e6:4e:99:71:c8:ec:9a:90:4e:43:a2:cc:9b:3f:a6:58:9f:d5:
         3c:a1:3e:85:a5:57:11:85:c6:ac:02:1b:9a:c9:ee:ee:97:29:
         aa:67:7c:3c:92:b4:a6:8b:f9:ae:d0:7b:68:65:fb:c0:20:6e:
         67:31:05:ec:f2:4f:61:ae:65:7d:2a:10:4e:4a:83:11:d1:61:
         5b:19:ba:8b:e4:b5:3b:18:0b:b6:ed:3f:0f:18:af:de:c2:5a:
         e2:54:e1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:31 2025 by rpki-client