Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer
File:                     A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer (raw, json)
Hash identifier:          TaRwPBxW7xXpPBAhNSi0rUqzk1RQzr1meLOmX5FJbuc=
Subject key identifier:   A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F05DB142AF6C035831E7DA36BD9F1D014B94DE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2024 19:59:12 +0000
Certificate not after:    Thu 23 Jan 2025 20:04:12 +0000
Subordinate resources:    AS: 267263
                          IP: 160.238.24.0/22
                          IP: 2804:4ac8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:05:db:14:2a:f6:c0:35:83:1e:7d:a3:6b:d9:f1:d0:14:b9:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 19:59:12 2024 GMT
            Not After : Jan 23 20:04:12 2025 GMT
        Subject: CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:1a:e0:58:d0:24:87:85:2e:4e:f7:89:06:
                    29:87:84:f4:44:bb:a4:77:da:06:9f:ef:29:06:5e:
                    2e:de:af:2c:f2:4a:c9:32:73:87:76:45:80:9b:01:
                    59:36:29:52:25:aa:fe:ea:50:c5:ed:81:c1:d2:d9:
                    d4:70:33:86:41:b3:44:9f:49:ad:b7:e9:82:fe:5d:
                    c9:e6:9b:c5:58:d9:33:09:9d:97:7e:1d:35:fd:b6:
                    5d:11:cb:fa:a2:d8:42:c2:dc:f2:5b:c7:00:eb:8b:
                    1e:d1:c2:3a:1b:8e:47:90:a0:88:3f:8a:aa:aa:7a:
                    45:dd:03:15:c7:30:37:d4:29:67:5e:09:37:20:94:
                    fe:24:df:86:76:26:1d:cd:ff:32:70:13:44:75:c7:
                    6c:76:c6:98:48:7a:32:a2:26:08:93:c8:65:e0:cd:
                    d8:46:aa:00:f0:8b:b3:42:e2:be:f8:75:2d:fb:a8:
                    da:ed:61:c8:5d:bc:28:f7:ec:aa:ab:0b:b0:5d:81:
                    00:e4:0b:99:c0:05:94:79:dd:39:18:c9:98:37:99:
                    ef:ac:51:f8:64:ed:91:f1:dd:3c:dd:b3:89:7a:af:
                    6a:f4:69:cf:36:de:9f:49:a8:39:83:3c:df:67:07:
                    7e:3b:fa:b1:97:2b:6c:2e:86:19:d4:14:a4:78:60:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.24.0/22
                IPv6:
                  2804:4ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267263

    Signature Algorithm: sha256WithRSAEncryption
         9d:9e:26:31:6e:99:51:26:e9:6b:10:cf:a3:63:b1:a2:04:4f:
         ec:87:46:93:27:11:28:b0:0b:ea:b5:ee:1e:5f:99:a7:8d:be:
         45:f9:6b:e9:1d:b9:15:4f:ed:43:d5:20:fe:3a:bd:cb:f5:a5:
         f4:c8:5d:27:f7:d9:73:39:ef:df:02:b7:d9:76:cd:6f:a8:16:
         58:6e:11:27:ef:9a:18:6e:b4:f5:c0:75:03:87:73:3f:3f:73:
         be:f8:22:7d:c0:5e:34:51:5f:42:ac:e1:81:d8:4d:fb:0f:7e:
         f4:0c:2d:ff:3b:c3:40:1c:f0:56:12:ee:22:f9:18:4b:dc:17:
         fa:3a:76:25:26:02:44:dc:ae:55:8f:a7:3f:0e:0b:aa:a4:c7:
         2f:2e:2e:a2:be:70:13:6f:5d:c2:d2:a5:83:e3:da:f7:ef:de:
         78:f4:dc:21:2b:bb:8e:8f:7c:c7:06:b2:f7:03:54:5c:fa:39:
         3b:44:6b:bf:a4:c3:a8:c6:20:9d:30:34:07:43:3c:be:4a:21:
         f7:87:87:a2:01:d3:e9:0c:9a:62:ef:4b:c3:76:bf:cd:48:7d:
         bd:9d:fc:99:a3:9f:d9:25:dd:6d:aa:60:5d:26:58:3b:39:e1:
         90:e4:1f:58:99:0a:9b:65:11:e4:fb:69:57:e9:a9:91:53:c1:
         7e:0e:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org