Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0E11F583624A0AC56335284138F60E583C4783A.cer
File:                     A0E11F583624A0AC56335284138F60E583C4783A.cer (raw, json)
Hash identifier:          CxmxoPV+8Rn5XCfgDciIRVfNX+3WlBo+qaEbre5y91I=
Subject key identifier:   A0:E1:1F:58:36:24:A0:AC:56:33:52:84:13:8F:60:E5:83:C4:78:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       584AC9100E5EF967061A1230E424C68CA0EA9D21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/A0E11F583624A0AC56335284138F60E583C4783A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Mar 2022 13:17:57 +0000
Certificate not after:    Wed 08 Mar 2023 13:22:57 +0000
Subordinate resources:    AS: 262346
                          IP: 138.97.0.0/22
                          IP: 143.202.224.0/22
                          IP: 170.150.100.0/22
                          IP: 177.125.160.0/21
                          IP: 177.125.204.0/22
                          IP: 179.107.56.0/21
                          IP: 2804:81c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4a:c9:10:0e:5e:f9:67:06:1a:12:30:e4:24:c6:8c:a0:ea:9d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 13:17:57 2022 GMT
            Not After : Mar  8 13:22:57 2023 GMT
        Subject: CN=A0E11F583624A0AC56335284138F60E583C4783A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:5a:cf:04:7d:c7:e2:3b:0b:a5:64:f9:48:
                    2b:e7:53:fc:f5:6b:ab:7a:8f:c1:91:18:c2:b7:91:
                    a7:0a:16:38:a8:c2:13:42:4c:d8:ad:72:a1:8d:9c:
                    66:ea:61:16:6f:cb:15:79:4c:40:9c:22:95:27:73:
                    a8:23:b0:bb:08:ee:90:88:cd:f9:7e:4d:f7:e4:2b:
                    45:31:17:f5:d1:7c:de:1c:0a:8a:5d:95:c0:8e:df:
                    65:9a:d8:a0:31:30:79:57:71:53:6a:4b:f0:16:6c:
                    81:0c:a9:ed:a7:f4:15:8e:96:b1:fd:dc:92:6f:86:
                    9e:c2:16:27:05:d2:52:3f:1a:80:36:ff:d9:c1:ac:
                    27:a9:64:dc:9f:94:97:cd:a6:ec:19:e1:23:70:4e:
                    89:8a:71:ad:17:42:9e:37:e5:55:26:90:ae:6d:5a:
                    ce:71:cf:0a:1e:5e:75:26:63:9b:8b:f0:b6:67:5d:
                    f8:d4:71:7d:65:ba:0b:9b:89:c0:33:26:02:ad:02:
                    bd:82:9b:87:7c:78:15:20:3b:03:9c:39:32:63:30:
                    76:ec:56:ba:29:d2:7c:57:df:85:1b:f8:b5:b5:16:
                    8a:94:9f:79:8c:97:11:b1:fd:0a:d1:65:46:74:84:
                    e4:a1:69:3d:77:9b:0a:9b:18:8d:6a:4b:98:0a:21:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:E1:1F:58:36:24:A0:AC:56:33:52:84:13:8F:60:E5:83:C4:78:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/A0E11F583624A0AC56335284138F60E583C4783A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.0.0/22
                  143.202.224.0/22
                  170.150.100.0/22
                  177.125.160.0/21
                  177.125.204.0/22
                  179.107.56.0/21
                IPv6:
                  2804:81c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262346

    Signature Algorithm: sha256WithRSAEncryption
         9e:94:58:a0:f8:6b:dc:83:6a:ce:2e:7f:dc:c1:d8:45:ab:1b:
         b9:ff:39:d2:2e:99:2a:f9:52:63:3b:53:85:b5:43:4c:9e:16:
         59:d5:37:06:f1:b1:f3:7f:5e:6d:fb:cc:5b:96:ad:dc:50:68:
         dc:29:01:6c:62:be:34:6d:71:28:08:e9:83:af:40:77:d8:72:
         9b:4d:6c:6e:fd:8e:8e:0c:c3:dc:02:c8:03:07:e0:47:9c:32:
         68:cb:fc:f6:0c:0d:b9:eb:e4:59:80:93:a1:1a:6c:ac:65:36:
         d2:1e:12:eb:7b:85:85:be:be:43:72:28:df:df:40:bf:47:50:
         37:82:ee:12:39:d5:50:3f:f5:a9:39:e4:89:9b:ed:f5:38:d9:
         0f:4c:c7:41:9e:c7:ea:97:40:db:7b:f7:3b:93:a4:24:0c:0e:
         f2:b1:15:44:8e:57:d3:8c:84:bc:f7:e7:04:12:b4:43:5b:ac:
         6d:a7:c9:d9:90:15:f5:27:68:42:8e:ec:a3:22:52:ce:f6:3c:
         54:c7:2b:a6:0e:27:97:65:b6:62:b4:93:af:96:04:7b:97:3c:
         8d:d5:6a:7d:5a:e8:f9:96:3c:39:f6:e7:c0:5b:fe:b6:a6:1f:
         f1:e0:de:d0:f8:70:9f:39:53:e5:83:ca:4f:71:4c:4d:2a:4a:
         ab:9a:83:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org