Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.cer
File:                     A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.cer (raw, json)
Hash identifier:          +alohMmkjzUiZqTW5XyjJ48OS7KNKyXJKL9ZibbU1RA=
Subject key identifier:   A1:2B:D2:D5:FE:DA:2D:7B:15:53:F0:B1:8B:08:A4:D8:C0:15:30:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       367580A81DCA4B332717D5A4203B96A1B06327EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 03:45:00 +0000
Certificate not after:    Tue 07 Jan 2025 03:50:00 +0000
Subordinate resources:    AS: 271599
                          IP: 45.174.196.0/22
                          IP: 2804:7e0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:75:80:a8:1d:ca:4b:33:27:17:d5:a4:20:3b:96:a1:b0:63:27:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 03:45:00 2024 GMT
            Not After : Jan  7 03:50:00 2025 GMT
        Subject: CN=A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:44:2e:86:8c:5b:e3:76:c9:05:63:26:b1:
                    2b:9e:be:3f:5d:b8:9b:b5:09:03:26:80:3f:61:55:
                    7d:e5:dd:fc:be:14:81:d7:64:95:a8:8b:08:a9:99:
                    02:ed:65:41:6d:d9:df:cb:c0:46:92:9f:2d:3e:94:
                    81:ce:6c:0c:60:c5:4f:b7:a6:e4:90:4a:64:3a:f0:
                    b2:43:98:6d:a7:e3:60:9f:75:ae:be:3c:f5:45:83:
                    e3:58:74:8f:d6:3e:cd:11:74:a6:94:79:82:50:79:
                    b7:a2:04:7b:ba:ae:f0:ba:c5:2b:dd:31:78:c4:12:
                    b7:d7:b8:bb:e9:44:c1:2b:d5:13:fc:4c:a5:c7:75:
                    50:36:13:71:5d:8f:f4:3a:98:0d:cf:48:e0:a7:5b:
                    e3:36:54:68:a3:50:76:ab:03:15:27:59:83:b1:42:
                    f9:7e:e1:43:d5:c5:a2:63:1e:49:ef:1c:80:01:42:
                    93:1f:c4:bf:3e:24:c2:7d:32:5d:24:52:10:24:0f:
                    00:b1:bd:47:68:18:f3:f2:85:b9:72:b2:a9:ac:29:
                    83:df:bc:6a:16:bd:ba:ed:cf:fa:5f:f4:a3:e3:58:
                    9e:a7:45:2a:d7:af:12:aa:b1:d9:10:4c:ac:ce:9b:
                    0b:f1:94:b4:a6:0a:56:9f:cc:0f:48:66:49:5a:2f:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:2B:D2:D5:FE:DA:2D:7B:15:53:F0:B1:8B:08:A4:D8:C0:15:30:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/A12BD2D5FEDA2D7B1553F0B18B08A4D8C0153067.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/22
                IPv6:
                  2804:7e0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271599

    Signature Algorithm: sha256WithRSAEncryption
         85:96:e9:61:d4:63:bf:61:b8:31:26:bc:c2:18:c9:50:89:b0:
         5e:e3:6f:97:49:90:56:60:91:36:0d:c0:54:4c:3e:26:15:95:
         96:4e:a3:13:d1:38:28:98:5e:d5:4d:50:99:71:3a:ee:27:be:
         3d:bc:04:8a:c8:a9:11:43:ae:0c:20:ad:c6:98:3f:cb:94:d4:
         d7:63:49:d3:5e:61:73:70:d3:b6:4a:3a:91:5a:8f:f6:d7:3f:
         2a:70:01:36:5e:6b:37:1e:c1:4c:65:6e:d2:f2:e9:04:34:c5:
         5d:5a:2c:89:51:ec:de:c5:01:b0:d1:33:c8:66:09:4f:0f:47:
         e5:db:36:76:3c:b6:06:be:f7:de:4d:e0:ba:4f:4d:20:30:ce:
         d1:4b:f5:9c:75:4a:4c:56:15:7f:84:44:cd:5c:7b:3f:d5:de:
         d9:8f:ea:41:af:2f:d4:12:01:10:e6:03:c9:04:af:06:8f:ec:
         4d:2a:87:4d:0a:cd:1d:9d:fb:59:61:c6:8c:24:2b:bf:33:61:
         3a:5a:9a:e2:6b:ba:ed:46:0f:16:d7:17:4a:51:14:29:7c:2a:
         17:f5:69:dc:6b:2c:c3:2d:5a:b3:c0:b9:13:29:b7:63:06:fe:
         36:18:9a:8d:14:8b:fd:37:eb:6d:8c:78:fd:ea:23:ef:a4:8a:
         fb:6c:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org