Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
File:                     A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer (raw, json)
Hash identifier:          ZtIab6uAQilMm/uXlv1Xw3APt5OUDVub5bhjTDzp7r4=
Subject key identifier:   A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5519E729A71079F7643F67DDF43F1CFAE1A94A86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 02:48:44 +0000
Certificate not after:    Tue 05 Nov 2024 02:53:44 +0000
Subordinate resources:    AS: 262518
                          IP: 138.122.172.0/22
                          IP: 177.67.112.0/20
                          IP: 2804:580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:19:e7:29:a7:10:79:f7:64:3f:67:dd:f4:3f:1c:fa:e1:a9:4a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 02:48:44 2023 GMT
            Not After : Nov  5 02:53:44 2024 GMT
        Subject: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:fb:28:88:86:7c:92:43:d1:e9:d3:1e:46:
                    fd:33:ba:1a:68:ac:dc:3a:01:d0:f7:b8:44:0f:57:
                    eb:5f:13:c5:93:3f:a3:48:cf:8b:80:21:18:3b:61:
                    16:8b:2a:5b:73:bf:39:f7:d7:8a:bb:95:d8:be:3a:
                    57:49:17:99:56:43:7a:32:61:ce:06:07:42:04:4d:
                    5e:6e:04:85:1d:00:1c:a5:c1:16:c8:0a:bd:20:e7:
                    64:12:d3:62:68:85:11:e7:70:98:fd:d5:d7:11:5f:
                    ac:1a:23:39:06:62:6c:48:6f:53:24:d6:1d:16:98:
                    8a:35:cb:08:06:0b:b2:41:51:99:1a:73:8f:cb:2a:
                    61:22:b1:f8:20:74:61:72:6a:bf:38:f6:34:0d:76:
                    0b:8b:ff:fb:b3:92:82:10:cf:a8:78:ca:d0:42:a3:
                    cc:3a:08:3f:46:b0:9e:23:e9:ba:19:27:1c:4e:9c:
                    41:0f:84:f7:d7:01:62:b7:bd:13:c8:dd:fb:8d:77:
                    fa:79:72:34:79:25:02:2f:fe:26:db:eb:32:4b:b0:
                    82:e2:a4:23:62:7d:a2:f6:7b:39:d4:3b:2f:76:39:
                    21:30:f2:e3:ee:8f:28:b6:de:aa:f5:9d:59:a9:6b:
                    70:cb:b5:67:5c:04:1c:be:13:1c:07:34:54:99:8b:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.172.0/22
                  177.67.112.0/20
                IPv6:
                  2804:580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262518

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:c9:93:be:86:d7:1e:69:e9:b5:a0:81:4b:c8:76:84:44:
         dd:16:91:15:45:3a:12:66:b0:eb:bc:02:12:ef:a1:01:d1:e0:
         df:1f:e5:22:29:33:67:03:62:ab:cf:b2:53:4c:87:d2:30:89:
         b7:05:76:1b:24:4a:d8:e2:eb:c2:b6:9a:64:42:b3:5f:6c:2d:
         ea:51:90:00:b4:3b:53:c8:6f:f2:e2:1a:d5:26:ba:da:33:06:
         79:18:d0:7a:f8:d7:76:d4:3d:83:1f:d3:6c:f1:2d:d7:ed:81:
         73:49:42:f1:2c:22:c9:ea:76:be:b7:1e:b4:78:b0:6e:16:82:
         de:f2:14:31:f3:b3:92:86:b3:ce:0c:7f:a5:d6:55:e6:f4:43:
         1f:d6:60:6f:45:4d:51:b6:55:3f:11:d5:28:4f:97:cd:7d:90:
         34:5e:66:b3:22:1a:90:c1:ab:1c:5b:3b:b9:2e:5d:f3:7a:6c:
         ae:44:1b:99:b9:e2:3d:6f:1e:79:45:35:37:8c:6b:22:6a:be:
         43:cb:ff:bb:e3:92:fd:8a:8c:0f:28:de:6b:a4:23:dc:5e:fa:
         7d:31:47:7a:0c:0a:b9:85:b2:0d:74:2f:6f:6f:52:bb:a0:90:
         38:77:67:fd:fd:19:31:75:39:67:20:27:d2:a4:3d:16:f9:1e:
         bd:4b:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org