Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.cer
File:                     A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.cer (raw, json)
Hash identifier:          8MBXSL/61yubNxXB+qTJVAnrM5FD8tIIQ8d6tb3mKmQ=
Subject key identifier:   A2:FB:72:FF:52:FF:94:70:9F:69:00:B1:F0:FA:B8:36:08:FC:2C:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5ABB1D2CE1EC55F79588856E408CCE7CFCB58841
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Sep 2022 17:35:47 +0000
Certificate not after:    Thu 21 Sep 2023 17:40:47 +0000
Subordinate resources:    AS: 264000
                          IP: 143.0.124.0/22
                          IP: 2804:2924::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bb:1d:2c:e1:ec:55:f7:95:88:85:6e:40:8c:ce:7c:fc:b5:88:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 17:35:47 2022 GMT
            Not After : Sep 21 17:40:47 2023 GMT
        Subject: CN=A2FB72FF52FF94709F6900B1F0FAB83608FC2C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:e7:5b:e9:03:61:a8:d3:c0:8f:4a:0d:8f:
                    f6:33:58:97:6a:73:57:86:38:f6:cf:7d:fb:2f:01:
                    0f:96:e4:26:cc:d5:c5:96:1e:a1:95:bd:a3:05:bd:
                    66:c7:5a:01:0a:68:0e:e6:f9:a4:9d:d1:45:13:9f:
                    19:de:21:5c:e7:7f:2e:d5:f2:2e:45:ab:6e:c6:4a:
                    01:59:47:04:27:10:39:5f:5e:66:c2:e7:e1:e0:b1:
                    90:25:24:54:d5:f0:18:aa:2a:e4:eb:6a:d9:e5:af:
                    a2:61:c4:81:fe:9a:a4:13:cf:c2:02:47:ad:ef:18:
                    2c:39:b9:33:e3:c8:d7:d4:53:ee:fa:33:c5:ff:d1:
                    45:52:02:69:db:48:9b:8d:23:e4:cf:bb:b9:bb:68:
                    e0:04:64:3f:42:6e:32:22:6e:6b:26:ff:c9:a2:83:
                    77:e7:16:8e:07:3b:e2:e6:9c:ce:61:83:a7:26:ef:
                    78:8d:59:67:00:e1:b4:bb:22:68:06:59:fa:2d:e1:
                    ea:ae:02:af:f0:8f:e5:5b:21:0e:30:a4:27:c0:a7:
                    5c:f5:03:63:89:00:75:3e:e8:ac:90:c6:f0:8d:8f:
                    06:63:77:f8:df:d5:3c:c1:64:88:05:ca:ba:a2:16:
                    7c:b3:51:15:4a:4d:c9:c1:28:8a:fb:3d:ec:37:03:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:FB:72:FF:52:FF:94:70:9F:69:00:B1:F0:FA:B8:36:08:FC:2C:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A2FB72FF52FF94709F6900B1F0FAB83608FC2C70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.124.0/22
                IPv6:
                  2804:2924::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264000

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:e9:db:c3:d1:c4:ca:e7:87:03:36:ce:4c:08:77:94:8f:
         4d:e3:c1:8f:75:54:3d:84:75:c1:fd:6f:4d:5f:d2:5b:47:be:
         48:d6:11:d2:74:41:55:51:e5:50:2d:80:50:b4:44:fd:e0:65:
         19:af:f1:26:ff:dc:1a:34:ed:09:df:3f:a3:11:15:52:20:80:
         d0:90:b4:9e:d5:5f:00:7d:9c:4c:ec:20:cc:bc:52:e9:ba:9b:
         38:47:65:ac:f6:b0:40:ad:d8:e9:6b:c7:6e:2d:e6:84:02:ee:
         a7:9e:29:4a:a1:33:e2:4b:88:8d:17:27:86:9e:91:c0:a9:d4:
         3b:5b:d3:07:64:74:02:cb:9d:15:7b:a4:ff:3e:41:1a:20:cb:
         94:8d:a8:a6:ac:18:75:2e:af:c2:c2:7f:52:4e:e3:a1:a4:9e:
         f8:81:05:a4:8b:66:74:8d:ff:3b:e1:75:45:57:a0:e9:da:60:
         bf:f4:a7:cb:57:02:d0:0d:6e:d9:33:16:dc:5b:4f:37:ca:4e:
         f3:38:4c:7d:7e:64:61:d3:e8:e6:cc:15:df:27:99:28:78:e5:
         19:ee:43:b7:e3:e3:fc:66:e7:ca:d5:26:e9:5e:79:59:25:3b:
         49:f4:e4:45:2f:1a:ff:7b:f8:d6:a5:f6:58:0a:5a:41:ef:cc:
         c5:e0:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org