Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
File:                     A52F416E7DE17981FB7334B51C91FD583746E12E.cer (raw, json)
Hash identifier:          XaC2Jar1LxJYP3O1865JKDEjzMj6mr8jlZwVXzNVo5k=
Subject key identifier:   A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C5EFC8B235EF247EDBFCD6F6CECA872461A29FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 15:42:42 +0000
Certificate not after:    Mon 17 Feb 2025 15:47:42 +0000
Subordinate resources:    AS: 269425
                          IP: 45.186.32.0/22
                          IP: 2804:6464::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5e:fc:8b:23:5e:f2:47:ed:bf:cd:6f:6c:ec:a8:72:46:1a:29:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 15:42:42 2024 GMT
            Not After : Feb 17 15:47:42 2025 GMT
        Subject: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:7f:de:74:52:da:a6:03:3c:9e:aa:ba:f2:
                    98:27:c5:58:66:fb:31:20:01:15:b0:83:cf:08:39:
                    07:89:a7:bc:20:91:3d:86:1f:27:75:24:a1:cc:88:
                    b7:53:21:e0:33:3b:39:a9:6c:d1:ff:65:66:ab:4a:
                    16:48:49:49:4a:87:47:08:d0:be:03:53:ab:43:37:
                    0b:82:ee:90:69:4b:a4:2a:9c:c1:45:a3:b5:c2:af:
                    2e:e4:bb:61:57:dc:18:e0:5e:42:82:2a:40:e6:94:
                    0a:a6:4b:ee:7b:ee:a1:8f:ea:85:fb:e9:19:90:1d:
                    a1:da:20:65:af:aa:f6:8c:84:22:09:07:53:16:f5:
                    ea:52:35:57:de:7d:de:c7:ec:e7:7a:1a:02:68:c4:
                    3d:24:bd:8a:ca:36:2f:23:b2:41:cc:06:49:81:ae:
                    10:59:fe:7f:d3:1c:cb:86:8c:ca:9f:63:c9:ae:cf:
                    98:78:b5:63:d5:a5:73:1a:84:83:a8:b8:dc:f5:f0:
                    12:cc:7d:24:1c:c8:5d:c8:ff:94:af:4e:cf:66:aa:
                    9d:12:22:a5:63:49:5b:84:d8:a6:b0:d4:2d:f3:c4:
                    ba:61:11:2f:2b:0f:26:1e:d3:0d:c5:24:9a:dc:5a:
                    d9:95:00:eb:fd:6e:8c:87:12:50:a0:88:11:3e:c7:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/22
                IPv6:
                  2804:6464::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269425

    Signature Algorithm: sha256WithRSAEncryption
         07:81:0b:4d:ca:de:68:53:6f:bf:89:32:5a:80:90:33:8a:8f:
         3a:bb:16:74:aa:f9:b2:e8:7d:c2:f7:ca:10:ed:26:4e:eb:29:
         8f:b7:5d:c6:77:b5:e9:77:85:c5:22:c8:c8:16:de:10:68:c1:
         8e:aa:d4:84:b8:69:3d:ac:53:da:42:da:13:4a:ee:b6:18:44:
         e7:1b:7a:60:4a:be:22:c0:5f:e1:3f:8c:bd:9b:52:38:54:83:
         a4:c4:d1:b7:ad:89:91:0f:88:7d:b0:ec:00:60:fd:c9:98:53:
         67:52:33:aa:e4:72:ca:d6:73:dd:69:fc:bc:f8:ea:fb:10:52:
         a2:37:e3:36:c3:09:d7:be:d0:bf:1a:a7:d0:59:4b:49:9a:35:
         9b:5d:83:e0:d7:39:74:3d:f2:6e:68:f6:4b:ee:27:16:e8:dd:
         83:e8:69:03:56:c5:fe:e7:7d:d1:f6:26:2f:d3:15:06:c8:25:
         22:8d:f7:25:43:47:70:5f:7e:10:c1:38:bf:4c:ba:f1:8a:c5:
         3f:46:1c:e4:ae:5f:76:9a:8f:5e:fa:8c:6c:7f:28:a7:e1:76:
         1d:c0:4f:4b:e5:f3:20:51:d7:5c:a2:b9:cf:ac:72:f3:c6:d3:
         ca:38:11:db:97:0a:e6:81:b5:5d:b1:70:34:d8:2e:2a:fe:61:
         57:4e:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org