Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A7428E1F6B8E9E278BD46F672EA9B97114211524.cer
File:                     A7428E1F6B8E9E278BD46F672EA9B97114211524.cer (raw, json)
Hash identifier:          /B6Ib0GlDGDsY61UrZ1rxglgmDtGP6XGoxTWtOAJEZo=
Subject key identifier:   A7:42:8E:1F:6B:8E:9E:27:8B:D4:6F:67:2E:A9:B9:71:14:21:15:24
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       295BEC3F5E011A355F867BE677036F793C7E8A76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/A7428E1F6B8E9E278BD46F672EA9B97114211524.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 14:15:57 +0000
Certificate not after:    Mon 16 Dec 2024 14:20:57 +0000
Subordinate resources:    AS: 52855
                          IP: 177.105.80.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5b:ec:3f:5e:01:1a:35:5f:86:7b:e6:77:03:6f:79:3c:7e:8a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 14:15:57 2023 GMT
            Not After : Dec 16 14:20:57 2024 GMT
        Subject: CN=A7428E1F6B8E9E278BD46F672EA9B97114211524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:3d:2b:2f:e8:69:97:dc:f9:03:84:ba:ba:
                    b4:2d:53:10:c1:f1:96:a8:67:69:a9:b6:c5:b5:67:
                    f8:65:e8:3f:2a:14:77:26:a3:2b:cd:bb:03:1b:e2:
                    a8:c5:b0:8e:32:69:ec:4b:3e:ee:54:a3:7f:0f:b3:
                    53:03:3f:51:e3:50:67:12:a1:37:03:ce:ac:cc:20:
                    42:00:4c:e9:73:ce:d3:c0:56:12:25:6d:53:d1:4d:
                    17:6a:ff:14:52:e2:64:7b:ad:b2:5e:26:60:06:ce:
                    f0:63:0a:5c:ba:df:0a:57:6f:51:3c:74:e5:5a:d0:
                    8f:f5:5b:1f:42:a4:56:6a:99:3f:e0:0e:c2:4e:92:
                    52:d8:ab:f5:b4:54:a4:1b:f0:17:58:ce:57:80:bc:
                    4d:55:e3:03:43:63:58:1e:95:28:f8:6b:2b:55:b9:
                    e5:9c:e2:7e:3f:a3:61:7f:4f:4a:3b:97:68:a1:76:
                    3d:0d:f5:ca:2b:ed:4b:fc:c8:64:b8:38:3a:4c:6b:
                    7d:5b:a7:01:a2:37:5a:e7:ce:19:d4:3f:a8:9e:71:
                    39:38:33:0f:c4:6f:68:41:cb:45:a9:69:a6:f4:d1:
                    3f:36:08:f2:c2:68:af:0f:f7:a8:8d:5a:24:48:e9:
                    91:20:d1:1b:0d:ab:58:19:a5:bf:06:2b:5d:02:24:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:42:8E:1F:6B:8E:9E:27:8B:D4:6F:67:2E:A9:B9:71:14:21:15:24
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/A7428E1F6B8E9E278BD46F672EA9B97114211524.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52855

    Signature Algorithm: sha256WithRSAEncryption
         1f:51:0a:00:18:56:5e:61:e3:27:16:9c:ba:c7:c8:f2:93:71:
         be:d8:8f:ac:7a:05:a7:13:64:2a:30:99:77:71:97:97:94:57:
         99:a3:fc:fd:0a:9a:11:6e:ad:e8:70:ab:9e:fa:48:65:c6:aa:
         24:f6:89:06:fc:fd:13:b6:29:1f:33:75:3e:e1:11:7f:ab:21:
         c6:75:52:0e:5d:82:af:85:5d:c7:73:ae:7b:0a:e4:82:4f:41:
         74:25:69:5f:90:0f:c5:af:cd:ea:34:02:99:3d:89:bc:9e:03:
         07:57:74:ae:13:dc:3f:b7:40:7f:ba:91:38:ad:b3:00:db:21:
         18:07:66:69:7b:21:67:48:68:ca:3d:0c:ea:c3:a6:73:46:d8:
         79:cf:6c:46:bd:81:c8:87:1e:01:be:39:34:49:19:57:04:1b:
         d4:09:05:06:1c:12:18:b1:e2:32:55:30:0d:9f:f1:55:68:63:
         36:83:76:82:45:be:1f:49:9b:29:b6:53:5a:8a:89:9d:d5:1b:
         e5:38:a5:f9:89:e1:b4:52:09:40:42:9e:eb:72:07:a6:57:8e:
         e1:70:14:3f:b2:34:88:ee:b7:79:42:76:47:e6:57:d8:5d:72:
         3f:de:ad:b9:50:86:3f:6e:f6:92:fa:6f:f5:be:ae:75:2f:c2:
         bc:e4:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org