Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8068F05B096A70AA2F45346F49DF50B86D5530F.cer
File:                     A8068F05B096A70AA2F45346F49DF50B86D5530F.cer (raw, json)
Hash identifier:          NXD0wjSgzsy79q0fwgt7afdFBg03rALtad2uwHjQP1I=
Subject key identifier:   A8:06:8F:05:B0:96:A7:0A:A2:F4:53:46:F4:9D:F5:0B:86:D5:53:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D87ED8764D65C9523EF3B9EC4C74E0756C0321A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/A8068F05B096A70AA2F45346F49DF50B86D5530F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Mar 2023 19:36:09 +0000
Certificate not after:    Tue 19 Mar 2024 19:41:09 +0000
Subordinate resources:    AS: 262474
                          IP: 177.53.168.0/21
                          IP: 177.154.20.0/22
                          IP: 2804:4dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:87:ed:87:64:d6:5c:95:23:ef:3b:9e:c4:c7:4e:07:56:c0:32:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 19:36:09 2023 GMT
            Not After : Mar 19 19:41:09 2024 GMT
        Subject: CN=A8068F05B096A70AA2F45346F49DF50B86D5530F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:45:12:5f:f7:42:9c:4a:81:77:d2:75:fb:
                    c4:70:31:5a:81:f5:87:07:ae:41:5b:92:33:3a:29:
                    1a:53:7d:a0:53:c4:63:aa:46:2b:e0:a1:77:07:b9:
                    f8:e7:ca:fd:8d:90:2c:ef:7b:a5:7e:c0:91:4f:82:
                    b2:71:a6:29:f8:97:64:a0:71:83:97:6e:7f:bb:49:
                    77:84:dc:40:1a:b9:11:3c:9d:c5:24:ed:20:52:0b:
                    72:16:30:b5:0d:e2:f8:ff:9e:c5:e1:cb:08:79:d8:
                    7a:82:23:34:fc:f1:12:b7:27:87:bb:8f:8f:1c:4a:
                    53:7a:76:92:29:53:27:58:c3:36:ee:42:ff:07:55:
                    ec:4f:d2:c6:d5:de:22:67:92:df:8d:b2:75:87:58:
                    34:67:a8:ef:b4:28:a5:7b:1b:01:0a:c7:37:32:fe:
                    e6:ff:85:46:19:ad:ee:13:37:81:88:48:cf:6c:67:
                    a3:c8:26:14:af:81:09:a5:42:3a:d5:98:0d:bd:35:
                    a0:1e:0a:a5:45:80:1a:15:cc:f1:17:d8:01:08:d1:
                    25:23:5c:f7:85:a1:38:10:d1:71:14:8d:26:31:76:
                    80:a3:58:18:3a:39:be:3f:84:eb:01:4d:4e:95:5d:
                    6b:29:1e:2b:30:8a:48:59:f2:5d:b8:14:0a:f4:3e:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:06:8F:05:B0:96:A7:0A:A2:F4:53:46:F4:9D:F5:0B:86:D5:53:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/A8068F05B096A70AA2F45346F49DF50B86D5530F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.168.0/21
                  177.154.20.0/22
                IPv6:
                  2804:4dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262474

    Signature Algorithm: sha256WithRSAEncryption
         34:53:ad:c7:fc:16:0b:5c:02:a5:d7:96:90:86:8d:3f:04:27:
         25:22:23:bc:cd:d2:1e:2a:fb:0a:3a:db:62:b1:cc:2f:3b:78:
         ac:06:10:e5:88:a4:9f:e4:91:33:1f:ee:4e:b6:81:69:a4:37:
         29:24:9b:3c:23:8e:fa:68:f5:bc:21:a8:e9:34:ce:2c:37:62:
         14:0a:46:e9:1b:bc:72:e2:ee:7e:c4:c6:44:76:41:d8:de:a9:
         3b:2d:51:b8:c1:9f:24:04:5f:3a:5b:bf:7f:b8:df:e5:37:4a:
         77:66:44:0a:ec:e8:36:a3:58:55:cb:7e:ca:42:8c:97:44:49:
         e8:d6:12:72:90:ff:b2:96:2c:2b:d7:6f:09:28:4d:5c:ba:38:
         28:73:28:55:97:5f:d8:45:77:b0:60:56:a0:94:5c:8a:56:99:
         d4:b6:30:65:ca:77:d4:f4:29:e4:3a:87:53:0b:94:d0:f8:62:
         5c:d3:77:38:bf:d8:93:7d:62:99:07:6c:4b:39:27:c5:a1:f4:
         1b:cc:0b:a5:f2:c9:2d:06:48:46:89:16:05:d7:bf:61:67:aa:
         f7:c3:1b:97:de:7c:00:1d:76:9f:24:2b:63:68:64:67:b4:57:
         26:b3:12:ff:0e:5f:10:93:81:52:8d:8a:1f:18:83:64:28:09:
         d8:74:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org