Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA595F3118B09B206B2095EAE66C3063EA048AEA.cer
File:                     AA595F3118B09B206B2095EAE66C3063EA048AEA.cer (raw, json)
Hash identifier:          Ckkqov4LeR1scf4jtkb3Ub4oVoF5aHBwUO/GkSoQMP4=
Subject key identifier:   AA:59:5F:31:18:B0:9B:20:6B:20:95:EA:E6:6C:30:63:EA:04:8A:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E1D336D3F64040C0CF293E3CBF30CCDA4AD5CFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/AA595F3118B09B206B2095EAE66C3063EA048AEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Feb 2023 19:41:06 +0000
Certificate not after:    Tue 06 Feb 2024 19:46:06 +0000
Subordinate resources:    AS: 271529
                          IP: 181.174.248.0/22
                          IP: 2804:7cf4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1d:33:6d:3f:64:04:0c:0c:f2:93:e3:cb:f3:0c:cd:a4:ad:5c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 19:41:06 2023 GMT
            Not After : Feb  6 19:46:06 2024 GMT
        Subject: CN=AA595F3118B09B206B2095EAE66C3063EA048AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:86:3d:59:c4:a6:7f:cc:3c:bd:e0:eb:3a:
                    34:f2:27:e8:ec:04:10:b7:f1:e9:40:f5:3c:2d:b8:
                    ac:44:12:5b:b9:3a:65:ae:d5:98:cf:f4:25:4d:ed:
                    3d:03:29:69:ed:ca:2a:a9:9a:c0:a7:cc:25:b3:4b:
                    1f:69:a0:1e:34:52:fc:ad:d6:55:3b:a0:7e:40:32:
                    32:46:17:80:ff:46:f2:2f:bd:9b:45:1a:51:b8:fe:
                    76:80:4b:b7:68:91:28:61:3b:83:18:59:81:7b:78:
                    b3:1d:c9:11:25:ad:ab:1d:12:a8:83:cb:20:e3:ba:
                    7a:12:f5:88:87:25:39:28:72:79:5f:fc:41:4b:5d:
                    f2:ab:5d:52:e6:90:23:ba:e7:e6:32:02:e5:4a:97:
                    22:8a:ff:ea:c8:06:c0:fb:36:69:fe:22:93:60:78:
                    87:5d:20:7b:57:9d:8a:d4:fa:5f:80:50:84:63:1d:
                    c1:74:ce:2d:29:c4:92:d7:11:e9:24:ad:6e:69:71:
                    dd:4a:de:2c:91:e9:de:86:81:fc:7a:7f:21:4c:5f:
                    f9:cf:82:89:1e:7a:8f:9e:ad:1e:51:66:95:30:f1:
                    57:23:33:09:b5:74:8f:0d:89:b5:30:6a:3b:61:4a:
                    ea:a3:02:db:9f:2a:3c:af:ad:3d:64:56:92:e1:05:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:59:5F:31:18:B0:9B:20:6B:20:95:EA:E6:6C:30:63:EA:04:8A:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/AA595F3118B09B206B2095EAE66C3063EA048AEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.248.0/22
                IPv6:
                  2804:7cf4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271529

    Signature Algorithm: sha256WithRSAEncryption
         37:71:c3:26:55:28:5a:e9:b8:31:5d:55:7b:49:fc:8a:0e:9a:
         37:a6:6e:24:d4:8f:b3:4e:f6:f3:c6:15:79:5d:68:b7:33:fc:
         bb:fc:5a:d4:1c:ae:00:76:85:00:e6:aa:a3:ff:c4:5a:4d:2d:
         c7:95:12:2f:64:3d:99:cd:59:d2:23:d7:72:47:00:d4:67:c4:
         b0:7e:05:13:74:11:c0:43:d4:0a:31:da:4e:97:e0:03:fe:c0:
         57:e4:43:7a:35:b1:d2:63:69:96:70:17:05:f7:46:0d:a7:fd:
         8f:48:27:84:a0:6e:3b:1e:d1:97:5b:fd:57:f2:60:80:73:85:
         1f:b0:5e:04:26:ed:0f:74:ec:e8:23:5c:ab:cd:29:12:f6:fa:
         05:3b:90:91:9f:7f:3e:71:63:60:69:11:cb:ac:4b:57:35:8b:
         66:75:ed:51:1d:93:2c:14:24:eb:b7:31:6e:dc:e3:27:77:2f:
         c6:ca:2d:c4:10:55:3c:f4:32:93:e9:10:36:1c:6c:15:db:23:
         1c:07:c8:20:af:fb:df:d7:86:9e:42:1a:33:78:b1:83:ac:ba:
         3b:4b:37:9a:51:8f:5d:b4:2b:52:c0:79:15:46:4f:38:8d:05:
         02:6b:55:d9:93:e6:c0:5c:8c:c6:5c:65:24:22:cd:50:54:3a:
         45:fd:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org