Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer
File:                     AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer (raw, json)
Hash identifier:          Es3M/WzFAzS5mMZpXw6pR66XXAytljx5OeNjlscr91M=
Subject key identifier:   AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7004769B68E8F135652DF87E683B52BCB5050B3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 14:03:28 +0000
Certificate not after:    Tue 18 Mar 2025 14:08:28 +0000
Subordinate resources:    AS: 53022
                          IP: 170.231.84.0/22
                          IP: 177.71.32.0/20
                          IP: 177.221.224.0/20
                          IP: 2804:31fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:04:76:9b:68:e8:f1:35:65:2d:f8:7e:68:3b:52:bc:b5:05:0b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 14:03:28 2024 GMT
            Not After : Mar 18 14:08:28 2025 GMT
        Subject: CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:66:e2:bf:09:1a:71:73:0e:be:5c:29:07:
                    a5:2d:f0:d2:c2:60:e4:6e:8d:3c:cc:7f:2b:f7:8a:
                    2d:0f:ff:53:f1:61:76:8b:73:2d:87:55:78:e3:74:
                    11:24:71:80:a6:61:17:b9:c2:ca:bc:e8:c8:32:02:
                    ba:0b:ef:88:cc:15:86:fd:df:9f:95:43:00:8a:38:
                    0b:e3:64:c5:84:d6:db:8c:38:ee:9e:5d:43:83:7f:
                    ac:45:65:66:56:5d:b6:66:61:a7:92:dd:53:a6:dd:
                    f9:0a:7b:66:1d:9f:12:3a:b9:2c:c6:1d:b2:08:6b:
                    64:9d:b1:d6:b1:3b:f8:43:00:fa:0d:e3:13:ac:ef:
                    64:20:da:e9:19:90:90:81:7a:41:b1:66:99:b4:9b:
                    e6:ae:8a:6f:65:36:f2:d5:80:ab:8b:b4:24:76:d4:
                    12:e2:b8:70:ef:a5:cd:bd:bf:13:fd:b0:b5:30:7d:
                    2e:bb:63:8d:13:eb:c1:0a:b3:d6:fd:f4:23:49:1a:
                    f4:b2:63:3f:ca:01:58:99:61:d0:3c:a1:a6:7d:45:
                    ef:ad:27:01:db:67:54:f8:87:2b:3c:18:f0:58:fb:
                    2c:6a:61:7d:4c:2c:c2:78:51:a9:6b:9c:3d:b5:63:
                    24:56:ed:17:4d:ab:b0:cc:f6:30:18:97:a6:e8:5d:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.84.0/22
                  177.71.32.0/20
                  177.221.224.0/20
                IPv6:
                  2804:31fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53022

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:d2:8c:05:50:00:1d:43:e6:cd:45:de:60:a9:89:ee:3b:
         d9:3a:79:09:50:2b:2d:48:8e:7e:04:02:44:59:92:03:8c:44:
         49:44:4c:1a:c3:7c:ab:ae:8b:8c:d8:ce:b5:1b:eb:64:2d:11:
         ed:9f:4f:84:c7:69:97:74:bf:6c:e2:28:02:c6:d3:c6:e2:ba:
         80:a1:95:6a:9f:ae:03:c6:98:85:5b:95:ca:02:a5:99:65:5e:
         61:e9:f1:4f:81:c2:e9:07:57:6c:d1:42:22:3b:85:c7:ad:3d:
         66:ac:6c:98:d6:be:69:a3:87:54:85:14:00:41:d6:39:9e:8e:
         ce:a6:68:1b:4d:dc:81:c4:1b:d1:2c:de:ee:6b:4d:16:49:81:
         94:1d:57:e8:89:0a:de:5a:8a:2b:25:95:b0:22:c9:c8:5c:e2:
         21:50:1a:c8:4f:ec:85:2b:0a:e0:94:b0:30:af:ea:32:76:bb:
         97:93:93:b8:c0:12:49:32:ce:35:a2:a4:98:e7:57:84:a0:56:
         b6:55:43:2d:a7:76:d4:c8:19:96:23:fc:ac:fc:7a:b2:e4:50:
         c3:29:8e:4a:13:d9:83:9d:e3:33:e0:e0:df:46:0a:0b:02:ce:
         d9:dd:df:24:93:3c:c2:7f:1a:88:af:b3:78:a8:dd:f4:59:86:
         4c:ca:f6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org