Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.cer
File:                     AA607E5E454F44A3D5284D9663DCB35738F2672D.cer (raw, json)
Hash identifier:          IjAAKEYX2xs7rBwNsg+aZMVDwvDMTJR9Q6xhC0xQ3bg=
Subject key identifier:   AA:60:7E:5E:45:4F:44:A3:D5:28:4D:96:63:DC:B3:57:38:F2:67:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7AB607F6F4BFCDB03590FF5EAC968DB9B10D80FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Feb 2023 13:08:53 +0000
Certificate not after:    Thu 22 Feb 2024 13:13:53 +0000
Subordinate resources:    AS: 271018
                          IP: 200.52.228.0/22
                          IP: 2804:7504::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:07:f6:f4:bf:cd:b0:35:90:ff:5e:ac:96:8d:b9:b1:0d:80:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 13:08:53 2023 GMT
            Not After : Feb 22 13:13:53 2024 GMT
        Subject: CN=AA607E5E454F44A3D5284D9663DCB35738F2672D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:7e:81:ea:d4:9b:42:c1:73:a5:0f:a7:48:
                    35:5c:2f:28:54:e6:6b:d9:29:04:9d:3f:41:34:52:
                    c8:34:a4:5d:c9:29:9e:27:a5:7a:27:21:cb:7e:ca:
                    a4:13:23:f0:70:cf:72:34:7c:0c:cc:8d:99:72:87:
                    af:e6:ca:54:d1:95:fb:39:9d:a3:07:a0:2b:59:f9:
                    4a:e9:ca:9f:d7:cc:51:8a:f4:d4:1d:24:b7:47:49:
                    90:9a:c4:a2:f8:37:dc:15:a5:cb:a1:f8:08:2f:2f:
                    da:5b:a1:23:c9:ee:4e:60:3e:05:bd:d5:e1:28:52:
                    15:ce:d5:a3:a0:cf:af:b8:36:54:16:d5:09:c3:ef:
                    1b:fc:7f:ee:ed:db:c7:22:96:7e:b6:e8:e4:c9:1f:
                    87:ff:41:2d:08:a6:ee:88:1c:c4:da:60:7e:a2:80:
                    ac:dd:08:3e:32:48:c4:13:12:5b:dd:4c:e1:0b:83:
                    ac:08:01:ab:c7:25:d4:32:96:27:7a:e2:af:94:f7:
                    76:89:10:4c:06:b8:0a:7b:cf:5b:42:d2:63:2a:ba:
                    a7:aa:53:a4:da:f5:30:e9:3a:d2:6f:bd:a6:96:07:
                    14:5d:61:1f:d8:eb:cb:50:3d:73:ea:d4:5a:b3:77:
                    33:ea:77:31:ae:4a:10:99:31:d2:b3:fc:a4:06:80:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:60:7E:5E:45:4F:44:A3:D5:28:4D:96:63:DC:B3:57:38:F2:67:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/AA607E5E454F44A3D5284D9663DCB35738F2672D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.228.0/22
                IPv6:
                  2804:7504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271018

    Signature Algorithm: sha256WithRSAEncryption
         65:97:b4:b9:dc:f7:de:ec:78:6e:c4:46:04:9c:b4:3c:e1:93:
         5b:b5:6b:9f:9e:25:2e:50:17:69:92:a4:bb:0f:66:db:e9:96:
         84:3b:78:1a:ef:a6:24:ef:20:2a:2f:4c:d3:96:79:0d:aa:40:
         e6:8b:66:5e:0b:65:66:dd:18:f6:27:a0:36:5b:28:93:cf:c1:
         51:0f:03:db:21:2c:9a:f4:b2:d2:d5:57:75:1e:05:8e:c9:b7:
         76:74:e6:fa:ab:b9:6b:9f:b3:0d:86:cf:f8:c6:07:b8:51:f9:
         72:2e:3c:fd:39:ee:19:49:91:c7:4f:2a:e1:57:2a:7c:9e:86:
         d7:a5:d6:02:05:ef:f0:98:3e:a3:5a:84:74:5b:4f:b6:49:ed:
         b8:87:24:1a:25:de:be:e4:81:cc:3a:0c:6e:21:8a:c1:9a:95:
         e7:8f:8f:4f:10:c2:ff:11:78:4b:31:2c:93:19:b8:d4:ba:66:
         74:81:aa:3c:9f:c7:e9:36:b3:ef:4c:07:36:fd:f5:2b:05:10:
         3e:3d:10:9f:20:2b:9c:fe:2f:52:1d:eb:c1:af:c5:e5:03:cc:
         bb:44:2d:91:9f:0d:b4:d4:f9:24:52:5f:56:9f:58:57:aa:cd:
         ba:e2:ff:c2:8f:60:77:8b:89:f4:f4:90:4f:77:b7:68:30:15:
         ca:6b:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org