Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.cer
File:                     AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.cer (raw, json)
Hash identifier:          b7+yNExpRX1hGgKfuDP9avZh+J7b6rQRIimwP8UzqdE=
Subject key identifier:   AA:63:1F:AB:3A:44:BD:06:A7:67:A4:F7:5D:7C:14:74:EF:CE:83:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DF7F0AEAAD00BFF8C12CB5FFC9A59BCE60AAC01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Jul 2023 03:34:36 +0000
Certificate not after:    Fri 19 Jul 2024 03:39:36 +0000
Subordinate resources:    AS: 264902
                          IP: 168.228.20.0/22
                          IP: 2804:2f9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f7:f0:ae:aa:d0:0b:ff:8c:12:cb:5f:fc:9a:59:bc:e6:0a:ac:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 03:34:36 2023 GMT
            Not After : Jul 19 03:39:36 2024 GMT
        Subject: CN=AA631FAB3A44BD06A767A4F75D7C1474EFCE8341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:b0:bf:8b:8f:b9:3e:3d:23:21:e4:8b:87:
                    f3:8c:6c:68:34:c9:0c:c7:db:7b:3e:38:8c:9a:c4:
                    64:d1:a0:74:db:74:d3:ae:ab:7b:a6:f4:b1:e1:eb:
                    88:d4:00:84:c7:d8:3a:5c:cc:d6:c3:cb:8d:43:21:
                    22:37:b9:b5:32:40:26:15:99:11:30:ca:fe:17:c1:
                    20:32:4c:50:99:59:83:4b:ea:ed:b1:fa:4a:2e:39:
                    7a:fa:79:e5:6b:f2:89:cd:44:08:05:51:50:4f:1b:
                    3a:14:6a:85:b5:2b:27:ac:14:5e:98:63:d3:cb:dd:
                    c6:9b:cf:dd:92:be:5a:1c:5b:b7:ef:a8:f0:0a:fa:
                    28:75:ca:5f:b7:aa:19:4e:e4:80:fa:20:32:90:b5:
                    52:61:82:dd:e6:63:02:03:c5:ee:69:d4:35:6d:46:
                    45:5d:8c:96:ef:95:2f:e7:96:8d:c5:80:50:6e:02:
                    65:1e:de:f7:a5:74:ae:77:db:83:71:ec:7d:92:be:
                    5c:21:78:6f:c0:90:0e:f4:47:99:c7:5e:17:f5:0b:
                    41:fe:5f:e1:89:34:1b:78:91:4b:d9:d3:d4:dc:07:
                    92:08:c0:9a:72:02:8f:8a:c4:f0:3f:bf:ff:90:a7:
                    6b:45:0a:e5:24:67:82:e6:5d:4d:32:0d:9a:ea:cc:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:63:1F:AB:3A:44:BD:06:A7:67:A4:F7:5D:7C:14:74:EF:CE:83:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.20.0/22
                IPv6:
                  2804:2f9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264902

    Signature Algorithm: sha256WithRSAEncryption
         49:f6:ee:cc:75:5c:93:6e:2a:42:bf:eb:22:a4:ed:47:d4:ed:
         1c:1c:bc:3a:12:e9:bb:f6:b9:ba:46:50:bf:fa:a8:97:44:a5:
         60:97:4c:40:63:65:23:7d:19:c2:60:3e:b3:0a:f0:b7:b4:67:
         7e:16:a7:68:74:bc:4c:49:05:1b:95:ed:bc:74:9f:14:4b:d8:
         88:c8:3d:2d:43:1b:51:1b:e4:f1:08:85:93:16:5e:06:53:25:
         d9:e5:98:cf:23:1a:a2:ec:be:fb:7b:4b:e6:d9:64:1b:dd:ec:
         cc:5b:cc:e5:01:bd:4c:df:cd:07:4a:6f:ed:04:5b:8d:d2:f1:
         7e:07:74:c1:e4:20:18:73:bf:41:7e:11:63:e9:19:5c:11:ce:
         91:6e:c8:97:0a:16:04:07:5a:7e:e7:8a:fa:94:31:6f:26:66:
         84:11:f7:9c:08:e6:da:33:34:7b:96:3d:45:6e:17:dd:a8:d8:
         3b:43:28:75:f1:68:6c:b9:85:a2:ac:2b:42:3f:40:b6:26:f3:
         e9:53:36:61:25:b7:fd:aa:43:ab:fa:03:8b:66:c5:35:1c:b0:
         dd:8e:7f:ff:6d:96:c6:0a:d1:57:1a:63:14:be:54:a6:43:83:
         b7:a7:d3:a5:71:21:06:cd:5d:15:06:fc:0b:a1:9c:28:1e:48:
         76:74:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org