Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA74B531EEFBBA7CCCCE713ED871537B22932A74.cer
File:                     AA74B531EEFBBA7CCCCE713ED871537B22932A74.cer (raw, json)
Hash identifier:          FTgQK4A7XZy3pJ8AmpCgGSPkRBxsiZlMyq8VU/27EbM=
Subject key identifier:   AA:74:B5:31:EE:FB:BA:7C:CC:CE:71:3E:D8:71:53:7B:22:93:2A:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       55ACF7487167429BA817DF7FCBB70490CD555170
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/AA74B531EEFBBA7CCCCE713ED871537B22932A74.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Feb 2023 18:07:52 +0000
Certificate not after:    Thu 08 Feb 2024 18:12:52 +0000
Subordinate resources:    AS: 265983
                          IP: 164.163.232.0/22
                          IP: 2804:40d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ac:f7:48:71:67:42:9b:a8:17:df:7f:cb:b7:04:90:cd:55:51:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 18:07:52 2023 GMT
            Not After : Feb  8 18:12:52 2024 GMT
        Subject: CN=AA74B531EEFBBA7CCCCE713ED871537B22932A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:73:7b:de:05:ca:28:33:de:62:87:75:2d:
                    1b:bd:0a:db:87:48:0f:71:78:ca:36:f6:29:ef:6a:
                    56:3c:10:35:2b:2c:d5:ff:84:d6:d3:57:6d:67:bb:
                    bd:22:db:82:4a:3b:91:8d:d0:d6:cc:e5:57:9d:0c:
                    8a:65:19:5b:f4:85:0f:a6:2e:c4:51:c1:5e:4b:f8:
                    d0:f0:08:cf:6b:f7:86:36:eb:54:42:78:63:fe:9f:
                    03:ea:2c:c5:b8:72:cc:61:17:56:81:2c:f9:9b:cb:
                    02:46:e6:75:c6:92:11:b3:87:88:4f:1c:69:51:68:
                    48:a4:9c:db:eb:1d:86:80:dd:1e:95:68:81:e0:eb:
                    97:c5:b9:26:48:eb:1a:de:ec:aa:51:9d:5c:02:12:
                    c3:9d:91:45:a8:aa:c0:78:2f:69:ee:8c:ad:96:cd:
                    0b:e9:f5:43:fc:c4:9b:3e:17:4f:4a:12:3b:32:44:
                    2c:47:e3:7b:b9:b5:c2:08:3f:63:60:fb:94:56:a3:
                    14:2b:ad:09:05:e4:6a:b1:a7:0c:3d:a3:b3:55:87:
                    dc:ba:7a:5c:cf:c4:32:01:90:e3:a4:3c:2c:35:a8:
                    44:ac:83:fb:92:41:c2:eb:dd:d7:d9:f5:7e:95:8b:
                    b0:e5:92:4b:f0:3a:27:c7:c9:5a:56:93:10:2e:96:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:74:B5:31:EE:FB:BA:7C:CC:CE:71:3E:D8:71:53:7B:22:93:2A:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/AA74B531EEFBBA7CCCCE713ED871537B22932A74.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.232.0/22
                IPv6:
                  2804:40d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265983

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:52:cf:2e:80:21:e9:18:d1:af:cb:86:e0:0a:00:65:aa:
         75:51:42:43:5c:7d:d0:92:0f:3b:2b:71:06:53:f6:df:eb:c8:
         b9:b8:79:39:b4:5c:a3:db:22:74:22:01:22:5e:e2:e6:8c:be:
         75:74:d4:c6:de:1a:66:9c:37:7a:2a:03:dd:0d:d8:bb:25:2f:
         10:75:f2:82:98:0a:ec:7a:c8:51:ee:ec:28:cc:be:e6:66:1f:
         2a:35:28:f7:b6:34:e9:f0:1d:32:88:eb:dc:3d:2c:7f:e2:19:
         5a:7e:35:e5:15:d4:20:94:aa:d5:6d:c2:19:c9:dd:43:f4:ea:
         f1:d1:5e:db:47:ed:a1:27:d1:8b:c6:31:02:77:5b:48:41:67:
         48:db:ff:0b:ec:aa:ac:0f:f0:6c:a5:5e:b2:e8:79:51:ba:43:
         8c:00:7c:4d:d4:a3:2f:c9:d2:0a:c7:d9:97:37:be:6c:47:ce:
         83:61:2e:fa:9d:bb:93:4a:0b:de:83:a2:74:0a:7c:7b:9c:78:
         06:48:c2:6e:2c:40:bd:c9:29:2b:ed:f6:2d:d9:f5:6c:97:66:
         d0:c9:64:a1:66:2a:f8:6e:2a:63:e2:d1:3f:db:15:83:1a:9c:
         3b:71:85:64:43:df:bd:8a:79:f7:cd:bc:5e:6e:08:fe:54:f8:
         bb:7e:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org