Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer
File:                     AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer (raw, json)
Hash identifier:          l5KliYkS8xyNi9B/XsI403WTdV5oorPU7k/axkW9kf4=
Subject key identifier:   AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1277A4ADCD14540F02C307B525F8E54F791144F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 13:55:57 +0000
Certificate not after:    Tue 14 May 2024 14:00:57 +0000
Subordinate resources:    AS: 268721
                          IP: 45.171.152.0/22
                          IP: 2804:59b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:a4:ad:cd:14:54:0f:02:c3:07:b5:25:f8:e5:4f:79:11:44:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 13:55:57 2023 GMT
            Not After : May 14 14:00:57 2024 GMT
        Subject: CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:1d:1c:79:2b:70:ee:97:23:87:51:71:c1:
                    95:0c:5c:cb:2a:98:31:c6:1e:ce:ca:5c:15:81:37:
                    b4:d6:64:6e:91:54:90:f3:2e:4c:09:81:29:c1:a9:
                    63:15:19:c7:2c:7f:1a:23:62:41:59:fb:0b:06:05:
                    04:17:bf:50:58:06:38:ac:a7:2a:df:08:9d:c3:4e:
                    df:f0:a5:6c:80:45:ae:b7:08:55:f6:10:25:f1:f8:
                    82:84:bc:26:33:a7:ed:50:ae:0e:1f:42:64:b3:e3:
                    79:fa:81:32:75:18:16:3a:97:8a:dc:9a:70:99:a4:
                    f1:62:d6:05:9b:ac:b4:c1:d9:bd:ad:7e:8c:50:e5:
                    f8:a8:db:92:3b:25:ff:5d:eb:97:2c:3b:8f:cc:66:
                    da:8f:01:71:90:e6:57:60:72:2d:1f:81:8d:21:e2:
                    4f:ec:96:20:59:58:9f:af:5d:e4:af:24:9f:9d:ca:
                    73:d4:0e:c0:5d:2b:d3:17:10:55:3d:36:4f:ed:d0:
                    3a:04:11:cc:fb:53:05:0a:67:3e:46:a3:25:57:7c:
                    a3:17:da:17:55:a5:11:9d:bd:de:b3:76:0a:a5:89:
                    0c:28:f8:86:c3:ec:00:0a:0e:5b:8a:1f:24:63:9d:
                    a2:db:2e:06:3e:cd:12:82:c0:c4:80:7e:78:44:70:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.152.0/22
                IPv6:
                  2804:59b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268721

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:f0:e0:91:34:90:db:59:c6:11:0c:55:ce:9e:bb:f5:6b:
         f8:0d:a7:52:a3:5a:7d:1e:93:91:e2:aa:b7:12:b3:89:1f:3b:
         82:87:0a:dc:fe:0c:59:0e:d1:06:42:42:78:3e:33:0c:76:3e:
         05:57:b2:18:30:46:f7:e0:71:f3:f5:c6:4f:0f:80:d3:be:1a:
         4a:55:00:73:2e:dd:55:f7:5d:41:1c:84:69:ed:a2:4a:a4:d4:
         29:7f:9b:b0:8c:e1:fc:a4:70:3c:3f:32:b3:05:07:bf:11:fd:
         8d:fc:ab:ab:86:0e:10:60:a1:77:e3:4a:17:22:ad:f6:c3:54:
         72:25:f7:9b:86:5c:2e:4d:fb:c4:6b:37:db:45:b3:15:c6:cf:
         c4:89:67:81:19:a9:ce:ef:4d:5f:28:dd:99:3e:06:a7:b2:bf:
         0d:54:05:7e:78:a0:a8:c7:08:c3:f9:62:dc:67:6b:16:d7:18:
         10:c0:eb:15:fd:09:21:5e:44:c0:d8:4e:19:94:bc:5f:51:e1:
         2c:0a:8e:e6:1f:06:d3:62:98:35:52:c1:30:d7:a2:48:d5:e7:
         2e:bd:83:b9:fb:ad:77:66:ce:b6:65:45:42:36:13:fc:a6:56:
         8f:ed:51:ff:47:d5:de:89:44:d8:7d:44:b1:a4:cc:64:25:fd:
         86:ac:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org