Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.cer
File:                     AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.cer (raw, json)
Hash identifier:          teNnC9fzRvNUPhfMIJ3SPOeEMJupfvsHSqqRi+2r9DA=
Subject key identifier:   AA:88:D7:F3:E6:7C:02:0D:61:93:B7:3F:F4:F5:E9:7E:22:D4:D7:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02A8E3CCD950464B6E308F02E69FA072A9E2106C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Feb 2023 15:41:52 +0000
Certificate not after:    Thu 22 Feb 2024 15:46:52 +0000
Subordinate resources:    AS: 266023
                          IP: 170.245.228.0/22
                          IP: 2804:3948::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a8:e3:cc:d9:50:46:4b:6e:30:8f:02:e6:9f:a0:72:a9:e2:10:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 15:41:52 2023 GMT
            Not After : Feb 22 15:46:52 2024 GMT
        Subject: CN=AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:19:4f:cc:3e:39:20:bd:4f:84:92:2a:54:
                    a5:7f:43:1f:73:6c:8c:66:7a:c7:85:d3:ca:d1:cc:
                    27:80:e4:06:09:4f:3e:a2:2e:e1:2f:71:21:eb:93:
                    89:3b:f9:98:6f:84:bc:f0:dd:64:cd:dd:df:56:32:
                    02:f9:84:52:12:43:6e:b6:5f:d6:d5:c9:7f:b2:e3:
                    50:02:21:5e:9d:f0:d3:9d:57:31:a4:46:57:f7:ae:
                    be:a4:97:4a:00:16:41:85:d5:c6:eb:44:6f:92:90:
                    c3:d1:b8:58:ba:2b:42:5d:64:cc:e3:84:a5:66:1a:
                    24:e5:53:92:c1:d0:49:3f:d9:dd:15:e7:a4:22:fd:
                    a1:c0:28:64:4a:ea:f4:e3:3b:e6:fb:94:13:ed:6b:
                    0a:e1:3f:97:aa:49:75:31:82:f6:46:ad:88:5b:54:
                    f6:c8:9a:47:3f:fc:d9:45:af:1e:92:4f:d8:e4:b6:
                    5b:ce:82:6e:cf:45:47:a2:bd:f8:1d:9b:06:54:a9:
                    99:ec:41:3c:78:98:67:49:e0:ea:29:09:e9:f3:b6:
                    b0:d8:5a:32:f9:1a:0f:92:59:99:af:29:7d:e2:c0:
                    01:6a:71:57:ad:06:16:3b:8c:ef:73:f6:f2:60:09:
                    ea:8d:9c:bb:b6:e6:62:37:ed:57:3e:c2:c8:8a:9d:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:88:D7:F3:E6:7C:02:0D:61:93:B7:3F:F4:F5:E9:7E:22:D4:D7:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.228.0/22
                IPv6:
                  2804:3948::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266023

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:ca:35:a5:aa:e7:67:41:7c:d2:4e:7f:ef:29:e8:fc:d4:
         db:d4:52:ed:8d:a1:5d:47:f8:f2:9a:ac:7b:31:67:5c:4b:6d:
         37:3c:7f:18:4d:9a:6d:c4:d1:90:44:77:9b:71:82:0d:0c:75:
         81:6f:20:12:c0:8e:8d:21:43:77:79:bc:96:1c:74:5b:50:f9:
         7a:a3:8c:0d:a8:2e:d1:2f:b2:b7:e9:72:14:66:95:76:96:f4:
         0d:fd:fd:27:1c:a0:b9:9a:44:eb:67:73:8b:af:e7:24:fa:ce:
         c0:23:21:12:a4:4a:5d:ba:35:a0:57:12:26:e0:f0:e0:b7:52:
         5a:78:84:21:19:91:cc:77:9e:46:2e:5d:e9:a2:60:a7:72:a1:
         87:87:40:d8:ec:8b:91:d8:08:d2:3f:6a:d2:8c:ca:76:0e:38:
         7c:67:1a:39:ba:ea:10:35:98:85:38:be:e8:38:9c:81:4f:b4:
         e1:41:14:96:39:8a:d3:fe:1f:6b:d7:34:b9:c3:95:79:14:3b:
         44:61:6e:2c:ff:72:2b:24:7b:b6:05:e3:04:bb:37:e2:7f:0d:
         72:3e:eb:3b:69:cc:88:b1:86:83:23:45:7e:3e:20:01:53:00:
         18:58:a8:53:95:27:c0:44:71:4a:19:01:dd:77:b7:ce:aa:03:
         47:64:7c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org