Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AAA918430499F3E9894B3CF0249B298084501D20.cer
File:                     AAA918430499F3E9894B3CF0249B298084501D20.cer (raw, json)
Hash identifier:          64H4FTyggxPs+E0ZD5CZJ5fBvshF5BglkSWCZ/1bI2g=
Subject key identifier:   AA:A9:18:43:04:99:F3:E9:89:4B:3C:F0:24:9B:29:80:84:50:1D:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69ECE8C97FC180FE6B66B6D1A10F7B5FD5F41C9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/AAA918430499F3E9894B3CF0249B298084501D20.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Jul 2022 18:53:37 +0000
Certificate not after:    Wed 12 Jul 2023 18:58:37 +0000
Subordinate resources:    AS: 263474
                          IP: 191.242.72.0/21
                          IP: 2804:1264::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ec:e8:c9:7f:c1:80:fe:6b:66:b6:d1:a1:0f:7b:5f:d5:f4:1c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 18:53:37 2022 GMT
            Not After : Jul 12 18:58:37 2023 GMT
        Subject: CN=AAA918430499F3E9894B3CF0249B298084501D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:51:b0:35:f3:aa:7e:2a:23:75:51:9c:18:
                    95:c0:50:f3:6c:9e:06:45:7c:cf:bc:22:5d:4a:71:
                    8f:c6:19:15:f0:88:b9:3f:3e:f1:2f:ea:8f:a7:00:
                    bc:9b:70:30:d4:55:85:25:1a:85:db:bf:fc:28:ca:
                    56:b2:18:37:85:b3:38:fc:ae:c2:6e:0c:5d:36:5c:
                    e2:1b:7e:b8:09:2b:95:a6:dc:44:7c:af:90:47:4c:
                    fa:2c:33:3e:22:86:d7:b0:d8:03:c2:70:06:f1:0a:
                    3c:36:a4:8f:42:ed:3f:f2:53:8b:43:45:80:8b:8d:
                    32:79:68:07:39:a6:47:e7:63:05:bb:18:25:59:a8:
                    3d:b8:fd:10:ad:79:4c:79:a8:cb:5b:62:46:12:f2:
                    27:35:1c:b7:c4:78:98:b6:fc:54:ad:cd:d6:64:f4:
                    3b:4e:d5:38:94:44:7f:18:65:5e:3f:0c:f6:5f:e1:
                    14:4d:31:18:73:53:48:0c:c3:2d:5f:36:ca:07:ae:
                    35:2b:4b:f8:57:40:49:d4:8b:05:89:bd:a7:0b:21:
                    e9:97:2d:ab:90:24:b6:8c:2a:84:94:f9:a0:dd:4d:
                    9b:c5:6e:d2:1d:82:4d:dd:3b:66:4e:49:3a:94:fb:
                    60:0e:fc:05:bc:ad:c7:bf:d0:55:fa:3f:8c:8d:b6:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:A9:18:43:04:99:F3:E9:89:4B:3C:F0:24:9B:29:80:84:50:1D:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/0/AAA918430499F3E9894B3CF0249B298084501D20.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/21
                IPv6:
                  2804:1264::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263474

    Signature Algorithm: sha256WithRSAEncryption
         85:41:4c:0e:58:8b:fb:4b:1e:6a:20:a4:fe:b5:0f:69:a4:bb:
         d9:1f:8a:35:c1:f5:3c:a7:0f:57:9d:19:bf:af:0a:2b:0c:02:
         c0:b7:8b:74:fb:91:87:03:92:b2:2e:45:7f:27:a8:20:c3:e5:
         5e:dc:2a:f8:94:3b:8f:34:a7:4e:5d:a0:90:c3:c8:ad:86:fc:
         59:46:5d:30:27:cc:c8:7a:65:14:16:49:0a:6d:65:3b:ca:10:
         a4:bc:2b:32:c5:57:61:24:b3:15:84:fd:96:d9:49:1c:07:ad:
         7f:b0:11:f8:49:23:b4:2d:8d:9d:66:be:de:12:47:c6:43:fb:
         a9:aa:da:b3:4e:a5:36:da:89:a1:9f:d9:0f:18:3e:02:51:14:
         53:ca:e6:d1:b0:cd:98:ad:e5:7c:c9:a4:9d:b4:d9:66:20:fd:
         ab:45:de:56:51:fb:5e:2c:32:f3:e4:5d:49:3e:d6:ae:00:85:
         87:14:3b:e1:7e:27:83:18:5b:28:f4:61:58:0e:c0:83:69:29:
         6f:d1:2f:53:0d:90:5c:cc:25:72:33:f4:45:bb:3e:00:bf:b5:
         e4:1e:f5:3d:47:ce:d1:2f:37:03:32:45:78:fa:8c:7c:78:12:
         6a:1d:00:bb:57:87:d5:04:17:5c:0d:93:a4:f6:1c:3f:18:82:
         13:57:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org