Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.cer
File:                     AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.cer (raw, json)
Hash identifier:          WhDqKCaqtm6noTCGn8qXADG5GLitR6qT8M4CrGfVxWU=
Subject key identifier:   AA:B1:E0:E9:4A:C7:49:5D:B2:18:7F:38:6D:E3:A3:92:6B:2E:26:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6873E4E062EA21BC661F368099B78A9690DDEB46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 16:58:24 +0000
Certificate not after:    Tue 11 Mar 2025 17:03:24 +0000
Subordinate resources:    AS: 273704
                          IP: 2804:8af8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:73:e4:e0:62:ea:21:bc:66:1f:36:80:99:b7:8a:96:90:dd:eb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 16:58:24 2024 GMT
            Not After : Mar 11 17:03:24 2025 GMT
        Subject: CN=AAB1E0E94AC7495DB2187F386DE3A3926B2E264D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:6f:59:f1:37:4f:60:40:6f:f0:55:40:20:
                    90:26:76:be:1d:5e:35:d0:03:29:0d:ce:eb:06:bc:
                    54:65:29:3f:08:11:16:01:f2:fc:ad:48:05:57:9c:
                    1a:4c:d6:61:d0:03:ea:c5:ab:b4:fb:d8:c3:45:f2:
                    a6:d3:b8:6b:86:53:7e:5d:43:b9:98:ef:59:dd:f2:
                    8e:ec:f4:97:33:1e:96:8c:44:71:86:ff:50:2a:ae:
                    04:6c:99:32:26:c3:52:bd:89:09:8b:c7:8a:83:3e:
                    0d:82:e1:99:3b:95:e9:e5:47:2d:71:6f:05:5a:bf:
                    8e:6c:64:5f:1b:f4:1f:01:98:01:6e:40:2b:63:1b:
                    f1:59:a2:7b:d8:90:b7:ea:d5:e3:73:cd:71:65:ea:
                    5b:ff:bb:e4:78:68:b4:61:27:ff:4b:07:0e:d0:ef:
                    a5:02:d7:f7:ff:cf:ba:94:08:3f:14:b1:e7:d7:2d:
                    07:54:93:57:e9:d3:da:7c:11:2f:98:c8:fe:46:db:
                    2b:45:d6:31:ff:0c:8d:d9:1c:0c:df:22:5a:e5:2d:
                    da:db:40:4d:13:6e:ed:eb:15:d3:48:7d:52:3d:4d:
                    3e:4f:54:a1:1b:d4:0a:08:80:0a:10:b4:49:c2:3b:
                    55:2e:03:69:28:77:ad:76:e2:e9:e2:6e:8b:aa:c6:
                    6e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:B1:E0:E9:4A:C7:49:5D:B2:18:7F:38:6D:E3:A3:92:6B:2E:26:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273704

    Signature Algorithm: sha256WithRSAEncryption
         15:2f:e1:04:80:ba:02:7f:d0:4c:8c:5a:d5:13:15:90:68:89:
         db:27:1c:af:03:f1:0f:7f:a7:b3:6e:b7:b6:cf:0c:b9:b4:69:
         9b:59:95:30:e0:b9:9d:b3:a3:19:bd:d6:eb:8f:5c:53:c0:a9:
         b1:f6:55:0f:3a:52:2b:72:0d:c4:a5:5e:8c:5c:58:f3:6f:b3:
         50:60:f9:cb:97:e0:06:6b:ec:22:bf:6f:bf:a1:85:aa:71:9f:
         cc:75:e7:ea:97:b2:a3:61:37:01:c0:24:89:7c:42:1c:be:e4:
         87:a0:db:44:8e:59:b4:28:74:34:5e:05:02:fc:93:9a:3b:47:
         43:6f:4b:64:73:16:64:67:d3:83:9c:f7:4f:9a:14:59:81:f6:
         02:b7:96:14:92:55:ae:cf:12:b1:20:e0:88:c1:2d:54:99:f6:
         61:8e:7f:aa:86:db:ab:4e:59:eb:c4:7f:7c:b5:a6:40:ad:fc:
         f1:17:b6:b5:ba:76:bb:11:29:a3:93:f5:ff:ad:50:9f:70:60:
         71:7e:b3:c9:ef:4b:f3:2a:ae:12:f3:1c:a8:5f:51:99:83:25:
         85:2e:a7:11:d3:09:02:38:6c:64:57:f8:5f:a8:da:33:81:4a:
         c6:fe:34:60:2e:68:e8:5c:bb:16:6c:33:d4:1b:d7:7e:81:ea:
         e4:a7:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org