Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
File:                     AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer (raw, json)
Hash identifier:          A6OGrFq4DImljcG2acCadJ9TukpkDsr2yRbPFJ+B47I=
Subject key identifier:   AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15831D5C5428FA88E76B8D2F850F73306419FB84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Aug 2023 16:45:14 +0000
Certificate not after:    Wed 28 Aug 2024 16:50:14 +0000
Subordinate resources:    AS: 28124
                          AS: 53108
                          IP: 167.249.104.0/22
                          IP: 187.108.224.0/20
                          IP: 2804:470::/32
                          IP: 2804:2b78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:83:1d:5c:54:28:fa:88:e7:6b:8d:2f:85:0f:73:30:64:19:fb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 16:45:14 2023 GMT
            Not After : Aug 28 16:50:14 2024 GMT
        Subject: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:6c:83:cb:7e:11:cc:62:65:3f:84:e4:c2:
                    50:6c:4a:0b:d5:38:45:f2:a0:b3:66:b8:90:2f:18:
                    cf:52:cd:48:a2:af:13:38:67:96:24:8b:50:6e:c6:
                    eb:95:ff:dd:6b:a7:3e:95:a8:0c:3c:1b:dc:07:26:
                    56:e5:8c:87:90:2a:07:9f:6d:09:04:49:68:ab:cd:
                    f7:34:21:ed:68:28:41:d1:02:d2:a1:48:8d:80:f2:
                    eb:71:dd:66:e3:d2:70:71:a2:df:8a:f2:17:05:4e:
                    80:67:b8:85:7c:dd:d7:a6:66:7c:74:51:65:38:2e:
                    d4:82:e0:60:68:37:74:35:1a:50:39:26:84:3a:81:
                    dd:cd:a0:00:08:ea:27:b2:fc:af:ff:b5:d6:50:7e:
                    bf:3a:58:9b:cc:e7:a2:b9:73:8c:ac:69:c2:68:13:
                    d8:0f:b5:15:a0:2b:1c:0a:e4:5c:97:93:f6:c3:e1:
                    47:f5:26:9c:f2:17:8a:3e:1a:e9:31:ca:12:21:6d:
                    c6:b0:e5:ef:8f:1b:af:83:bb:39:d6:8e:c5:8c:17:
                    78:b1:fc:e7:78:e4:56:f4:f3:47:43:44:a5:2f:df:
                    2e:79:97:0e:94:c4:f7:0d:09:8e:18:d0:1a:a5:8c:
                    c4:22:6a:3b:1d:6f:6c:3f:7a:e1:e9:ac:18:e5:24:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.104.0/22
                  187.108.224.0/20
                IPv6:
                  2804:470::/32
                  2804:2b78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28124
                  53108

    Signature Algorithm: sha256WithRSAEncryption
         87:30:f1:ac:fa:c6:1d:93:58:1a:e9:cc:2d:12:4d:74:1b:1f:
         c5:f9:e9:26:b8:f1:50:57:b7:2e:9e:52:2c:c3:6a:3f:d3:ff:
         61:b2:bf:6f:dc:9a:c1:b2:07:9a:00:fa:c1:3b:86:eb:2f:25:
         9b:e5:c5:63:7b:39:d2:c2:87:2c:36:6a:75:2a:03:3e:04:aa:
         b4:71:59:82:56:5a:c4:57:68:c5:9c:c0:c8:20:bf:84:ca:60:
         76:be:3e:fb:c9:de:12:f7:58:3b:d2:06:19:9f:00:1b:19:dc:
         55:d8:92:82:3d:4a:27:91:0f:e7:be:05:0c:d0:ba:93:ee:09:
         bd:73:1d:40:e5:ba:e8:4c:8b:d4:67:84:0e:8f:2a:39:35:7a:
         0f:ac:47:20:36:9e:0c:50:da:31:21:86:e7:d6:83:6d:05:68:
         63:1d:8a:12:29:62:ef:73:be:94:16:ac:4d:06:83:88:70:bc:
         ae:8a:39:07:2e:29:72:32:1a:b8:9b:0c:5d:b5:99:eb:ee:31:
         e5:42:d9:1f:1e:30:e1:39:d4:c5:a9:fb:30:7b:ff:57:49:7e:
         51:9d:30:52:b8:3b:a7:4a:60:33:73:b2:e2:04:63:06:ce:14:
         5b:20:96:dc:cd:60:c0:e7:16:30:83:08:b2:7f:7a:e2:a3:66:
         5b:80:4e:b4
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUFYMdXFQo+ojna40vhQ9zMGQZ+4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MzAxNjQ1MTRaFw0yNDA4MjgxNjUwMTRaMDMxMTAvBgNV
BAMTKEFBQjlCMzkwNUU5M0ZERTYzQTQxQkY1MTkyOUEzQ0FEQ0NBMDY0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4myDy34RzGJlP4TkwlBsSgvV
OEXyoLNmuJAvGM9SzUiirxM4Z5Yki1BuxuuV/91rpz6VqAw8G9wHJlbljIeQKgef
bQkESWirzfc0Ie1oKEHRAtKhSI2A8utx3Wbj0nBxot+K8hcFToBnuIV83demZnx0
UWU4LtSC4GBoN3Q1GlA5JoQ6gd3NoAAI6iey/K//tdZQfr86WJvM56K5c4ysacJo
E9gPtRWgKxwK5FyXk/bD4Uf1JpzyF4o+GukxyhIhbcaw5e+PG6+DuznWjsWMF3ix
/Od45Fb080dDRKUv3y55lw6UxPcNCY4Y0BqljMQiajsdb2w/euHprBjlJDuFAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqubOQXpP95jpB
v1GSmjytzKBkqzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtYd1VNbkVjeFl1ZXE2NWRa
OUxhVjFORDJ5QS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRnl5OXQ3YkFhWTFTUnRNamprWHdVTW5FY3hZdWVxNjVk
WjlMYVYxTkQyeUEvMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBREND
QTA2NEFCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOwYIKwYBBQUHAQcBAf8ELDAqMBIEAgABMAwDBAKn+WgDBAS7bOAwFAQC
AAIwDgMFACgEBHADBQAoBCt4MB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAm3cAgMA
z3QwDQYJKoZIhvcNAQELBQADggEBAIcw8az6xh2TWBrpzC0STXQbH8X56Sa48VBX
ty6eUizDaj/T/2Gyv2/cmsGyB5oA+sE7husvJZvlxWN7OdLChyw2anUqAz4EqrRx
WYJWWsRXaMWcwMggv4TKYHa+PvvJ3hL3WDvSBhmfABsZ3FXYkoI9SieRD+e+BQzQ
upPuCb1zHUDluuhMi9RnhA6PKjk1eg+sRyA2ngxQ2jEhhufWg20FaGMdihIpYu9z
vpQWrE0Gg4hwvK6KOQcuKXIyGribDF21mevuMeVC2R8eMOE51MWp+zB7/1dJflGd
MFK4O6dKYDNzsuIEYwbOFFsgltzNYMDnFjCDCLJ/euKjZluATrQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org