Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AABCF4DA715E733E44490D75CC458D8FF0F7D65A.cer
File:                     AABCF4DA715E733E44490D75CC458D8FF0F7D65A.cer (raw, json)
Hash identifier:          nfHKtyK+1nQWemHmmRqPVugnsh833m1ub1znHnsfVrI=
Subject key identifier:   AA:BC:F4:DA:71:5E:73:3E:44:49:0D:75:CC:45:8D:8F:F0:F7:D6:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C76875B67BDB7ADDEC240FFBD7066D03A5C1259
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/AABCF4DA715E733E44490D75CC458D8FF0F7D65A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 13:01:15 +0000
Certificate not after:    Tue 18 Mar 2025 13:06:15 +0000
Subordinate resources:    AS: 263250
                          IP: 45.180.252.0/22
                          IP: 177.234.160.0/19
                          IP: 2804:17c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:76:87:5b:67:bd:b7:ad:de:c2:40:ff:bd:70:66:d0:3a:5c:12:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 13:01:15 2024 GMT
            Not After : Mar 18 13:06:15 2025 GMT
        Subject: CN=AABCF4DA715E733E44490D75CC458D8FF0F7D65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:ae:ae:8a:1c:b1:91:d6:4f:82:ec:22:2a:
                    a8:ba:96:bf:64:c4:6f:11:b2:c0:4a:cd:bb:90:56:
                    e9:73:b2:b0:7f:87:6f:56:99:34:5b:8d:d5:6c:38:
                    98:1a:dd:70:00:28:fd:36:26:ef:f1:6f:00:47:49:
                    5f:a8:85:b1:f8:50:53:c7:81:3b:5d:ca:cd:00:23:
                    1a:1e:3a:9d:cc:e8:14:de:39:70:6e:bd:5a:fb:af:
                    c2:bc:28:75:86:c4:d1:a2:0e:91:ea:90:4a:61:9c:
                    2f:43:a3:47:26:82:48:59:ad:be:64:b8:0b:07:ed:
                    fd:1d:55:09:d9:03:44:2f:a9:c8:11:1f:17:2b:4c:
                    f7:ef:5a:03:e5:bc:0b:4c:d3:67:34:67:3c:76:fa:
                    2a:ab:a5:cc:11:99:0e:87:29:9e:d3:c8:9d:00:b9:
                    ee:3a:22:da:a5:57:da:a7:a7:90:ee:56:39:99:7b:
                    d7:7b:bc:cc:1f:b5:6d:3b:6f:fa:e9:cb:ec:be:5c:
                    b1:b7:cd:c5:34:38:99:cc:01:2e:b5:4f:49:e9:66:
                    35:d7:80:68:ac:fd:a3:61:30:d3:5f:79:69:00:c2:
                    6f:23:3f:46:de:95:bd:6d:7d:85:73:e3:d3:54:93:
                    71:10:bd:c7:79:a9:6f:a1:7d:f1:96:dd:54:14:4e:
                    3b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:BC:F4:DA:71:5E:73:3E:44:49:0D:75:CC:45:8D:8F:F0:F7:D6:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/AABCF4DA715E733E44490D75CC458D8FF0F7D65A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.252.0/22
                  177.234.160.0/19
                IPv6:
                  2804:17c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263250

    Signature Algorithm: sha256WithRSAEncryption
         67:77:af:a3:c0:bc:62:f8:75:36:e5:3a:0a:26:d5:00:d5:5e:
         4a:ac:38:f3:d7:be:ba:6f:17:36:3a:e6:8b:d4:5a:ba:71:45:
         67:a0:ea:37:8b:84:35:0a:3a:0e:48:d6:63:34:44:fe:ac:db:
         a1:b8:fe:70:37:d8:b1:6a:fa:6e:19:ee:f0:3e:3e:b6:2d:63:
         90:4a:df:b2:05:d2:81:4e:e8:eb:72:c2:b6:23:63:87:fa:b7:
         77:20:62:ed:fd:59:8e:16:85:72:b6:97:a9:f8:f3:44:5b:18:
         79:7a:1d:27:73:b4:93:ba:8c:25:80:64:fb:e6:e5:ef:2f:72:
         c2:f9:ec:4b:b1:3b:84:60:fd:84:7a:9a:85:71:85:66:79:af:
         1d:81:55:2c:c3:80:2d:24:b4:bb:7d:46:87:ce:00:4f:03:b6:
         f6:1f:21:47:f8:fc:96:04:8b:62:fb:b0:eb:e5:19:cd:67:9b:
         ae:b6:c4:a3:7f:d0:fb:fe:7e:83:a9:6c:38:8e:e4:9c:dc:e2:
         08:61:bb:f6:a4:7a:5a:01:88:ad:fb:c6:e3:2b:eb:0b:a3:71:
         fc:09:5d:7d:dd:f1:3b:f8:10:ac:5d:52:a7:43:dc:8b:52:f9:
         04:8a:59:c1:13:33:d5:81:fa:2b:d0:64:9c:d7:73:57:98:fd:
         1d:11:47:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org