Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AAF11852F10CFF79210384FCA1FE2F949AD8DC79.cer
File:                     AAF11852F10CFF79210384FCA1FE2F949AD8DC79.cer (raw, json)
Hash identifier:          +LTNCYL94wQLOadF0FzNrf/o9rvv16bX1a78Dn6bub4=
Subject key identifier:   AA:F1:18:52:F1:0C:FF:79:21:03:84:FC:A1:FE:2F:94:9A:D8:DC:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1208F5E79D3F897D480006490C6D41304CBDEA4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/AAF11852F10CFF79210384FCA1FE2F949AD8DC79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 15:50:04 +0000
Certificate not after:    Fri 07 Mar 2025 15:55:04 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:08:f5:e7:9d:3f:89:7d:48:00:06:49:0c:6d:41:30:4c:bd:ea:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 15:50:04 2024 GMT
            Not After : Mar  7 15:55:04 2025 GMT
        Subject: CN=AAF11852F10CFF79210384FCA1FE2F949AD8DC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:2b:61:10:44:e9:90:f1:77:e5:f6:7b:52:
                    e7:f4:cd:9b:18:d1:2f:14:07:f8:b5:53:2b:7b:bc:
                    1a:04:a3:bd:a0:66:f8:68:a0:e1:15:c8:e6:21:c7:
                    0e:d7:7e:fb:1f:cf:70:e0:cc:de:c1:99:44:e7:d2:
                    f0:95:30:57:a0:22:66:8e:bf:ea:5f:7c:fb:21:36:
                    e5:b2:e2:92:88:00:f0:89:f4:c6:f4:d0:b6:0e:51:
                    a3:f9:74:83:16:0a:ff:f5:cf:87:5e:0e:ba:1c:c3:
                    05:69:a6:7b:61:c9:27:19:e3:8b:ec:73:d9:79:39:
                    61:b0:90:c4:1c:fa:58:2d:39:17:1b:2e:61:78:a9:
                    61:8e:f2:97:ea:61:21:9e:36:44:7f:07:9b:67:a4:
                    ff:2a:d4:4d:27:9b:e9:ef:e3:52:0a:34:0f:45:c0:
                    81:78:7c:99:ad:b2:0c:45:25:8e:ed:3a:fb:43:c0:
                    8b:88:3e:ab:8e:12:35:6e:07:05:50:3f:f4:15:e9:
                    a4:bc:13:2c:55:6e:63:d9:32:7c:82:10:87:14:70:
                    ed:02:21:ab:6d:4e:d1:54:13:4c:97:ae:3c:63:17:
                    4c:97:77:44:26:fc:a9:fc:a7:e1:06:9c:45:d3:dc:
                    37:55:7a:ec:36:fc:98:96:aa:e2:61:8b:d3:78:03:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:F1:18:52:F1:0C:FF:79:21:03:84:FC:A1:FE:2F:94:9A:D8:DC:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/AAF11852F10CFF79210384FCA1FE2F949AD8DC79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         a5:ab:9c:b3:7b:aa:34:90:e8:f1:15:5e:eb:a7:0f:b9:66:2e:
         fd:ce:38:5d:63:6c:13:88:c9:61:f2:e2:b5:a3:80:69:b9:05:
         d8:5b:0e:13:5b:42:89:88:a1:26:88:bf:c9:e6:b1:b0:cb:ac:
         02:49:a5:72:85:f6:b7:28:3d:84:44:c5:0d:82:f4:b8:b5:5f:
         cb:4d:18:b8:e6:6d:28:f3:2e:5f:a8:9e:18:bf:9e:a5:ec:bb:
         9b:07:8a:ee:0d:79:49:c9:f6:93:03:73:77:ca:fa:bd:0b:7c:
         03:de:40:42:ac:a4:54:95:bd:ec:c5:8f:f1:b6:2b:30:7b:c4:
         2c:07:62:0a:15:39:7d:2f:ab:93:93:d2:01:08:dc:ff:fa:78:
         1d:6d:01:8d:db:9f:06:57:c0:7d:d0:f9:de:4e:75:6c:45:2e:
         66:7b:b8:c2:af:7d:75:39:f4:af:2f:37:82:0e:7d:cd:75:71:
         ac:38:02:2f:57:ec:b8:ac:3c:ea:e0:07:fd:e2:bc:a0:9b:66:
         3a:ab:78:d6:3d:9e:fb:b3:18:e4:2e:0a:1f:3b:b9:de:6b:7a:
         00:c0:22:55:2b:0c:ab:5a:a5:7f:ab:5c:22:27:bd:d8:ac:2c:
         69:2b:38:8b:d2:22:a5:5b:a1:ed:9b:3c:64:38:6a:4c:cd:ca:
         a7:a5:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:59 2025 by rpki-client