Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AB045645AA85C7D2149AF0C0C50A198128216D48.cer
File:                     AB045645AA85C7D2149AF0C0C50A198128216D48.cer (raw, json)
Hash identifier:          GcoSnL07IJMMaeP9E1PxPXk/ZYgNC16TGlMcGmo+6bg=
Subject key identifier:   AB:04:56:45:AA:85:C7:D2:14:9A:F0:C0:C5:0A:19:81:28:21:6D:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5307F4B3F0992BC49555697813E14AE8B48990D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/AB045645AA85C7D2149AF0C0C50A198128216D48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Feb 2023 13:24:36 +0000
Certificate not after:    Tue 20 Feb 2024 13:29:36 +0000
Subordinate resources:    AS: 262485
                          IP: 138.118.88.0/22
                          IP: 170.238.172.0/22
                          IP: 177.66.0.0/22
                          IP: 191.7.16.0/22
                          IP: 2804:500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:07:f4:b3:f0:99:2b:c4:95:55:69:78:13:e1:4a:e8:b4:89:90:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 13:24:36 2023 GMT
            Not After : Feb 20 13:29:36 2024 GMT
        Subject: CN=AB045645AA85C7D2149AF0C0C50A198128216D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:5f:49:6d:cf:e6:c1:55:fb:df:56:df:93:
                    59:75:ab:04:11:64:28:b4:6a:02:5f:68:4b:0c:a5:
                    f8:c9:74:c9:2c:c2:6e:ba:d6:a0:f6:85:05:6c:7f:
                    b5:3f:30:84:4d:2e:cf:09:de:0b:51:83:b9:30:24:
                    d7:22:75:a0:ab:87:22:c0:13:7b:89:1f:6f:08:70:
                    fe:30:94:e5:5f:9b:28:bd:b8:fa:d0:03:ee:87:5e:
                    a4:9d:62:4c:eb:be:ef:95:0c:53:7d:46:8f:eb:92:
                    e3:f1:ed:fe:f4:72:ec:19:57:f2:f8:c5:81:61:6b:
                    79:85:2d:8d:b0:b3:4f:2c:e5:17:83:a3:de:91:0b:
                    75:c8:e7:0f:8e:f3:e0:c2:f7:35:12:8d:a1:23:2a:
                    81:b0:23:eb:64:83:df:1d:5a:6f:b0:b1:a2:e4:a9:
                    35:1c:5d:6c:7b:ab:00:fc:03:89:5b:99:a0:34:46:
                    a0:88:6f:05:68:be:42:5d:76:03:f3:b2:9b:7f:d0:
                    0d:4c:a8:86:69:01:8e:99:54:8a:77:c0:0a:5c:56:
                    3f:a7:5d:41:05:00:a4:b1:5f:68:55:55:c4:b2:92:
                    97:fc:3f:ea:9c:a4:7f:cf:5d:61:50:c6:ea:f6:99:
                    0a:29:fc:7b:c8:51:0a:73:ed:5e:a7:57:dc:af:c1:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:04:56:45:AA:85:C7:D2:14:9A:F0:C0:C5:0A:19:81:28:21:6D:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/AB045645AA85C7D2149AF0C0C50A198128216D48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.88.0/22
                  170.238.172.0/22
                  177.66.0.0/22
                  191.7.16.0/22
                IPv6:
                  2804:500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262485

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:7b:82:7a:17:09:38:40:8b:be:dd:59:5f:60:a9:64:b1:
         79:11:97:b5:10:b3:9e:1f:ad:ed:aa:85:03:4f:78:39:de:8e:
         df:a7:54:76:35:d0:23:b4:14:76:a0:3b:ee:ea:bb:17:3e:d4:
         c9:c1:52:29:ca:81:9a:ee:2e:a8:cc:5f:c9:44:02:71:a3:aa:
         c0:16:d2:e3:33:66:ed:7c:a7:16:80:0f:7e:59:b8:88:27:ea:
         1f:4c:84:b1:01:62:15:85:84:95:5b:fc:ab:62:54:fa:ac:7d:
         1a:f1:58:4b:bc:88:01:16:f8:45:ca:b2:85:5a:4a:07:0d:c4:
         da:d6:9e:e5:ec:c1:ab:dc:7d:58:36:8a:8c:c9:8d:26:33:5a:
         1a:9c:f9:48:e9:ce:6d:bc:60:2a:8a:6d:00:a8:18:12:35:49:
         ee:3b:c6:35:8e:e5:fb:18:cd:41:c1:8f:8d:6d:35:ac:f9:f7:
         5b:da:ab:15:3c:07:a2:2d:78:f9:1e:ce:55:9f:0a:41:64:44:
         be:11:85:92:c4:65:79:33:f7:41:64:17:89:4f:0e:00:a8:4b:
         cb:73:67:36:96:44:32:3f:08:27:df:0d:ab:d0:59:cf:62:b3:
         2e:c6:26:c5:e6:71:ae:28:8e:dd:4a:20:ca:48:0c:32:e0:69:
         59:13:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org