Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer
File:                     AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.cer (raw, json)
Hash identifier:          Ap0Y4elxOUBAzJLbjhEjszj0Qy5Q1TGoU7emoY2niBc=
Subject key identifier:   AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       536C0BE41BADFD01F4D029C9BE527E6C0AA5D870
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Dec 2021 14:25:52 +0000
Certificate not after:    Wed 30 Nov 2022 14:30:52 +0000
Subordinate resources:    AS: 268638
                          IP: 45.164.224.0/22
                          IP: 2804:5444::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6c:0b:e4:1b:ad:fd:01:f4:d0:29:c9:be:52:7e:6c:0a:a5:d8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 14:25:52 2021 GMT
            Not After : Nov 30 14:30:52 2022 GMT
        Subject: CN=AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:78:92:c0:cd:ee:ea:10:6c:ff:35:ca:d2:
                    23:e0:68:f9:b8:4d:dd:c7:05:bd:c2:f6:a2:a1:e6:
                    d9:c7:78:9a:d1:78:9f:7d:4d:5a:64:86:81:f8:f5:
                    80:c7:02:83:d8:8e:3e:a3:c8:01:48:a1:cd:04:ee:
                    d3:aa:bd:c9:ad:34:1b:5d:33:6e:04:23:7c:84:83:
                    2c:5f:75:85:d6:6a:ec:da:bc:c4:8b:47:99:87:35:
                    a0:c3:38:b4:bb:74:5d:1b:94:a7:5d:95:35:4a:09:
                    a6:2c:66:af:d1:f1:d9:23:d5:19:b9:b1:55:8f:22:
                    a9:28:76:6b:11:6d:c6:82:51:f1:ab:9b:0a:51:8d:
                    65:4e:76:0e:ea:35:3c:0d:c5:71:37:a2:8e:e7:89:
                    4f:13:8c:ee:4f:0a:28:e4:36:66:b6:f2:e1:26:5b:
                    c5:cd:df:ed:50:ba:2a:22:4b:22:3d:28:c8:70:1d:
                    04:7f:c0:90:78:a4:55:ed:c1:18:24:22:0c:99:dc:
                    ea:58:3a:65:ba:6c:79:5d:e3:23:61:3a:e5:05:02:
                    96:bc:2e:17:21:6d:36:d0:1d:31:0d:2f:74:23:15:
                    5e:b4:4c:95:40:db:cf:a8:13:2b:5d:9a:6b:e7:2a:
                    13:78:71:fd:c5:29:b0:43:55:66:45:8b:ae:94:ec:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:06:C1:51:5E:DB:64:3D:B9:DF:8E:7E:13:61:A8:BB:06:83:DE:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/AB06C1515EDB643DB9DF8E7E1361A8BB0683DE7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/22
                IPv6:
                  2804:5444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268638

    Signature Algorithm: sha256WithRSAEncryption
         58:05:55:a5:2d:00:41:36:94:c9:e6:0a:6d:0c:74:c7:61:35:
         47:24:8a:09:0e:84:3c:30:b6:b6:50:b3:5e:1c:25:a8:d2:ab:
         50:c8:94:c5:bb:34:01:3b:7f:a7:f6:14:57:94:34:ef:d0:50:
         a1:4b:2e:7a:4d:d4:cf:a0:07:65:6d:27:20:f3:df:34:5e:e8:
         65:d4:ad:b7:c1:a0:91:e0:50:5b:19:04:78:35:62:73:9e:d5:
         02:5f:23:8b:cb:1d:ca:56:0b:f9:4b:b8:11:07:29:05:bc:f8:
         03:01:e8:b1:6e:cb:73:ab:f4:bd:de:c4:0d:2f:ae:97:d1:43:
         f9:05:59:e6:22:cf:c0:61:e1:77:b8:08:16:f3:42:22:a8:0c:
         a6:0f:d3:83:42:83:0f:0e:d0:4d:9e:91:74:96:55:bc:f6:00:
         24:18:55:6f:9b:01:f9:30:ab:c1:7f:5d:4c:32:2d:50:65:4f:
         cb:d6:f7:3a:fe:47:2d:67:7c:65:c1:0c:8e:0d:81:db:c1:b8:
         d3:ff:86:0a:7b:eb:1a:93:cf:62:ef:cc:1b:1f:24:f7:8c:38:
         e0:33:5b:be:15:01:c8:6e:bf:2f:f3:30:27:eb:bb:a0:42:48:
         08:6a:66:7a:d9:fe:e5:7f:4b:52:01:b6:17:db:02:db:c1:95:
         ec:9f:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org