Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AB1208C7749A004A7E8E0BC8565235BB154C6988.cer
File:                     AB1208C7749A004A7E8E0BC8565235BB154C6988.cer (raw, json)
Hash identifier:          18IMgfDE4hCU1bcjGYlT1jDvOabbEDkKHfCZpD6Ghzc=
Subject key identifier:   AB:12:08:C7:74:9A:00:4A:7E:8E:0B:C8:56:52:35:BB:15:4C:69:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       610036A0FD98CA5C99A84365A248E885BC68B874
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AB1208C7749A004A7E8E0BC8565235BB154C6988.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 12:03:43 +0000
Certificate not after:    Thu 12 Dec 2024 12:08:43 +0000
Subordinate resources:    AS: 262493
                          IP: 138.255.216.0/22
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:00:36:a0:fd:98:ca:5c:99:a8:43:65:a2:48:e8:85:bc:68:b8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 12:03:43 2023 GMT
            Not After : Dec 12 12:08:43 2024 GMT
        Subject: CN=AB1208C7749A004A7E8E0BC8565235BB154C6988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:e2:e1:94:aa:9f:7a:cf:3c:b0:2c:0b:e0:
                    5d:1b:27:b4:30:73:10:6f:d1:00:d7:b4:b7:01:69:
                    1e:11:83:51:80:eb:79:fd:ce:27:f3:b9:c8:b3:3c:
                    94:89:23:43:f6:69:9f:c6:3d:36:b4:d5:5d:29:8d:
                    71:96:de:3d:ae:7a:df:47:29:89:c0:87:c5:7d:40:
                    06:12:bc:c5:56:b8:bb:30:b1:3d:df:fd:21:bd:eb:
                    d6:f2:43:d5:7f:a5:68:54:b6:c1:00:d1:32:82:c0:
                    06:2c:74:15:9d:a9:3a:4c:2f:3b:e7:ec:47:a1:b5:
                    78:62:25:80:bc:9c:ed:d9:bc:6e:b5:3d:77:39:b8:
                    63:0a:67:25:5b:a2:02:b7:06:15:92:fe:0a:5f:ce:
                    02:19:1c:e2:9f:1c:72:25:1b:fa:8a:0a:ab:fd:72:
                    aa:59:a4:ac:0f:f2:cf:fe:10:e9:93:1b:5b:85:cb:
                    b1:dc:4a:bf:a4:21:cc:74:a3:b8:24:71:da:bd:81:
                    df:e9:2c:b0:5e:a3:4f:77:8d:b8:24:a9:f4:fe:0a:
                    e0:15:cb:58:9c:d5:ca:a3:ec:d8:6c:fb:2b:69:1e:
                    8a:d1:3a:4b:34:dd:12:72:c8:3d:fd:6f:a3:8f:6e:
                    de:1c:67:78:56:1a:84:82:c5:ca:30:06:8b:e8:6b:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:12:08:C7:74:9A:00:4A:7E:8E:0B:C8:56:52:35:BB:15:4C:69:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/AB1208C7749A004A7E8E0BC8565235BB154C6988.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:2a:1f:84:6c:73:1d:41:2b:49:e0:8d:bb:87:0c:94:a1:
         39:40:b0:44:f4:4b:ac:50:05:6c:72:35:f9:65:f8:39:2b:e9:
         02:32:00:b6:f2:fc:e9:b4:38:af:10:82:9b:8a:28:d4:24:cf:
         af:6c:72:04:67:50:75:a2:d7:b1:7a:87:a8:65:8e:87:9d:26:
         c9:70:35:26:8f:cf:5e:63:30:7b:89:f1:7c:b2:47:76:cf:d5:
         c9:0c:db:8b:b4:1e:28:9d:05:02:36:ad:ab:cb:81:01:05:9e:
         55:75:7f:4c:07:12:6a:f8:3e:b5:64:79:fe:8e:05:d8:3c:c1:
         aa:ef:4d:b8:8f:b7:bf:99:1b:fe:1f:e0:8c:47:41:c5:81:24:
         44:47:c3:8c:0b:20:6f:6f:36:b0:f2:06:dc:2d:4d:dc:8c:e3:
         d7:a5:12:fd:eb:9f:f0:63:71:aa:54:4d:98:da:06:28:28:b2:
         f1:80:21:de:0d:6b:d4:df:5c:b7:12:96:b3:4d:c1:80:18:5b:
         3a:d2:cb:9d:73:2f:9e:2c:88:4f:fd:54:d0:0e:7d:ee:36:1e:
         ab:af:67:cf:5a:4b:f2:9b:04:ce:4e:6c:96:88:40:7e:12:6a:
         75:ab:de:d6:89:3d:bc:06:ce:46:53:12:be:c1:aa:0c:61:b9:
         3b:e6:e0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org