Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.cer
File:                     AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.cer (raw, json)
Hash identifier:          L7tnAmGaORpGljmygsNxAMQahW2kuikXif8YnC2Db6Q=
Subject key identifier:   AB:2A:F0:8A:29:08:F4:D9:C4:EF:E8:80:2C:52:45:AA:B1:17:3C:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1255AFE3699024136667C10D8EA838899C0C389C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 18:58:52 +0000
Certificate not after:    Wed 05 Mar 2025 19:03:52 +0000
Subordinate resources:    AS: 265102
                          IP: 170.254.96.0/22
                          IP: 2804:32e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:55:af:e3:69:90:24:13:66:67:c1:0d:8e:a8:38:89:9c:0c:38:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 18:58:52 2024 GMT
            Not After : Mar  5 19:03:52 2025 GMT
        Subject: CN=AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:e4:b8:5f:e1:dc:d0:15:59:f3:a6:6a:1a:
                    94:0e:85:e1:bc:72:1d:99:27:81:dc:3e:a2:8f:8b:
                    d5:78:d8:ac:b8:23:76:cf:42:e9:81:31:61:08:75:
                    0a:80:ed:96:1e:4d:6a:c0:aa:1b:7f:7f:fb:7c:10:
                    bf:da:49:7f:51:45:1b:ec:7a:e6:6b:0f:19:fd:f8:
                    df:96:59:cf:7c:27:3b:f5:95:b5:24:7a:a6:a7:cc:
                    dc:e5:50:2f:ae:64:74:6c:ea:13:b2:9c:17:71:a4:
                    2b:f7:8e:3d:d9:1e:1e:c7:cc:2d:d6:98:1d:bc:56:
                    a2:38:dc:7d:4d:3f:3d:69:f7:10:9e:d5:47:ae:26:
                    ee:ae:54:79:fe:90:40:6e:89:10:29:a6:df:2b:f5:
                    fe:44:ad:2b:05:fa:05:fa:c4:e0:5d:59:c6:a9:0d:
                    79:19:32:8b:53:22:75:1b:94:0f:2d:f4:99:69:06:
                    71:6d:2e:c4:40:b5:d6:4f:9f:10:51:f4:89:86:bd:
                    60:ac:5e:12:18:ad:75:63:19:5c:bb:96:56:19:e9:
                    a0:1d:a9:c4:59:46:ec:f7:b1:66:bb:33:c2:81:ad:
                    c4:bc:91:6f:0f:3d:ae:00:51:70:8f:69:a7:d9:20:
                    1f:3b:aa:ce:9a:ab:43:82:47:c5:da:c8:d1:fc:dd:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:2A:F0:8A:29:08:F4:D9:C4:EF:E8:80:2C:52:45:AA:B1:17:3C:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/AB2AF08A2908F4D9C4EFE8802C5245AAB1173C1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22
                IPv6:
                  2804:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265102

    Signature Algorithm: sha256WithRSAEncryption
         88:af:c0:72:ec:8a:d5:22:c7:2a:6b:d7:22:59:c8:fd:84:ad:
         c5:f8:83:1c:85:b6:42:95:3e:32:90:6d:dc:07:a0:9e:25:98:
         f0:4c:5d:46:98:4b:b2:87:8c:a4:23:62:ba:0d:f4:e5:11:d3:
         75:42:2d:e1:5c:b6:9a:a1:5d:f3:6e:78:09:7e:bd:7c:27:6e:
         74:d5:4c:e0:69:8e:0f:4a:1e:a6:21:3f:d9:89:2d:e1:53:bc:
         49:7d:f1:92:f8:48:8f:56:16:83:50:fe:a7:54:84:7e:33:3f:
         4f:39:6b:18:c0:b1:4a:da:d7:e4:32:e7:1e:77:2f:e7:2e:a1:
         25:9c:b0:36:dd:61:f5:36:a4:25:8f:e2:cd:22:74:18:59:3c:
         80:f5:9b:9e:ed:49:cd:83:93:f3:e1:25:d7:a2:11:3b:5a:10:
         7a:7d:4e:f4:59:d5:96:33:a5:17:2f:c5:62:8d:b4:76:cc:0c:
         f2:b2:44:16:8c:cf:5f:a1:ea:86:a5:8e:b1:01:dc:77:c8:f1:
         58:76:fe:ae:00:74:78:b7:13:83:48:3e:62:56:11:12:36:40:
         97:19:ce:9d:ec:4d:15:13:f6:30:6a:8f:22:7e:57:dd:ba:d7:
         9b:0a:3e:e0:74:d8:70:0d:80:c2:71:de:6d:60:58:31:5c:2e:
         17:ab:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org