Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
File:                     AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer (raw, json)
Hash identifier:          8kQFlH3Sxw0h/3UfVGFxBO901H7+M+wZU81fAzV7gRA=
Subject key identifier:   AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BB7C9A1F84091179FF15A42B6B1637CBAD00CCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 14:08:35 +0000
Certificate not after:    Tue 31 Dec 2024 14:13:35 +0000
Subordinate resources:    AS: 268779
                          IP: 45.172.12.0/22
                          IP: 2804:5a84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:c9:a1:f8:40:91:17:9f:f1:5a:42:b6:b1:63:7c:ba:d0:0c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 14:08:35 2024 GMT
            Not After : Dec 31 14:13:35 2024 GMT
        Subject: CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:a5:f6:29:8f:d9:35:cc:df:39:0f:f2:f2:
                    72:15:e0:8e:91:dd:48:ac:f4:9b:83:db:90:dd:b6:
                    39:b6:c3:e7:8a:c0:66:78:e9:54:9e:4c:38:2d:5f:
                    7b:ae:6c:c8:90:05:14:93:97:be:37:2c:8f:41:00:
                    69:ba:77:f9:c1:df:b2:78:ef:cd:34:af:1e:c3:0f:
                    0c:6c:8d:87:b2:d2:57:bd:a8:18:33:64:f0:99:50:
                    93:ee:07:54:49:7a:60:65:eb:26:31:e9:c8:d2:a0:
                    86:54:bf:31:3e:60:cd:ae:77:98:0b:06:d8:71:56:
                    3f:ab:62:15:2d:7d:cc:35:1d:23:34:98:be:d6:45:
                    5f:c1:48:69:27:16:0a:9d:1b:6a:90:dc:94:a5:ee:
                    fd:42:70:f1:98:14:c2:65:ea:95:8b:16:05:38:15:
                    a4:38:18:a0:55:7a:47:16:5c:86:4f:f9:fa:06:59:
                    cd:03:42:3c:a8:31:0e:6b:c2:99:17:85:3a:fe:39:
                    f4:29:1a:e7:49:8e:57:99:b0:20:e5:8a:d1:d7:0b:
                    26:67:ba:10:43:f4:a6:ab:2f:f4:da:a7:cf:a4:df:
                    c5:36:0a:01:c2:4c:e8:ea:0c:c3:b8:16:08:63:8e:
                    4f:9e:47:65:f3:e8:f6:0d:aa:9e:3a:54:22:77:1c:
                    6f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.12.0/22
                IPv6:
                  2804:5a84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268779

    Signature Algorithm: sha256WithRSAEncryption
         76:de:72:93:90:53:88:d3:eb:99:db:a3:d7:f3:e6:5b:96:19:
         15:5b:0f:50:6e:81:9e:63:f5:11:e6:08:81:2d:aa:de:9c:79:
         ef:46:01:a2:4e:3f:d5:8d:84:d5:3d:b2:01:78:22:9b:bc:b0:
         69:13:05:bc:d6:f4:87:d8:45:ce:46:91:05:7c:e0:84:45:2b:
         fb:26:d2:14:79:3d:ad:da:b4:6f:93:79:e7:1a:f4:27:d3:85:
         4d:67:c5:e8:39:97:e9:42:c6:36:74:9a:3c:9a:65:35:66:4e:
         78:fb:7b:4e:d7:fe:65:27:73:a7:d4:50:ec:c7:e2:ef:1d:cc:
         ad:d2:18:34:8d:b7:01:6d:66:00:96:4e:36:87:11:ea:d7:3d:
         7b:9c:e2:22:92:87:29:70:d4:ac:dc:36:fa:10:5c:a1:68:56:
         51:c5:73:1c:38:98:24:fa:30:58:01:e6:bf:74:82:60:a3:45:
         bb:5b:c7:54:25:23:b2:70:d1:4c:23:91:f7:ba:61:61:57:57:
         a1:14:76:7e:6d:e4:a1:1b:42:43:96:03:52:0f:c5:45:06:1c:
         4b:47:0c:4e:0a:07:97:fb:0d:57:e3:80:cc:57:bb:57:9c:be:
         10:8b:ac:3e:2e:56:d4:56:42:e9:e6:c4:e2:ef:aa:80:f3:52:
         e1:a0:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org