Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ABA0B8480FD420510211618AAAE0122F942AC662.cer
File:                     ABA0B8480FD420510211618AAAE0122F942AC662.cer (raw, json)
Hash identifier:          vfySx28PXwWBMBPdSkhrDMmNd/7MjxUx0PU1OASGk6g=
Subject key identifier:   AB:A0:B8:48:0F:D4:20:51:02:11:61:8A:AA:E0:12:2F:94:2A:C6:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D42FA42649FF2CACB7FF8D491622953D33F7448
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/1/ABA0B8480FD420510211618AAAE0122F942AC662.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 21:23:28 +0000
Certificate not after:    Mon 14 Oct 2024 21:28:28 +0000
Subordinate resources:    AS: 266203
                          IP: 192.140.52.0/22
                          IP: 2804:3c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:42:fa:42:64:9f:f2:ca:cb:7f:f8:d4:91:62:29:53:d3:3f:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 21:23:28 2023 GMT
            Not After : Oct 14 21:28:28 2024 GMT
        Subject: CN=ABA0B8480FD420510211618AAAE0122F942AC662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:d7:f8:57:82:72:67:8e:a5:fa:76:0f:48:
                    a8:ee:0e:82:51:59:61:31:04:f2:0f:35:80:02:c1:
                    9e:cb:de:b6:9f:91:0a:ae:3c:18:b3:43:cf:56:8a:
                    17:3e:5d:bf:a1:b8:28:7b:4e:79:79:e1:37:df:72:
                    bf:f5:74:5a:09:da:f5:38:62:c5:23:7b:17:d0:7a:
                    a4:c2:48:eb:0d:5c:c1:64:07:fa:4b:cf:a4:a9:10:
                    77:d9:e0:68:af:6d:e6:18:cf:d7:ab:73:9f:4a:da:
                    f4:5d:a7:17:68:29:3f:39:0b:38:71:40:ed:3b:2e:
                    d3:83:33:ce:f8:b4:36:54:ac:05:1a:d4:91:ed:02:
                    95:89:f2:18:4c:73:dc:06:b0:c2:ab:c0:c0:ce:63:
                    ea:fa:7b:1d:44:f5:3a:40:58:63:4a:f2:c8:c4:98:
                    aa:80:ae:d4:94:9a:cf:6f:c5:9b:95:b6:76:da:12:
                    83:72:3f:69:94:0e:85:c6:5e:28:40:3a:a1:23:75:
                    70:41:4b:7e:a7:24:10:8b:65:8f:70:c9:ff:3f:0a:
                    f2:26:e6:0c:c3:aa:1b:6c:8d:50:a9:1e:80:9c:d8:
                    23:94:d3:d4:f4:3d:6b:9d:3e:1c:99:e7:97:34:35:
                    3f:c0:fb:dc:f0:9b:c2:c3:0e:cb:17:59:fa:ab:7b:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:A0:B8:48:0F:D4:20:51:02:11:61:8A:AA:E0:12:2F:94:2A:C6:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/1/ABA0B8480FD420510211618AAAE0122F942AC662.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.52.0/22
                IPv6:
                  2804:3c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266203

    Signature Algorithm: sha256WithRSAEncryption
         2d:c7:4e:f0:75:69:4c:6c:5c:95:f0:5c:2f:de:90:34:00:bf:
         8f:a7:9f:7d:9b:82:3c:92:ca:e9:5c:11:25:4b:27:05:4d:de:
         0d:4b:16:ee:c8:03:75:97:ff:16:ff:35:0f:b1:fd:0e:8c:68:
         24:14:1e:82:6d:1f:ee:e2:dd:21:88:1b:87:73:60:9c:9e:1b:
         13:cb:2f:45:47:9c:90:e6:41:94:ff:34:5f:a2:d9:50:e5:23:
         97:2f:23:b9:ef:7f:b8:d6:78:14:23:9e:ce:c9:b4:a5:87:0d:
         e1:d4:b9:1e:5b:bb:91:30:76:e0:41:ce:f7:02:ca:b4:10:e5:
         cb:b3:57:c1:18:f5:db:86:3d:be:8b:6a:c0:10:c6:cf:69:c9:
         89:1a:c1:40:cc:1d:e9:a3:d8:32:7b:43:0b:9d:8b:25:64:40:
         70:c1:07:78:02:d3:86:b9:c4:f2:88:df:d8:03:b6:17:76:82:
         43:1e:e8:03:5b:ff:96:b2:d7:f2:fd:8c:dc:1e:e4:aa:03:d6:
         92:b7:fe:35:1d:14:6a:e0:0a:c5:26:f6:22:00:a3:26:ba:04:
         c7:ea:a5:12:e9:92:39:b0:f8:c1:67:23:e7:39:90:25:87:c8:
         2c:9b:16:24:07:fa:64:7b:c9:aa:42:7e:30:2a:c1:87:e7:e8:
         3f:60:01:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org