Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer
File:                     ABB4C702F23574E58CE72DE74FCACBB0D74F490C.cer (raw, json)
Hash identifier:          /NWBOksfGMkb5ZtP8bDq7FoxjrncJLxQkfon8+evKnU=
Subject key identifier:   AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E9127F454A9C5FC302061A822CDB54CFC7C3CC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Feb 2024 18:33:36 +0000
Certificate not after:    Sat 08 Feb 2025 18:38:36 +0000
Subordinate resources:    AS: 262966
                          IP: 168.121.248.0/22
                          IP: 186.250.28.0/22
                          IP: 2804:ea8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:91:27:f4:54:a9:c5:fc:30:20:61:a8:22:cd:b5:4c:fc:7c:3c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 10 18:33:36 2024 GMT
            Not After : Feb  8 18:38:36 2025 GMT
        Subject: CN=ABB4C702F23574E58CE72DE74FCACBB0D74F490C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:59:0f:ed:d0:03:af:25:d3:34:10:16:11:15:
                    7a:64:3b:89:83:d0:c1:d0:0e:2a:89:bf:12:c5:0c:
                    aa:cc:52:d3:1d:13:6d:e9:a9:8e:45:ae:f1:27:33:
                    46:23:0c:25:4e:0a:d1:6a:17:9e:b5:89:e2:e2:08:
                    45:3e:04:ea:fd:39:d2:88:fa:14:4a:93:ea:0b:8d:
                    2d:33:50:54:1b:b8:3f:cf:1e:b5:b1:47:a5:9b:85:
                    59:16:1f:a3:7d:f4:8d:9a:ef:09:7a:5a:fa:06:f8:
                    90:07:0e:68:9f:38:98:3b:89:d6:27:1c:83:11:b8:
                    2f:a8:84:cd:54:32:91:d3:45:48:58:e4:68:df:77:
                    43:c5:0d:da:69:cc:08:2b:f0:b1:18:25:ef:2a:74:
                    eb:ce:96:4d:f6:70:e5:32:b2:e9:7d:56:9a:67:3c:
                    f5:14:41:fd:6f:6a:b1:aa:95:d5:8c:31:c7:32:23:
                    3f:b7:6d:fd:1d:13:dc:13:d7:0e:43:92:0e:0a:0e:
                    da:68:e5:b2:0a:2a:38:e4:7c:3d:3a:d4:94:ae:95:
                    e4:53:93:ff:ac:5e:10:ae:29:7b:46:8f:f0:46:7f:
                    39:bb:38:ae:a4:fe:19:b0:ea:90:f6:25:00:c5:e7:
                    4d:b2:4a:1c:b4:f9:a6:2a:76:4c:a7:29:89:06:62:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:B4:C7:02:F2:35:74:E5:8C:E7:2D:E7:4F:CA:CB:B0:D7:4F:49:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/0/ABB4C702F23574E58CE72DE74FCACBB0D74F490C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.248.0/22
                  186.250.28.0/22
                IPv6:
                  2804:ea8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262966

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:23:34:4d:d1:2b:93:fb:45:34:87:fe:77:6a:1d:e5:ef:
         34:29:a0:5a:65:3a:59:fa:5f:5a:a7:90:45:0f:e9:2f:c9:7b:
         5a:3f:77:ec:d1:44:77:6c:82:24:07:fc:a5:96:db:06:a9:9e:
         f4:92:f5:ea:d3:fd:7b:0c:ae:61:67:8a:2b:2d:18:4b:c8:df:
         08:64:cf:b1:10:88:68:58:cd:e2:a6:84:75:5c:04:a4:bb:21:
         ee:df:05:18:03:1d:ee:11:74:71:de:42:83:aa:b7:0f:0c:c9:
         49:20:56:2c:45:a2:73:6c:9e:6e:a3:3b:bc:6f:ce:0d:6d:29:
         72:09:eb:c5:81:1d:a8:06:c9:0f:da:2c:c7:65:01:ef:35:2b:
         97:75:7a:14:87:af:26:93:69:4d:40:6a:21:11:ec:ba:ef:dd:
         79:be:71:56:de:90:1a:60:ae:cc:ad:66:43:d8:6a:18:39:39:
         38:b1:f0:7f:f0:a3:68:a4:49:21:8b:f7:0c:99:59:37:2d:5d:
         17:ed:a8:4e:0b:5c:da:07:1c:36:48:dc:b6:ab:6a:f1:65:1f:
         42:d7:0d:fb:c2:c7:c1:c5:fc:fe:02:a2:aa:20:1f:8c:fd:47:
         db:b8:84:38:bd:e5:67:65:ca:88:91:ca:c1:d0:0b:de:cc:f2:
         e3:14:f1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org