Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.cer
File:                     ABBF81B9971F90A3BFCC0E06899CBAED391D0740.cer (raw, json)
Hash identifier:          ylrtrOwJpt9zDcGnAQHBpCy6aNEpMm6VvpfaKSwpGjE=
Subject key identifier:   AB:BF:81:B9:97:1F:90:A3:BF:CC:0E:06:89:9C:BA:ED:39:1D:07:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A6896EF8C3F5853619D85D406CBE18E6D806372
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.mft
caRepository:             rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Mar 2024 23:30:34 +0000
Certificate not after:    Sat 29 Mar 2025 23:35:34 +0000
Subordinate resources:    AS: 270398
                          IP: 189.126.10.0/23
                          IP: 2804:6b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:68:96:ef:8c:3f:58:53:61:9d:85:d4:06:cb:e1:8e:6d:80:63:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 23:30:34 2024 GMT
            Not After : Mar 29 23:35:34 2025 GMT
        Subject: CN=ABBF81B9971F90A3BFCC0E06899CBAED391D0740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:0c:c5:fb:02:e3:19:26:b4:07:37:71:f4:
                    41:6e:43:82:b9:61:62:0a:4e:9d:7a:15:4e:96:d8:
                    25:cc:3a:f1:0e:0d:15:0b:2c:07:06:42:65:e5:d8:
                    0f:b2:f2:e0:7f:76:b2:c7:31:24:45:62:5c:c9:21:
                    be:ac:ef:73:ed:e5:27:6f:9e:8b:4d:08:8f:f9:0f:
                    8b:c3:27:2d:86:6c:7b:05:78:d3:25:fe:ee:fc:a2:
                    0d:88:e1:0e:c2:2f:46:68:f6:a0:35:70:e9:21:7c:
                    07:6b:b1:98:bf:68:fc:20:12:28:d6:f6:e5:94:86:
                    81:83:5e:ea:6b:ac:f1:f9:64:f5:d1:00:22:d6:ef:
                    b8:20:6d:ec:78:8a:fd:20:65:8b:23:84:c0:63:37:
                    64:c2:78:e2:b2:b9:f8:a2:52:db:fc:03:c5:f1:1d:
                    84:16:c3:6f:28:14:87:37:df:f7:80:03:c4:68:fc:
                    d9:ac:b2:fd:46:80:66:14:c4:d1:a0:6c:5e:1d:72:
                    4e:47:e8:f3:ed:14:a4:0f:cd:b4:e3:39:8b:43:73:
                    1b:66:59:ee:cb:71:48:e1:be:73:94:31:76:0f:de:
                    76:c8:81:07:fb:f9:c6:b0:ae:59:7e:44:b3:5b:c2:
                    6b:3e:07:38:c9:1e:bf:9e:a5:c2:5d:8b:fd:52:2a:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:BF:81:B9:97:1F:90:A3:BF:CC:0E:06:89:9C:BA:ED:39:1D:07:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/ABBF81B9971F90A3BFCC0E06899CBAED391D0740.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.10.0/23
                IPv6:
                  2804:6b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270398

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:46:c5:96:9f:cf:03:ba:8f:8a:03:a1:be:95:a8:7e:07:
         2c:1f:47:ad:d2:02:53:e7:5d:c4:c7:aa:a7:61:c5:ed:88:65:
         c7:c2:fd:6b:a9:00:2a:31:4d:6e:82:10:db:cc:39:c1:d2:8e:
         88:6d:3d:3f:90:16:ee:e8:82:a9:28:36:ba:77:af:af:6e:dd:
         5e:29:9e:e7:c6:94:71:76:1a:aa:eb:c2:6d:8d:c3:d6:a6:ab:
         1b:cb:75:0a:fa:cb:f6:25:40:ba:bc:11:d2:f6:08:89:e2:35:
         b1:c8:18:ac:d8:00:e5:a0:89:8f:33:eb:66:51:d6:04:eb:7d:
         7a:9b:5a:f0:84:39:5f:48:26:ef:b3:28:9a:32:85:4f:14:12:
         68:0a:41:5a:2c:ca:f1:2b:35:1e:8c:68:aa:6c:db:c8:83:fb:
         62:32:0b:9b:cb:70:7c:a4:35:a6:a1:82:50:20:82:11:d9:ad:
         cd:87:26:04:66:d9:7a:06:36:66:d8:5f:3b:92:97:33:e8:57:
         cd:f5:35:4a:6e:23:7a:d1:22:b5:af:00:aa:66:2c:36:d2:c8:
         03:eb:a2:08:92:8b:f7:4a:e1:11:4e:25:fc:5f:1a:da:14:0f:
         5e:3d:d3:c2:df:7b:57:4e:94:40:cd:32:49:e9:e7:c5:15:aa:
         dc:15:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org