Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.cer
File:                     AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.cer (raw, json)
Hash identifier:          o2fevsBrE13lqYTrKnzr4z1YOrRjwhDwJpUJFntoao8=
Subject key identifier:   AC:32:EB:9E:48:59:B6:D0:CF:A4:7C:B6:8A:AA:7A:15:28:1B:C6:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34DC46CED907181CB25D33C30D6A41A6E71EAEB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Feb 2023 17:55:15 +0000
Certificate not after:    Mon 26 Feb 2024 18:00:15 +0000
Subordinate resources:    AS: 264384
                          IP: 131.161.176.0/22
                          IP: 2804:1da8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:dc:46:ce:d9:07:18:1c:b2:5d:33:c3:0d:6a:41:a6:e7:1e:ae:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 17:55:15 2023 GMT
            Not After : Feb 26 18:00:15 2024 GMT
        Subject: CN=AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dc:3b:05:7f:f9:4d:b9:bd:13:78:a4:33:af:
                    7d:28:b3:d0:5b:0c:46:c1:b3:f7:83:3e:e4:42:58:
                    57:43:72:af:ce:6a:c4:42:61:59:ee:3b:04:72:d2:
                    bb:78:99:eb:52:46:c5:11:37:94:fc:cb:85:d9:5f:
                    b3:02:e9:b4:55:70:3e:d8:7c:a6:60:ab:24:7f:79:
                    97:40:88:0b:f7:96:6d:47:9c:56:8a:2a:43:a0:ef:
                    1e:42:3d:91:77:4a:3e:0d:6c:1f:ec:9a:64:e1:c3:
                    bf:f4:7a:e1:cf:e7:30:81:be:ca:5f:de:e7:cb:a0:
                    34:8d:8e:a6:fa:c4:ff:88:ca:ff:37:36:a9:69:08:
                    cc:72:d9:df:4e:98:4c:8a:d3:7a:27:67:0e:a2:9d:
                    e6:20:68:78:33:e5:3e:cb:ff:9a:f2:c7:95:9f:d6:
                    3e:e3:f5:44:a6:b9:04:71:4c:d5:0b:5c:72:fd:64:
                    ef:54:ff:9e:6a:d4:c8:0b:72:af:f2:d8:9d:45:b2:
                    46:bf:53:60:18:7b:46:78:72:4b:d8:d8:e8:77:95:
                    d9:01:aa:8f:b7:15:37:17:de:a0:2a:38:a5:a1:15:
                    5b:70:27:f9:f7:ea:76:c2:7a:c0:e6:d6:36:c2:22:
                    0d:6d:13:56:3c:f8:1a:1a:55:b4:9e:3a:57:0f:47:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:32:EB:9E:48:59:B6:D0:CF:A4:7C:B6:8A:AA:7A:15:28:1B:C6:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.176.0/22
                IPv6:
                  2804:1da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264384

    Signature Algorithm: sha256WithRSAEncryption
         8f:7a:e9:ea:fd:12:e0:46:e0:88:40:4e:b4:4d:5a:54:38:5d:
         6d:62:ac:f1:94:af:91:43:05:4c:b1:f2:de:43:21:5e:3e:4d:
         53:83:0b:96:2e:2a:e9:55:ef:ee:03:6f:14:89:4d:22:c3:46:
         b9:0b:f3:e5:80:4d:40:51:12:f0:a9:82:4e:be:27:ae:66:db:
         60:f8:7e:e1:51:ad:1d:ed:8f:71:bd:e6:d8:7e:8e:1c:f3:2c:
         17:b8:60:76:04:b0:fe:10:f6:ae:00:9f:b1:5a:e9:0b:e5:67:
         0f:44:42:35:66:25:29:5f:cf:43:f1:a1:b4:b3:13:68:04:80:
         b8:15:93:54:7d:e8:9f:c5:f9:1c:63:05:74:72:17:f7:b7:8c:
         09:69:ae:80:59:06:c8:d3:fe:40:9b:d5:1f:cd:d1:e4:51:38:
         46:11:f9:58:29:3d:9b:a2:6a:1e:72:1e:86:57:ff:72:e6:22:
         24:c7:b9:a8:d5:3b:98:5e:07:05:bc:75:5c:06:9c:8f:39:0b:
         4e:14:72:0e:b1:02:53:1b:9c:97:6c:78:44:22:e3:26:bc:6c:
         09:f3:19:23:18:67:bc:8d:49:0d:c3:20:02:8a:9e:bd:6a:4d:
         52:55:41:ab:cb:d8:00:9d:70:8f:3a:d6:1b:b8:a6:af:5b:93:
         89:1a:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org