Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.cer
File:                     AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.cer (raw, json)
Hash identifier:          MK+Whg5fkr6n0+ggHNpfEIo4suAUtmwNO6OWoUFah6Q=
Subject key identifier:   AC:89:DE:EF:E0:78:97:FE:92:9D:33:29:B9:B0:53:F7:C4:9D:BD:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40B01F03EC20A50FE39B2144A7A6B6C79CABA922
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 21:15:09 +0000
Certificate not after:    Wed 03 Jul 2024 21:20:09 +0000
Subordinate resources:    AS: 271047
                          IP: 179.48.96.0/22
                          IP: 2801:80:39d0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b0:1f:03:ec:20:a5:0f:e3:9b:21:44:a7:a6:b6:c7:9c:ab:a9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 21:15:09 2023 GMT
            Not After : Jul  3 21:20:09 2024 GMT
        Subject: CN=AC89DEEFE07897FE929D3329B9B053F7C49DBD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:ee:a3:81:64:2d:0b:3a:0c:7b:e8:6f:d5:
                    f2:fb:20:8d:6a:25:1a:f7:09:da:55:08:86:5e:2b:
                    0a:63:e5:14:3a:2f:72:50:2c:6e:91:2b:1d:b6:c5:
                    e0:07:ce:d4:0a:a3:1d:bc:fa:43:cc:6e:17:79:9b:
                    6f:0f:05:15:08:2b:98:dc:36:95:58:ad:fe:1f:91:
                    84:44:42:64:2f:65:36:68:8a:15:47:22:d5:8d:b9:
                    b8:bd:93:ad:dd:a2:32:db:80:9e:76:30:eb:c0:9b:
                    e2:29:60:fc:0d:e1:e5:40:c9:eb:70:ad:f0:54:e8:
                    3f:2b:0f:7a:b7:58:a6:8a:87:bc:75:b6:70:bb:63:
                    35:f8:32:98:fc:00:15:2a:05:e7:37:c3:2b:30:d6:
                    17:44:e8:90:ab:c5:57:ca:8d:9b:db:b1:1a:0e:9c:
                    ee:91:a7:0d:ff:fb:8b:04:9c:a6:3f:c7:72:f1:28:
                    9e:a5:66:d8:03:d6:08:74:3c:7a:28:b3:3d:f3:9e:
                    86:7c:9f:b4:5a:5b:b0:cc:99:05:cd:de:29:a3:a3:
                    31:fb:50:67:cf:39:ee:1f:51:e1:b3:4f:e0:f6:4f:
                    6e:f0:69:cd:a0:3a:4f:1c:b9:c8:43:f9:bc:6f:36:
                    b0:d3:19:bd:e4:fe:18:92:ec:e1:2d:ed:88:ad:5a:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:89:DE:EF:E0:78:97:FE:92:9D:33:29:B9:B0:53:F7:C4:9D:BD:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.96.0/22
                IPv6:
                  2801:80:39d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271047

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:f4:4a:b8:f3:53:a1:1a:ab:71:6d:15:c7:45:51:bf:80:
         b5:dc:93:93:91:27:09:ff:f4:90:9b:58:a8:a2:de:12:00:c3:
         5f:05:8d:9a:2e:82:80:58:ac:f4:0e:29:d6:cd:8d:61:06:50:
         5d:a3:ad:43:9d:c9:7c:1c:ce:5d:bb:b7:c2:85:dd:17:56:49:
         35:55:35:1b:a0:f8:6f:55:cf:c1:bf:37:b1:3b:af:8e:52:3c:
         5f:c3:a2:77:60:04:3f:47:91:67:d9:46:c8:14:9c:84:7b:8d:
         ad:28:83:14:b6:4c:bf:8e:81:4a:57:c2:82:80:fa:8d:8c:7b:
         43:25:b1:fe:69:b8:ea:98:32:e3:f3:9e:98:20:42:e7:6c:97:
         16:06:64:c7:ce:1b:d9:8f:cd:b3:c4:0f:bc:8a:04:cc:66:84:
         7b:48:14:ce:4b:fd:f0:ed:fe:6f:c8:85:0e:29:23:e9:e6:d7:
         16:86:44:cf:ea:ea:96:bf:05:ec:50:64:1f:ca:f9:34:3e:0a:
         81:ec:dd:d9:fe:a1:89:66:e7:75:56:32:15:7b:44:d3:a4:43:
         0e:e5:ea:3c:0e:ca:6e:d8:c0:6a:90:3c:a7:b4:7b:cb:56:1e:
         dd:52:70:34:c0:51:c9:05:15:f4:ab:33:e6:f7:cb:e1:91:e3:
         d8:61:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org