Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.cer
File:                     AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.cer (raw, json)
Hash identifier:          c9tuwi9Y2rJ6GCV/MyKVK7Kb4ccJjReM2QypxHAkUOI=
Subject key identifier:   AD:05:E2:28:B6:50:28:B8:C8:2D:F2:2A:9B:BC:CB:80:F9:F4:7C:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       06049F53AE2E1EB84CB154F6C319F2E8D08746B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Jan 2023 13:17:19 +0000
Certificate not after:    Fri 05 Jan 2024 13:22:19 +0000
Subordinate resources:    AS: 264404
                          IP: 131.161.228.0/22
                          IP: 138.255.16.0/22
                          IP: 170.82.140.0/22
                          IP: 2804:1df8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:04:9f:53:ae:2e:1e:b8:4c:b1:54:f6:c3:19:f2:e8:d0:87:46:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  6 13:17:19 2023 GMT
            Not After : Jan  5 13:22:19 2024 GMT
        Subject: CN=AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:36:8e:49:c6:a6:6c:90:39:ec:8d:e5:ab:
                    f5:c7:77:00:12:b3:48:fb:aa:f0:cc:b5:29:10:b8:
                    4b:1f:1c:e2:fe:41:46:6d:eb:76:98:d2:33:0a:94:
                    e9:67:3b:9d:bd:3f:e3:4b:23:04:f3:9d:ba:89:12:
                    e3:04:51:f7:8d:d8:58:b7:13:ec:08:87:23:25:2b:
                    47:7a:de:7a:97:ef:58:68:46:da:e7:a7:04:e9:77:
                    37:bd:36:4a:bc:cb:fc:57:1e:78:92:18:72:58:be:
                    21:37:e4:3c:fc:9c:6f:fa:e3:9e:4d:89:65:90:5b:
                    0e:d4:44:dd:5e:6f:18:81:86:0c:4b:37:47:65:4d:
                    5f:c5:93:35:09:45:75:a7:dd:0f:75:ea:46:15:da:
                    f5:4d:83:81:e1:32:42:0a:eb:68:0c:d0:41:ee:c2:
                    2f:51:a7:d1:ad:a7:32:3e:44:cb:ae:99:5e:48:79:
                    c0:3f:eb:11:92:c8:2b:cd:4a:70:02:43:99:9f:c3:
                    4d:03:74:b2:69:f8:9d:d9:37:97:fe:86:79:fd:71:
                    47:e6:82:86:a3:b4:8f:3e:7c:77:7f:6f:b1:32:b4:
                    ba:a3:12:2b:bb:98:e4:d6:f9:bf:37:a4:9e:e2:be:
                    1d:6c:10:67:2e:ad:68:b5:b0:4b:c7:12:a0:10:9e:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:05:E2:28:B6:50:28:B8:C8:2D:F2:2A:9B:BC:CB:80:F9:F4:7C:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.228.0/22
                  138.255.16.0/22
                  170.82.140.0/22
                IPv6:
                  2804:1df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264404

    Signature Algorithm: sha256WithRSAEncryption
         82:05:6b:9c:13:9d:8a:71:e9:db:7c:80:8a:1a:21:78:2c:d5:
         64:ce:01:29:fd:85:11:b2:88:73:25:42:1d:7b:3b:7a:39:04:
         e8:a9:e7:9b:dd:f8:ab:a6:b5:32:bf:b6:0a:5a:c4:42:d4:ad:
         b5:fe:30:61:e9:8d:8b:e0:12:e8:67:40:77:99:03:2a:b2:07:
         68:31:21:d5:40:55:56:d6:b0:da:6d:31:d7:09:e2:08:b9:98:
         47:c2:b3:76:b5:36:d8:6f:66:c6:01:8b:4b:42:27:71:f0:00:
         3f:b9:49:84:a1:5a:eb:c7:4b:7e:bb:65:03:54:dc:be:c0:1c:
         33:95:a5:d3:0a:f9:e3:2e:f4:13:98:e0:a4:90:34:9b:25:6b:
         b5:11:9a:9d:f5:94:99:41:ff:22:47:71:87:5e:60:4f:ec:b6:
         45:1b:3b:2f:bb:a8:23:b3:f6:c3:e1:e4:a1:57:d8:98:11:8d:
         8c:63:93:f5:31:54:19:16:84:a8:b9:a9:30:db:44:1e:c6:62:
         19:5d:09:4c:53:4e:40:4e:17:b5:52:d4:63:2f:f6:3a:d6:a2:
         4e:05:fd:5e:4b:96:a0:bf:89:5d:f2:fe:a9:0f:57:dd:67:e3:
         34:15:aa:5a:44:98:83:1d:40:6d:e6:51:a5:3a:7f:a0:df:ea:
         1c:a1:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org