Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
File:                     AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer (raw, json)
Hash identifier:          jGJyDjp/OKgKFMWe6G7QM7usXKqf1H0gsQ29of9Gfq0=
Subject key identifier:   AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47A26BD6BDF324FFBA6E8AB57E9A49EA44156370
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 19:20:41 +0000
Certificate not after:    Wed 20 Mar 2024 19:25:41 +0000
Subordinate resources:    AS: 263073
                          IP: 138.0.196.0/22
                          IP: 138.219.240.0/22
                          IP: 168.121.192.0/22
                          IP: 170.78.80.0/22
                          IP: 170.244.96.0/22
                          IP: 177.223.16.0/20
                          IP: 186.224.24.0/21
                          IP: 186.233.104.0/21
                          IP: 191.6.48.0/21
                          IP: 2804:954::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a2:6b:d6:bd:f3:24:ff:ba:6e:8a:b5:7e:9a:49:ea:44:15:63:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 19:20:41 2023 GMT
            Not After : Mar 20 19:25:41 2024 GMT
        Subject: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:47:42:a2:f4:83:9f:48:4f:77:d0:27:ce:49:
                    0e:e1:25:72:e6:85:cc:d6:5f:1a:9a:e5:56:ab:f4:
                    38:50:68:20:d1:c8:47:f1:0e:87:f9:aa:b2:53:11:
                    f9:ad:b3:d3:a9:20:2b:90:85:a2:c1:2e:97:7b:9e:
                    c3:a1:93:37:56:59:fb:22:6d:c1:19:78:82:7b:04:
                    b7:3c:8b:88:31:ee:9b:c8:57:28:19:20:24:58:07:
                    84:45:72:e5:be:b8:4c:d0:d5:b9:c2:dc:1e:58:21:
                    d5:d4:eb:f9:dd:4b:02:d4:cb:8a:cc:f6:42:f8:96:
                    69:52:39:1c:e1:1a:0c:16:78:83:e9:6b:39:19:42:
                    77:c0:b6:ac:85:19:ba:2e:2a:32:6d:c9:63:17:fa:
                    54:15:a9:ab:66:4a:c2:ce:11:c6:fc:1b:aa:9d:e1:
                    1f:87:81:b4:4e:ec:db:8f:08:c3:f3:27:62:93:46:
                    02:cb:7f:66:38:05:dc:93:cf:a3:6a:80:34:8c:bb:
                    10:12:f8:c0:63:d1:7d:72:4b:74:1a:f5:8f:f1:10:
                    01:ee:b9:b7:cb:38:f6:25:ff:6f:06:e4:df:4d:7e:
                    71:26:51:c0:13:b7:1e:6e:d7:67:d2:0b:f3:f7:49:
                    da:37:c1:ef:45:70:ed:f7:6f:90:3c:76:09:e1:bd:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.196.0/22
                  138.219.240.0/22
                  168.121.192.0/22
                  170.78.80.0/22
                  170.244.96.0/22
                  177.223.16.0/20
                  186.224.24.0/21
                  186.233.104.0/21
                  191.6.48.0/21
                IPv6:
                  2804:954::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263073

    Signature Algorithm: sha256WithRSAEncryption
         22:53:c0:ca:84:48:21:f8:c8:39:24:97:5a:b7:a9:96:3e:0d:
         8b:09:0f:6d:b0:c8:a0:4e:90:49:da:86:e6:a5:39:9f:f8:da:
         7c:90:f6:18:61:fe:4a:b5:4d:4b:71:b3:21:50:94:38:3d:c1:
         97:05:ef:da:6f:84:5a:01:67:73:d4:d8:50:9c:e5:37:37:da:
         ff:32:df:bf:44:ad:89:f8:35:7e:5f:88:dc:f2:06:1c:da:3d:
         a9:ee:9c:16:a4:f4:1c:15:26:f9:8c:ff:59:1d:0a:d7:c7:ae:
         3b:dd:fb:5f:75:c3:8d:9b:e6:31:cc:29:53:bb:f3:48:0f:2c:
         45:07:fd:33:36:8c:79:db:9e:93:ee:5f:b5:68:a9:dc:de:19:
         84:c4:33:30:8f:bc:33:91:69:6c:86:63:92:ef:5c:16:9c:ef:
         9f:9b:b2:c3:f0:11:36:35:ea:8a:3d:47:06:e1:8e:7e:3c:7c:
         44:8e:5c:55:75:23:2b:4b:72:c2:48:7a:33:57:87:e6:6d:58:
         7d:d8:28:16:ae:e4:96:d2:c1:ba:d5:ed:c5:47:7d:c0:b2:2f:
         bd:b0:2b:41:43:3b:34:5e:68:13:71:4c:a1:a9:ec:20:7c:3b:
         74:2d:ae:fc:bf:15:8f:11:d1:c7:c1:bc:86:ba:37:4a:68:be:
         c1:36:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org