Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
File:                     AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer (raw, json)
Hash identifier:          x887PqdmKVIuV7kWhWopgj7fUzZQTjKFmtXD8yVBWm0=
Subject key identifier:   AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       296067D1262BB9A1FF71454CB650057F856C3899
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 13:46:22 +0000
Certificate not after:    Mon 10 Mar 2025 13:51:22 +0000
Subordinate resources:    AS: 263945
                          IP: 45.188.24.0/22
                          IP: 138.219.180.0/22
                          IP: 170.84.72.0/22
                          IP: 2804:282c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:60:67:d1:26:2b:b9:a1:ff:71:45:4c:b6:50:05:7f:85:6c:38:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 13:46:22 2024 GMT
            Not After : Mar 10 13:51:22 2025 GMT
        Subject: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:02:30:77:97:99:38:41:0a:7c:36:7a:99:
                    1b:4b:38:08:60:87:a0:f8:8b:6e:b9:59:be:56:38:
                    10:f9:bf:b5:12:83:8e:cb:a9:d6:d2:8a:e1:da:f9:
                    43:d0:2b:e7:4c:a6:a2:37:d6:e4:ce:8c:f2:23:bd:
                    52:f8:c5:a5:39:d4:27:4b:0d:4d:a2:94:6f:85:5a:
                    40:4d:e1:31:8b:e6:50:e0:8e:87:0c:92:d2:25:c9:
                    b2:09:8e:57:37:18:7b:07:e9:ac:72:39:73:3d:02:
                    1a:40:1e:05:f3:86:db:89:b1:e1:39:9c:80:1f:54:
                    0b:d8:6e:fc:6b:02:0b:1b:18:cf:6b:87:2d:4d:fd:
                    6a:a1:9a:ee:b7:e8:d2:76:fa:83:34:95:5a:10:4a:
                    2b:26:3a:b3:dd:5a:50:dd:1c:8c:27:f9:a3:eb:33:
                    68:d9:39:2e:fd:b7:78:c9:eb:b0:99:f1:40:4d:79:
                    b5:94:13:9b:e7:35:d0:bf:d7:b0:38:e0:64:d0:8c:
                    95:ad:3a:6b:3e:c1:d6:53:91:8b:74:d7:e3:b1:99:
                    df:99:cd:0a:75:e9:6a:5a:76:12:88:8a:21:a4:a2:
                    7e:08:84:78:53:f1:1f:af:69:ec:97:e9:25:40:c2:
                    92:88:60:48:84:03:57:a7:55:9a:f9:d6:b1:d6:1a:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.24.0/22
                  138.219.180.0/22
                  170.84.72.0/22
                IPv6:
                  2804:282c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263945

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:27:19:f5:c2:47:ff:a0:79:a8:51:41:1d:e9:6f:77:97:
         0c:8d:d3:30:e1:c3:45:c1:4c:d0:63:82:cd:5e:47:c0:58:85:
         00:31:af:b3:87:2e:d6:b0:a4:f5:80:dc:3c:f7:54:ca:9f:6f:
         03:51:28:ed:ae:fc:ac:0d:48:45:88:48:0c:a9:7a:5f:0f:58:
         41:d5:53:2a:f7:17:0e:fa:21:6e:5c:98:63:3d:ec:2f:a1:5e:
         56:3a:33:b9:2b:af:13:1e:7a:de:98:e4:06:9c:30:58:2a:30:
         43:d1:e9:8c:25:cf:a9:33:28:16:f1:13:64:e0:76:95:08:15:
         0a:27:0e:34:9a:01:63:ee:45:7e:11:4a:ab:08:6e:c8:7c:70:
         bc:11:3e:1b:68:06:a1:0e:8d:46:da:78:81:49:9d:af:b4:9b:
         f1:7a:d9:71:57:c2:64:19:64:86:31:65:0e:78:3b:27:eb:70:
         41:27:ae:f9:9f:be:49:0e:be:03:fc:84:b3:11:af:84:01:3d:
         30:08:c8:99:e4:33:9f:6e:db:95:ac:8d:f3:54:d8:ca:71:a6:
         5c:7e:9a:9c:89:26:c8:ca:67:15:1e:a6:57:3d:c3:52:c8:b8:
         61:b0:d5:81:cf:9d:00:56:96:2d:0c:cb:cc:2f:3b:66:82:ee:
         45:8d:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org