Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
File:                     AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer (raw, json)
Hash identifier:          zKqYfJQ2yYW/pFXETIfAu/Dhq7c3ruFucSvkVTR6/Zw=
Subject key identifier:   AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CA75B2547B5D10BD22E6F2FBD75B32FF4B7A233
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Apr 2024 17:19:52 +0000
Certificate not after:    Sat 05 Apr 2025 17:24:52 +0000
Subordinate resources:    AS: 52930
                          IP: 177.185.48.0/20
                          IP: 190.180.128.0/20
                          IP: 2804:af4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a7:5b:25:47:b5:d1:0b:d2:2e:6f:2f:bd:75:b3:2f:f4:b7:a2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  6 17:19:52 2024 GMT
            Not After : Apr  5 17:24:52 2025 GMT
        Subject: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:b9:d3:8c:56:98:3b:1c:d1:65:96:21:d0:
                    1d:27:b4:f1:69:41:98:0b:76:be:f7:5d:2d:d8:d9:
                    53:ae:0e:22:88:7e:6b:9b:29:ad:f2:2c:d4:33:c4:
                    74:a5:8f:7a:a2:56:45:4f:57:59:5e:0c:f0:2a:ee:
                    be:8d:97:e3:32:56:5c:f3:f8:29:3e:68:df:0c:2f:
                    8c:51:6b:60:04:72:a6:5e:51:4b:08:1f:e4:24:fd:
                    f7:1b:a7:0b:06:70:90:56:90:71:7b:d0:e0:21:1b:
                    48:74:d4:97:89:18:dc:23:3e:48:24:ce:82:ad:95:
                    f1:7e:ca:fe:ce:28:4e:3c:09:c8:45:40:f3:a7:e7:
                    74:0d:3e:24:45:f6:c0:1b:e5:9b:41:8a:2e:39:a1:
                    44:84:77:9b:cc:61:d8:16:bb:a9:5b:f8:6d:23:e9:
                    e5:a8:ea:a2:23:69:99:c3:94:4b:75:9d:86:ff:63:
                    5b:52:bb:22:e3:27:0f:d1:d1:b7:e4:9e:81:6e:fe:
                    73:98:5b:8d:13:3d:c8:be:b3:63:43:38:32:d0:c3:
                    ca:12:9e:9e:91:5f:dd:ec:f0:2e:80:89:9e:d4:89:
                    58:00:92:29:34:be:78:93:05:a7:ee:62:0f:94:a8:
                    cc:5b:94:96:90:0d:31:55:ad:db:4e:18:a6:ff:e7:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.48.0/20
                  190.180.128.0/20
                IPv6:
                  2804:af4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52930

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:69:62:34:b3:bf:31:d5:e2:ef:24:31:37:d3:cb:62:49:
         a1:1a:ad:ba:d4:eb:b8:93:d6:e4:d0:c0:41:cd:a7:80:e5:45:
         9e:77:23:87:53:0c:b1:d6:83:3c:36:d7:78:81:03:2a:12:71:
         14:84:a9:1a:10:31:56:7a:8b:64:cf:72:d0:62:f9:7d:9b:3a:
         a5:67:fe:c5:67:61:ab:72:a8:e5:62:1b:bb:aa:83:ca:54:0b:
         e5:3b:70:9c:59:eb:ad:70:af:80:69:68:e6:3a:66:a3:06:c1:
         60:05:18:4b:c9:19:b6:34:a2:e1:6e:f9:cd:51:4d:2b:b5:d1:
         50:e0:51:fe:b5:d1:76:b1:35:ae:30:32:15:46:72:71:51:0b:
         96:11:83:14:29:69:41:72:94:89:1b:14:b1:92:a2:73:eb:0a:
         4b:a8:4e:c1:76:ae:00:0a:75:e4:f7:57:40:cd:31:93:c3:b0:
         70:c5:da:c4:31:f0:35:aa:33:80:3b:79:79:b9:2f:ab:45:c7:
         58:3f:1e:8a:e9:a3:21:85:2d:a0:31:39:98:86:6e:e9:99:4d:
         8b:aa:07:27:7f:ec:ec:cc:54:21:6d:42:80:a2:b9:41:aa:da:
         a2:73:0b:e4:19:43:52:ef:be:34:9c:85:aa:3c:8b:4e:20:88:
         c6:11:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org