Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
File:                     AE65C1064954B88FFF832DCC11EDAA389432A623.cer (raw, json)
Hash identifier:          Hx0G5pwXRi0d5mnVggrn3y/G/usMttU8zw7+rkV+k7Y=
Subject key identifier:   AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C070C553DA572EBE6E6FF61C236FB9C15A8D6AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 15:45:07 +0000
Certificate not after:    Mon 22 Jul 2024 15:50:07 +0000
Subordinate resources:    AS: 267544
                          IP: 45.70.32.0/22
                          IP: 45.71.76.0/22
                          IP: 2804:4308::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:07:0c:55:3d:a5:72:eb:e6:e6:ff:61:c2:36:fb:9c:15:a8:d6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 15:45:07 2023 GMT
            Not After : Jul 22 15:50:07 2024 GMT
        Subject: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:59:22:07:98:c3:1b:8b:e4:c2:55:b0:21:
                    eb:51:5d:d2:9b:6c:10:6a:96:1f:a3:76:7c:7c:c2:
                    a6:98:f0:e8:ea:13:f7:30:da:a4:16:f5:53:50:a9:
                    7a:dd:33:41:b5:4a:75:4e:ea:f7:9a:6d:35:f0:0e:
                    b6:4c:4b:4e:94:db:b9:2d:47:5a:59:50:93:66:d6:
                    c1:0a:2e:3e:d1:51:55:87:c6:42:fc:a1:7d:c3:73:
                    86:0a:94:01:d5:6c:8b:c3:43:4c:76:a5:45:d8:17:
                    60:ed:3c:be:8f:34:a7:6b:52:b7:f9:0c:8e:7a:f2:
                    cd:34:5a:34:df:21:81:1a:7f:cc:5c:a2:e9:e0:38:
                    05:5f:12:7c:07:d3:af:b2:2c:e2:97:60:4f:53:55:
                    61:e5:c9:f4:b0:0e:1d:d7:3c:ff:8b:0b:a1:9a:9e:
                    f6:af:e2:cb:d2:ec:e0:c3:33:92:f2:94:45:1a:c4:
                    72:da:7b:8f:44:73:52:b5:be:b6:85:ce:33:c8:e4:
                    06:ec:34:c9:9a:e6:ef:e0:f9:47:f6:77:86:4e:d8:
                    67:ec:25:66:81:3b:9a:3b:d8:38:1f:ac:37:0e:ee:
                    ef:08:1e:3e:61:5f:ea:6e:b5:1e:71:4a:41:a2:d6:
                    88:32:e9:a1:d1:a5:d1:05:3e:dc:4f:cf:dc:a8:b4:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.32.0/22
                  45.71.76.0/22
                IPv6:
                  2804:4308::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267544

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:9e:82:a8:3a:74:9e:2c:4f:a2:4a:68:df:a7:9d:00:16:
         59:3b:4d:01:c5:00:bc:4e:88:6a:87:c5:be:e8:66:25:c9:6e:
         5f:3d:dc:b6:f1:68:e8:8a:a5:91:5b:fd:93:c5:46:c2:8d:db:
         b2:a6:0a:c2:78:e4:6b:8b:3f:26:fb:f6:3d:a1:03:dd:05:71:
         c0:8d:28:0a:08:01:c4:f8:f6:c6:4d:0a:43:59:13:08:5c:98:
         83:f1:cb:5b:17:59:6b:ad:1b:c5:e9:24:e8:4d:b9:ae:5f:7c:
         93:2a:14:1c:78:9f:f8:8f:64:8f:ba:35:3a:c0:47:1b:7a:9b:
         33:2f:2d:ad:92:67:28:4e:40:fe:49:fc:e3:d5:7e:09:9c:94:
         b0:68:2b:4c:91:37:d3:d8:ee:a0:a0:2f:d7:07:d6:aa:17:08:
         59:93:d2:60:18:04:e9:c8:66:8f:57:ff:07:95:ef:6e:dd:fc:
         20:1a:4f:5e:0a:b9:fe:94:57:09:4f:c4:4a:60:25:a6:22:e6:
         0b:13:94:2f:f8:6b:ce:d3:21:ae:af:79:2f:e0:03:b0:8d:df:
         02:c5:10:b5:b9:5f:a5:e0:5c:72:5b:77:d8:7e:2a:0a:d4:ea:
         d4:19:c0:52:6f:a3:8c:50:0f:bf:3a:55:a7:5b:37:8d:db:b7:
         3c:d0:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org