Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99.cer
File:                     AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99.cer (raw, json)
Hash identifier:          1ismyD/pLgEge4RTObc+S8S/d1pghAdXn8l1ngLesX8=
Subject key identifier:   AE:6C:8A:A9:F6:B2:13:EF:F1:10:D7:C0:E1:70:4A:39:EB:E1:9B:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BBA88FDC716C030AF23B8ECD256C147001FB4D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99.mft
caRepository:             rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Feb 2023 14:08:11 +0000
Certificate not after:    Fri 23 Feb 2024 14:13:11 +0000
Subordinate resources:    AS: 53135
                          AS: 262605
                          AS: 262907
                          IP: 45.178.40.0/22
                          IP: 45.184.148.0/22
                          IP: 45.226.16.0/22
                          IP: 45.237.80.0/22
                          IP: 131.161.0.0/22
                          IP: 131.221.52.0/22
                          IP: 131.221.92.0/22
                          IP: 132.255.252.0/22
                          IP: 138.99.84.0/22
                          IP: 138.219.152.0/22
                          IP: 143.202.108.0/22
                          IP: 143.208.76.0/22
                          IP: 168.0.88.0/22
                          IP: 168.0.160.0/22
                          IP: 168.121.92.0/22
                          IP: 168.197.252.0/22
                          IP: 168.227.168.0/22
                          IP: 168.227.232.0/22
                          IP: 170.79.184.0/22
                          IP: 170.80.104.0/22
                          IP: 170.83.72.0/22
                          IP: 170.254.188.0/22
                          IP: 177.11.192.0/20
                          IP: 177.36.32.0/20
                          IP: 177.39.240.0/20
                          IP: 177.44.192.0/20
                          IP: 177.66.176.0/22
                          IP: 177.72.96.0/21
                          IP: 177.84.232.0/22
                          IP: 177.87.184.0/21
                          IP: 177.87.216.0/21
                          IP: 177.92.168.0/21
                          IP: 177.104.96.0/20
                          IP: 177.128.44.0/22
                          IP: 177.130.32.0/20
                          IP: 177.155.102.0 -- 177.155.107.255
                          IP: 177.184.248.0/21
                          IP: 177.185.124.0/22
                          IP: 186.192.176.0/20
                          IP: 186.193.48.0/20
                          IP: 186.195.16.0/20
                          IP: 186.209.80.0/21
                          IP: 186.250.8.0/21
                          IP: 186.251.168.0/22
                          IP: 187.16.224.0/20
                          IP: 187.49.156.0/22
                          IP: 187.60.96.0/20
                          IP: 187.60.176.0/20
                          IP: 187.84.48.0/20
                          IP: 191.6.160.0/22
                          IP: 191.243.112.0/20
                          IP: 191.253.192.0/20
                          IP: 200.18.112.0/20
                          IP: 201.87.192.0/20
                          IP: 2804:24c::/32
                          IP: 2804:da8::/32
                          IP: 2804:1054::/32
                          IP: 2804:297c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ba:88:fd:c7:16:c0:30:af:23:b8:ec:d2:56:c1:47:00:1f:b4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 14:08:11 2023 GMT
            Not After : Feb 23 14:13:11 2024 GMT
        Subject: CN=AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:67:19:02:fc:17:41:d6:d4:f5:70:3e:b1:
                    da:48:21:87:48:75:9e:73:a1:ea:e6:1a:02:0c:0c:
                    c0:f9:2d:4c:e5:6c:2e:36:10:2c:d1:bf:19:d2:15:
                    22:eb:80:80:49:cc:46:e9:2a:b3:46:64:91:eb:ed:
                    91:53:36:49:f3:d2:63:9b:83:80:1b:4b:b6:e4:8a:
                    2e:14:40:77:52:f1:f4:8a:3f:4a:80:89:e3:fb:d3:
                    df:37:7e:00:23:ca:6c:d7:bd:31:8b:12:ef:be:2f:
                    28:48:5b:3c:3b:ae:30:71:41:6a:2d:cb:95:17:c3:
                    b5:81:e2:e3:b2:38:52:72:d6:06:d7:1f:e2:d4:30:
                    a2:00:aa:7f:1c:24:ad:ff:00:b5:12:7c:92:c2:3b:
                    f1:2b:e7:1a:62:4f:32:82:cd:9a:c0:65:99:2f:60:
                    1d:6f:fc:1b:e8:4e:62:33:35:7f:e2:0d:4e:d4:7a:
                    28:6c:05:84:0f:24:f1:fa:25:b6:48:7d:bf:d8:a7:
                    7b:6f:76:60:a9:1a:df:42:cd:f8:4f:f8:35:dd:c1:
                    3e:f5:28:f6:5b:f9:da:fa:e5:9a:2e:66:42:8f:44:
                    94:d5:03:94:56:a1:cc:50:43:b4:30:11:d3:4c:11:
                    6c:a7:2a:b3:16:78:cc:3f:13:a0:80:42:b7:60:cb:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:6C:8A:A9:F6:B2:13:EF:F1:10:D7:C0:E1:70:4A:39:EB:E1:9B:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AE6C8AA9F6B213EFF110D7C0E1704A39EBE19B99.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.40.0/22
                  45.184.148.0/22
                  45.226.16.0/22
                  45.237.80.0/22
                  131.161.0.0/22
                  131.221.52.0/22
                  131.221.92.0/22
                  132.255.252.0/22
                  138.99.84.0/22
                  138.219.152.0/22
                  143.202.108.0/22
                  143.208.76.0/22
                  168.0.88.0/22
                  168.0.160.0/22
                  168.121.92.0/22
                  168.197.252.0/22
                  168.227.168.0/22
                  168.227.232.0/22
                  170.79.184.0/22
                  170.80.104.0/22
                  170.83.72.0/22
                  170.254.188.0/22
                  177.11.192.0/20
                  177.36.32.0/20
                  177.39.240.0/20
                  177.44.192.0/20
                  177.66.176.0/22
                  177.72.96.0/21
                  177.84.232.0/22
                  177.87.184.0/21
                  177.87.216.0/21
                  177.92.168.0/21
                  177.104.96.0/20
                  177.128.44.0/22
                  177.130.32.0/20
                  177.155.102.0-177.155.107.255
                  177.184.248.0/21
                  177.185.124.0/22
                  186.192.176.0/20
                  186.193.48.0/20
                  186.195.16.0/20
                  186.209.80.0/21
                  186.250.8.0/21
                  186.251.168.0/22
                  187.16.224.0/20
                  187.49.156.0/22
                  187.60.96.0/20
                  187.60.176.0/20
                  187.84.48.0/20
                  191.6.160.0/22
                  191.243.112.0/20
                  191.253.192.0/20
                  200.18.112.0/20
                  201.87.192.0/20
                IPv6:
                  2804:24c::/32
                  2804:da8::/32
                  2804:1054::/32
                  2804:297c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53135
                  262605
                  262907

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:ff:05:ea:04:c9:1c:5a:52:d9:f1:08:af:64:df:17:02:
         f6:ee:53:16:71:7c:cd:5f:60:65:c3:c5:53:96:60:4b:7b:38:
         5f:f2:16:09:98:d3:7c:ac:7e:af:b5:e6:90:f0:2c:44:43:e2:
         b5:a8:69:c0:f2:ed:70:54:8f:12:4a:be:8b:48:10:69:67:65:
         02:52:7d:76:71:9c:14:79:d8:ad:8e:75:cd:9f:ae:44:4b:c9:
         f4:42:c3:91:a2:6b:d5:c6:e4:89:d3:2a:48:ae:da:1a:f0:e7:
         0c:df:ba:8e:b3:e1:48:af:8a:a2:e6:2c:1d:24:70:d2:cc:05:
         49:bf:46:cd:8a:b7:af:3c:bd:93:8b:8d:76:25:c5:3d:79:21:
         84:e6:93:7d:bd:50:82:31:5b:cf:24:29:cb:42:e6:3f:bd:bd:
         6f:68:1d:d0:c7:8e:09:d0:f1:4e:73:03:6b:7d:6e:61:cd:d2:
         5e:46:c1:b0:d6:d2:83:e9:ed:c3:54:20:c0:99:b5:1f:b7:e1:
         3a:44:64:1e:c7:ef:9c:e9:d0:a4:25:60:94:66:89:a9:cb:92:
         97:3a:c0:2e:8f:a3:14:bd:8b:92:1c:83:c0:68:07:06:a7:f9:
         63:bd:b4:33:5e:76:87:71:bf:30:8a:c1:02:1e:e3:08:ab:78:
         94:c2:2d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org