Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE8056BE8B7897A9DA2C066089A07C8130A4F226.cer
File:                     AE8056BE8B7897A9DA2C066089A07C8130A4F226.cer (raw, json)
Hash identifier:          BELmRw211C6GZQyDFWc8VnJx3eeQSySmrc514u1g33A=
Subject key identifier:   AE:80:56:BE:8B:78:97:A9:DA:2C:06:60:89:A0:7C:81:30:A4:F2:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       279CCE2F750D6AA701CAF151C5C33BB6C793F439
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/AE8056BE8B7897A9DA2C066089A07C8130A4F226.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Oct 2023 13:30:19 +0000
Certificate not after:    Mon 28 Oct 2024 13:35:19 +0000
Subordinate resources:    AS: 268292
                          IP: 45.237.4.0/22
                          IP: 2804:4ef0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9c:ce:2f:75:0d:6a:a7:01:ca:f1:51:c5:c3:3b:b6:c7:93:f4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 30 13:30:19 2023 GMT
            Not After : Oct 28 13:35:19 2024 GMT
        Subject: CN=AE8056BE8B7897A9DA2C066089A07C8130A4F226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:32:87:75:26:55:a8:0e:17:88:c4:af:2b:
                    39:50:d1:3e:11:92:3b:07:b1:6d:0d:34:19:20:33:
                    d9:8a:84:55:31:48:92:0b:d9:cb:c5:bd:55:c4:f7:
                    d5:31:f4:25:8b:ad:f7:38:a0:bb:40:6f:c9:f7:4a:
                    68:b7:a4:44:90:fb:94:a0:8a:f8:71:ba:95:cd:02:
                    22:7e:e4:38:82:96:7a:01:e3:09:92:15:7b:27:7a:
                    00:ae:e4:56:2a:2e:97:ed:e5:2e:30:8a:95:d2:a9:
                    a7:d3:57:58:b6:f3:1e:19:98:f4:60:79:9c:d2:85:
                    a1:6e:dd:03:4c:d8:88:6f:34:a9:07:7e:a5:fd:1a:
                    97:f5:b6:ae:b9:10:e8:a4:75:0e:67:de:f0:59:4a:
                    2c:21:cf:31:61:07:a8:a1:91:b0:ff:71:cc:50:40:
                    eb:45:a4:8a:a4:22:66:10:21:a1:dc:d6:0d:12:2b:
                    1f:06:b0:b2:90:82:4a:86:16:26:bc:41:0a:36:6b:
                    e0:74:f8:fe:4a:26:a4:95:73:df:72:5a:f9:d9:74:
                    49:8b:74:b4:71:aa:f9:26:bd:cc:f4:6b:70:e5:76:
                    b8:7f:30:3c:d0:ad:a2:ee:9f:67:5b:3d:14:d7:aa:
                    3c:ab:f9:d0:8d:c5:b9:e2:3e:b1:c6:7d:12:c3:cf:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:80:56:BE:8B:78:97:A9:DA:2C:06:60:89:A0:7C:81:30:A4:F2:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/AE8056BE8B7897A9DA2C066089A07C8130A4F226.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.4.0/22
                IPv6:
                  2804:4ef0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268292

    Signature Algorithm: sha256WithRSAEncryption
         b1:00:45:83:ab:8a:42:33:12:2e:c6:21:40:45:7d:86:a7:94:
         65:4c:4c:0d:34:21:d3:9b:61:d8:5b:83:8d:17:9c:a4:06:4c:
         ea:e0:ec:5a:2e:d2:61:46:f5:9c:9c:38:fa:d6:ca:09:dd:71:
         e9:39:41:20:17:a4:e7:f5:4e:ed:bc:31:a5:c8:25:ce:9c:f5:
         58:18:7e:25:4d:f6:f5:ab:fa:9e:4e:cc:51:0f:2e:dd:db:e1:
         5d:9c:a0:52:f0:89:89:b1:1b:07:e3:1c:9d:b6:a1:d1:af:45:
         65:67:6c:97:20:f1:d4:b8:0e:04:48:ca:23:0d:5c:30:1a:fa:
         2f:9a:63:f5:cb:7c:6f:a0:db:04:77:7d:f9:8d:bc:1b:10:6c:
         b9:6f:cd:b3:e8:5d:82:ed:af:bb:90:18:27:7b:4e:05:52:74:
         e3:5b:91:e9:20:2b:92:4d:96:77:d1:ef:32:7a:82:8b:60:78:
         89:c4:16:c8:11:17:e6:6c:7f:c0:e3:1f:11:7a:b7:69:17:9a:
         b4:ef:39:75:7b:3f:0b:06:45:19:ea:a7:a3:99:54:53:da:c9:
         5c:77:be:22:3a:6c:24:2d:55:eb:d0:2a:89:0e:02:59:9d:83:
         45:ae:7a:8d:b8:c2:84:04:03:16:8a:77:ab:7e:20:0f:1e:c6:
         11:d5:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org