Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer
File:                     AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.cer (raw, json)
Hash identifier:          l9Hc2hHftgBuND3jK1L3cD4bnLqU/dudWjFPfheXLtQ=
Subject key identifier:   AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C82156FE859E88E46FA97D53C6A41E68209E739
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 00:05:15 +0000
Certificate not after:    Thu 16 Jan 2025 00:10:15 +0000
Subordinate resources:    AS: 61937
                          IP: 45.70.104.0/22
                          IP: 45.229.124.0/22
                          IP: 168.195.210.0/24
                          IP: 189.45.160.0/20
                          IP: 200.95.192.0/19
                          IP: 2804:1884::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:82:15:6f:e8:59:e8:8e:46:fa:97:d5:3c:6a:41:e6:82:09:e7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 00:05:15 2024 GMT
            Not After : Jan 16 00:10:15 2025 GMT
        Subject: CN=AEA761DE82F8C8DD584B9ACB5385D06DFF717C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:a2:d6:aa:e1:f8:27:03:ed:fa:b6:c3:1c:
                    4f:80:69:d7:08:a5:7e:27:fe:3f:ea:c1:ab:e2:64:
                    0d:0a:1e:a2:b3:60:65:63:48:2b:94:15:5f:43:51:
                    2d:4c:5f:c5:45:88:97:aa:e4:89:43:91:48:64:c1:
                    9a:fc:25:c3:75:77:e6:bc:99:73:f5:c6:b3:e0:99:
                    8c:af:8b:75:ba:4c:09:79:ec:cf:3c:92:01:10:87:
                    8c:1f:3b:b5:15:c1:b2:32:55:e2:ed:e2:2a:10:c7:
                    f5:a5:fb:18:3f:f2:c1:17:49:cc:9e:ee:2e:f9:e2:
                    ba:7b:68:87:6d:80:2e:e2:83:67:b6:d7:83:1a:a5:
                    4c:aa:32:d9:e4:fa:b8:e4:84:6d:dd:45:dc:eb:9d:
                    4b:86:93:3f:ae:6c:73:97:0e:5a:d5:f5:ad:2e:f4:
                    34:8b:7a:2a:f6:15:b5:10:63:4b:41:13:7c:7b:fc:
                    da:83:39:76:5e:64:20:a0:1f:72:87:bc:09:8f:7a:
                    a2:dd:6d:bc:f2:0e:83:6c:b8:63:d3:08:c7:05:6e:
                    34:9c:9b:9a:3e:f3:32:ff:75:d3:db:5f:9b:4e:cf:
                    c3:fb:bf:df:78:07:c3:d5:df:42:da:f8:f6:ad:47:
                    ac:cd:bf:a8:bd:ab:e3:f1:ea:ed:f0:65:73:89:6e:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:A7:61:DE:82:F8:C8:DD:58:4B:9A:CB:53:85:D0:6D:FF:71:7C:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/AEA761DE82F8C8DD584B9ACB5385D06DFF717C84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.104.0/22
                  45.229.124.0/22
                  168.195.210.0/24
                  189.45.160.0/20
                  200.95.192.0/19
                IPv6:
                  2804:1884::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61937

    Signature Algorithm: sha256WithRSAEncryption
         98:b6:49:f8:c7:3c:5a:8f:bc:4f:b0:49:6f:5b:f8:10:1d:c7:
         5f:99:9a:15:a0:0a:0d:f2:8c:76:52:a9:e7:b8:24:63:4d:67:
         a8:55:73:8e:c7:8e:92:a2:55:30:2f:b8:1f:9d:5e:d5:cd:6c:
         e6:34:37:68:38:bd:52:cb:2b:8b:4d:72:72:00:50:91:d7:8f:
         aa:4e:7e:28:3d:e7:99:10:a8:45:b8:59:2b:73:d8:5f:d8:d0:
         c8:78:ed:fb:2f:7e:95:0b:f1:8f:1e:79:dc:ab:2b:49:52:7e:
         8d:2d:d1:73:49:e6:12:fa:bd:fd:00:5e:5a:b7:77:2a:d3:20:
         ae:06:d5:7c:c8:a5:a8:7a:ce:f2:b1:aa:b5:67:b9:99:5c:40:
         d4:23:42:0c:1d:8f:83:a7:57:93:1f:1f:ce:e1:b4:ed:bb:95:
         38:87:99:6e:8b:74:1d:58:5f:27:a4:41:f0:ba:c0:46:de:41:
         4e:90:93:90:61:69:17:c1:54:7c:85:34:61:3c:fe:1f:20:00:
         ff:3c:5e:aa:00:8c:c9:19:b8:fb:64:06:e0:3d:9b:16:72:a3:
         bf:47:b8:f0:ad:bc:a6:b4:9a:c6:5c:87:58:79:42:c2:1e:33:
         ec:d2:85:ce:78:23:c4:23:90:cd:81:45:50:bb:10:d5:1c:26:
         d0:58:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org