Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
File:                     AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer (raw, json)
Hash identifier:          FUgFmW0hdjvXbrwXzT6Jm7+9TMkjiCFOzIzFH3+CtlQ=
Subject key identifier:   AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A77D54519E103D88E7C784994F43257ABA4ADCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 20:52:14 +0000
Certificate not after:    Wed 12 Jun 2024 20:57:14 +0000
Subordinate resources:    AS: 265425
                          IP: 168.195.28.0/22
                          IP: 2804:33ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:d5:45:19:e1:03:d8:8e:7c:78:49:94:f4:32:57:ab:a4:ad:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 20:52:14 2023 GMT
            Not After : Jun 12 20:57:14 2024 GMT
        Subject: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:b2:4b:18:8c:1c:52:dd:ec:c6:05:d4:00:
                    c5:12:51:61:5a:dc:28:55:47:e5:1d:62:6c:ed:86:
                    29:15:51:b9:31:cd:f6:7f:58:27:4e:18:ac:3c:05:
                    57:2c:98:b5:00:ad:38:e6:16:70:1b:cd:20:63:76:
                    cd:7d:fe:d8:9c:33:5e:9c:49:d5:2d:df:ba:91:92:
                    c9:a4:d1:bd:de:3b:1d:1a:c7:c8:fe:28:27:70:5a:
                    0c:02:55:e2:d5:d1:53:1d:96:11:bc:a0:a8:ab:1e:
                    2c:47:15:68:61:60:df:e3:5e:7a:d2:3a:44:05:e0:
                    ca:92:5e:b6:03:4b:b0:da:b1:f2:82:8a:7e:c0:31:
                    f6:cd:e2:62:fc:2f:77:29:71:13:b1:2f:1f:d1:ea:
                    7a:64:9e:2c:2f:27:27:ee:16:1a:7a:38:47:aa:ab:
                    0a:38:82:84:30:e1:05:c7:1c:3c:bf:35:a8:4c:49:
                    ec:13:3f:aa:5c:93:a9:cc:00:9b:6f:7e:03:f4:6b:
                    b2:ed:1b:19:f1:e9:71:71:0e:94:bc:3b:26:cd:49:
                    14:00:50:c7:39:7d:a7:43:c5:4a:22:a7:b9:56:ad:
                    f8:65:12:bb:fc:c8:69:67:94:67:de:52:2c:a8:5b:
                    ed:3a:cb:63:45:10:5d:49:ea:12:5a:c9:73:d6:9c:
                    40:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/22
                IPv6:
                  2804:33ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265425

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:ae:bb:55:b7:b8:62:30:1a:8b:d5:72:9f:1e:fa:c8:c8:
         c4:5b:20:c7:7c:de:7d:f5:09:13:87:4b:64:9b:a0:0c:c6:e9:
         d3:9d:c0:91:42:26:d2:21:f5:05:40:f2:30:07:17:10:5f:8e:
         46:7c:56:45:f9:aa:58:47:fb:9e:fd:e3:ed:52:25:d7:fd:6a:
         db:75:70:35:00:a7:52:cf:88:9b:46:e3:ea:b8:5d:6e:ee:12:
         00:c6:b3:3a:ce:fe:da:be:4d:9c:9a:75:ee:16:93:f4:ed:a1:
         73:4b:cf:df:19:f6:6c:e5:14:ef:79:d1:f6:ff:59:cf:ba:e4:
         76:60:8c:97:60:8a:58:a1:70:a2:8c:c1:62:d7:ba:e3:70:23:
         7b:4f:06:a9:ca:aa:60:f1:6f:40:ff:15:64:c8:56:76:1e:da:
         f2:5b:b9:e6:28:3b:94:74:67:ce:ee:98:ce:d9:1d:7e:91:18:
         7d:a6:db:31:56:92:0c:cc:e6:0a:ce:5a:c8:fd:5d:2d:50:5b:
         50:a9:6a:06:b1:bc:54:fd:81:a1:82:1d:07:ce:1e:61:20:1b:
         0c:6c:f1:43:39:d9:3d:41:86:12:d7:4e:e9:65:11:ee:f5:4e:
         7f:ea:18:02:f7:df:5c:67:83:99:95:9d:b1:53:ac:b4:29:e3:
         eb:ad:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org