Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AED23ABB245B02D3CEC138EE5146562615604E6C.cer
File:                     AED23ABB245B02D3CEC138EE5146562615604E6C.cer (raw, json)
Hash identifier:          YLL4SNSbR/U40klvZnmNrzTxGkohYhM0ljox9Puo1PA=
Subject key identifier:   AE:D2:3A:BB:24:5B:02:D3:CE:C1:38:EE:51:46:56:26:15:60:4E:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       036329E56A0A75242AFD558EF8AF5E5E5D4F734B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/AED23ABB245B02D3CEC138EE5146562615604E6C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 18:34:27 +0000
Certificate not after:    Mon 09 Sep 2024 18:39:27 +0000
Subordinate resources:    AS: 28665
                          IP: 177.12.0.0/18
                          IP: 177.136.128.0/19
                          IP: 189.1.128.0/20
                          IP: 2804:f88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:63:29:e5:6a:0a:75:24:2a:fd:55:8e:f8:af:5e:5e:5d:4f:73:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 18:34:27 2023 GMT
            Not After : Sep  9 18:39:27 2024 GMT
        Subject: CN=AED23ABB245B02D3CEC138EE5146562615604E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:56:2a:f0:ee:0c:c4:33:0f:c8:7a:1b:a8:
                    75:d6:bf:bf:ba:2f:fe:f3:92:cb:10:cf:13:39:23:
                    b0:52:95:e3:7f:af:c2:53:75:7e:75:fc:24:eb:9b:
                    fa:53:82:51:ae:44:56:93:4c:12:17:d5:fa:1b:7e:
                    da:8a:56:a2:b5:8f:d2:60:16:97:4d:e5:44:77:9c:
                    99:21:a3:c1:fb:89:dd:56:4e:e1:47:1b:76:0b:0c:
                    fb:e3:cf:b6:27:50:bd:7c:35:32:ca:0b:4a:d1:92:
                    a6:56:8a:fd:04:56:07:63:da:fb:04:48:d9:54:ad:
                    67:05:53:ca:a3:25:b6:24:b6:4f:f7:f7:49:5e:c3:
                    fa:68:95:e3:ed:fe:d5:ae:fa:92:0e:5c:7f:58:f7:
                    13:06:35:6d:7f:e5:89:d1:49:68:f1:75:1e:e9:2c:
                    f1:3d:48:16:82:52:fc:a8:a9:79:ea:4f:35:80:7c:
                    8e:3c:3b:9f:97:18:98:1b:2e:b4:4a:55:cc:52:25:
                    71:a6:e7:f3:f8:8c:97:c5:b4:77:3d:0c:53:32:dc:
                    07:d3:29:c8:47:60:51:b8:dd:b2:55:75:2a:43:fa:
                    76:bb:a2:72:66:f1:b2:27:ec:72:bf:bb:8e:32:ed:
                    8f:46:ec:37:bf:70:da:6f:48:83:14:55:a5:d6:ab:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:D2:3A:BB:24:5B:02:D3:CE:C1:38:EE:51:46:56:26:15:60:4E:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/AED23ABB245B02D3CEC138EE5146562615604E6C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18
                  177.136.128.0/19
                  189.1.128.0/20
                IPv6:
                  2804:f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28665

    Signature Algorithm: sha256WithRSAEncryption
         97:52:33:9d:fa:78:8d:51:06:91:55:09:e8:35:73:67:9a:ed:
         fb:51:30:75:bd:27:cd:14:fe:16:01:44:8d:c6:48:9e:ac:4b:
         7c:c5:28:10:2e:c5:bf:66:76:2f:01:4d:2a:98:73:7b:e2:1f:
         e6:23:d8:85:c9:f8:28:89:90:7c:4d:12:48:98:d7:82:44:77:
         4e:29:4d:4a:87:16:39:3c:6f:0f:c9:28:f0:d0:52:63:ca:2d:
         e8:aa:c6:af:f0:f1:42:66:95:d4:84:f5:2d:9d:a5:d6:b3:cf:
         a7:3e:6e:27:85:e4:7f:74:8d:c7:ce:70:14:ee:74:c8:16:69:
         72:10:82:69:bd:4f:34:16:e9:a7:14:52:b7:8b:c5:9f:be:15:
         0b:06:92:22:0c:06:b3:4b:11:ba:17:cf:b5:bf:c3:45:2e:4d:
         64:79:17:ee:a6:f8:e0:83:97:d0:3d:ba:e3:a7:81:5d:16:91:
         d5:e2:5f:da:3b:b9:8a:a8:73:71:52:ff:f4:2f:18:d2:e6:74:
         ca:2b:7b:2c:94:c2:9f:c6:f5:4d:93:75:ab:0d:65:0b:f9:18:
         26:43:f2:65:c4:b3:38:1e:99:77:2d:ec:73:34:25:5f:d5:cc:
         2e:2c:60:40:57:51:71:9c:00:1f:3d:88:5d:03:c9:34:93:a5:
         9f:a4:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:48 2024 by rpki-client on console-ams.rpki-client.org