Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AEEFEF0D95D14470EFF95F7A67349245C644B63D.cer
File:                     AEEFEF0D95D14470EFF95F7A67349245C644B63D.cer (raw, json)
Hash identifier:          YPvuzyvTXlZlTIt2+zKFfWg81QapJdEBeTojXTZyvts=
Subject key identifier:   AE:EF:EF:0D:95:D1:44:70:EF:F9:5F:7A:67:34:92:45:C6:44:B6:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B828F7BDC79B1511128CFB5439151F86BDD60A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/AEEFEF0D95D14470EFF95F7A67349245C644B63D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 13:10:46 +0000
Certificate not after:    Thu 24 Oct 2024 13:15:46 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:82:8f:7b:dc:79:b1:51:11:28:cf:b5:43:91:51:f8:6b:dd:60:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 13:10:46 2023 GMT
            Not After : Oct 24 13:15:46 2024 GMT
        Subject: CN=AEEFEF0D95D14470EFF95F7A67349245C644B63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:dd:04:3b:3e:e7:3c:1d:37:2c:21:fd:2a:
                    f0:32:3a:fd:77:8e:20:d6:52:ae:77:c8:31:0e:5a:
                    52:05:80:5d:23:43:e6:ac:13:ac:a0:71:58:06:dd:
                    f9:0b:de:09:e6:f9:d5:a0:18:16:8e:90:59:ed:48:
                    38:67:53:5b:73:63:32:0e:fc:44:d4:5e:79:7d:87:
                    26:57:73:52:48:61:c2:be:d9:4a:1a:74:08:7b:85:
                    48:ec:8a:bf:40:ee:dc:26:8b:1e:d0:f1:58:68:60:
                    72:ac:df:78:4b:b5:41:3c:6b:fc:8a:e3:4c:7d:1b:
                    10:04:ec:4c:53:70:01:ca:4d:9d:d7:13:61:40:a0:
                    de:1a:c4:d5:2f:49:79:26:83:6a:08:1e:7c:a7:f6:
                    07:5e:f4:ba:9c:2e:a8:a3:ea:4b:c4:d9:ea:bd:8a:
                    26:13:cd:cd:32:8a:48:1c:e5:4c:d9:72:14:ef:4e:
                    1b:7f:d1:24:c5:3c:a2:2a:7c:9c:27:e1:9e:8d:50:
                    fe:19:dd:93:98:b5:83:77:9e:0c:a2:31:07:3f:4a:
                    98:eb:5c:31:bf:be:31:13:88:05:60:9e:91:5d:b1:
                    5b:e4:31:0a:ff:70:3c:27:6a:21:8d:d4:5c:b3:10:
                    05:86:80:1c:3a:51:a2:be:d7:65:b7:15:98:f4:93:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:EF:EF:0D:95:D1:44:70:EF:F9:5F:7A:67:34:92:45:C6:44:B6:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/AEEFEF0D95D14470EFF95F7A67349245C644B63D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:8f:15:48:46:1f:6a:7b:93:b3:4e:7d:43:63:76:85:02:
         1d:13:0a:60:d9:1f:01:47:38:0a:c9:2a:74:93:39:5c:02:e2:
         5a:ec:e7:d4:03:f1:12:f4:b2:5f:32:d3:9c:e1:8b:9d:2a:0a:
         82:ce:41:a9:c1:6b:89:4a:b0:80:9e:7a:58:20:b7:0c:f5:0b:
         2f:f7:c1:0a:d9:de:ab:53:f3:db:af:e5:af:74:9a:59:50:44:
         45:cd:44:a6:55:a0:7b:0e:5d:14:37:56:22:4f:e3:12:0d:23:
         bd:f2:f8:c3:65:6c:bb:cc:92:6c:81:f8:31:47:67:e5:ac:52:
         f8:df:56:5c:d2:22:06:2d:b5:df:5e:22:6f:d2:4e:de:11:83:
         b8:94:dc:fb:bd:c0:f0:31:07:28:9a:0d:d1:c0:ed:bd:51:89:
         6d:a9:6b:42:56:0a:00:0b:bb:01:32:90:43:36:3b:2e:93:ec:
         25:11:45:b7:85:11:69:08:f7:26:25:c5:e1:e7:72:5b:20:03:
         da:79:6f:53:dc:25:30:b2:07:00:b4:31:4d:fe:01:29:b6:d4:
         45:13:7c:70:84:d1:bc:1a:04:11:5b:1f:1b:7e:16:db:f0:0c:
         55:c7:ba:0d:ca:1d:b4:7b:c4:11:b8:88:e6:94:77:4c:12:3d:
         c0:25:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org