Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0.cer
File:                     AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0.cer (raw, json)
Hash identifier:          P9CdeektfGSRi/wpxb4Fh2Y5s5QCW/VHxdlvbcafWM0=
Subject key identifier:   AF:4A:80:D2:E2:1E:0C:8F:26:EB:09:64:E0:DB:A1:FF:31:C6:38:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CB538C70F948229B705170DA81EF8FE55C6DA3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0/AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 05:55:34 +0000
Certificate not after:    Thu 30 Jan 2025 06:00:34 +0000
Subordinate resources:    AS: 273665
                          IP: 2804:8a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b5:38:c7:0f:94:82:29:b7:05:17:0d:a8:1e:f8:fe:55:c6:da:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 05:55:34 2024 GMT
            Not After : Jan 30 06:00:34 2025 GMT
        Subject: CN=AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:86:8f:1c:06:4c:ba:0e:12:97:2d:32:0d:
                    bc:9c:4a:7e:af:e6:d0:c5:4c:d2:09:b2:a6:de:b1:
                    85:78:04:4f:58:91:59:2a:77:f4:fc:67:c6:44:3d:
                    79:c3:4d:a5:19:73:e7:63:75:e7:cf:82:d5:2e:b3:
                    2c:ad:95:c4:1e:bc:3b:9b:8f:10:8f:16:9b:a9:33:
                    6e:9b:20:eb:50:f4:4c:db:30:7c:c5:f1:5f:34:53:
                    c7:cc:68:b5:2d:ef:c0:eb:d3:77:85:a2:25:c2:e6:
                    4e:80:a7:52:c2:ef:b3:fb:ef:f8:c8:65:87:5c:19:
                    be:ab:53:4f:93:bd:ed:fb:2e:44:0f:2d:53:28:42:
                    fc:1b:ca:0b:05:ec:4e:cf:30:40:48:12:cd:6f:15:
                    78:1e:c1:84:c9:bf:35:b0:ac:97:03:a2:e9:af:1a:
                    64:ab:5b:7e:73:e4:a1:27:e1:fc:d1:7d:47:3d:14:
                    62:11:34:04:ab:9a:a4:36:fa:72:da:4f:9b:03:55:
                    b1:85:91:d5:2b:ba:56:4e:a8:75:60:7f:ed:ff:e8:
                    09:9a:cf:73:bb:ea:dd:ba:8c:96:91:96:01:a3:01:
                    d9:33:9e:eb:42:14:e1:d6:e4:61:f3:25:2b:70:9e:
                    15:54:c3:a8:31:e6:06:78:e2:9c:ef:b1:06:ee:d7:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:4A:80:D2:E2:1E:0C:8F:26:EB:09:64:E0:DB:A1:FF:31:C6:38:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0/AF4A80D2E21E0C8F26EB0964E0DBA1FF31C638C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273665

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:0b:3f:c2:cc:ab:53:f8:18:03:1f:68:3f:38:a5:38:b7:
         d3:2f:a8:54:db:42:9f:77:f3:a1:7c:18:d6:94:61:47:ca:e5:
         22:f8:0e:3e:c4:19:20:f7:32:b3:00:c7:7b:f0:03:f0:e1:b0:
         c7:3c:cf:1c:8d:c2:d9:eb:bd:b0:26:f7:cd:28:40:20:25:f8:
         59:d3:98:33:fe:c7:00:fc:a6:d2:82:88:3b:df:2e:42:5f:a7:
         88:ef:ec:b6:73:2d:57:23:f6:42:3a:30:ca:aa:c7:51:59:b0:
         84:2d:61:97:3b:06:aa:78:a5:e0:bf:a1:81:85:be:c9:86:c8:
         dc:32:94:f0:1d:42:08:b4:84:01:0c:36:4a:64:44:01:85:d4:
         97:11:4d:c1:98:bf:07:ff:a6:7b:39:0d:a4:91:cb:79:94:19:
         9e:f3:55:80:c6:52:0b:0d:d3:7c:05:da:0d:34:0f:5c:ea:26:
         84:40:eb:d2:61:bb:91:bf:9b:1b:3d:80:0e:5e:5b:f6:61:31:
         e8:35:73:be:5e:d3:49:fd:42:65:de:a1:b7:bb:c4:b2:94:84:
         9e:06:d4:49:85:da:d1:02:be:3a:81:74:71:50:34:5c:76:e2:
         ca:95:b8:14:b5:49:47:eb:ab:84:a7:9f:b6:ab:41:d8:43:04:
         66:8e:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org