Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
File:                     AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer (raw, json)
Hash identifier:          V3moDayvnRBfuAoWf63MmT4nmggooRMPxTwg0ObVz8w=
Subject key identifier:   AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       06FF7764C62EFF5C831F4F8D2586344406EFBD99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Feb 2024 03:36:12 +0000
Certificate not after:    Sat 22 Feb 2025 03:41:12 +0000
Subordinate resources:    AS: 273606
                          IP: 2804:8978::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ff:77:64:c6:2e:ff:5c:83:1f:4f:8d:25:86:34:44:06:ef:bd:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 03:36:12 2024 GMT
            Not After : Feb 22 03:41:12 2025 GMT
        Subject: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:50:8c:76:54:ab:89:83:00:55:4a:be:35:29:
                    d8:6c:ee:89:20:a7:bc:47:f5:30:c9:3d:32:7d:0d:
                    51:00:a2:0c:0c:74:f8:b5:8a:29:5b:26:96:44:76:
                    fb:ab:c1:ef:28:d3:f0:e1:82:89:71:b7:47:b0:1c:
                    f4:ac:f0:5a:5e:52:16:4a:a5:a9:62:f6:68:95:c4:
                    18:ce:02:33:70:c6:d1:d3:a8:56:6e:25:29:2f:50:
                    74:64:c6:29:89:f0:67:5f:79:da:f6:68:17:28:fb:
                    11:5e:82:21:12:2f:e0:85:08:e3:4d:69:8a:cc:b7:
                    75:bd:4a:65:b1:ff:b1:28:55:ab:48:6b:62:f6:70:
                    35:66:a5:6e:20:34:17:54:3a:2f:d3:14:f8:44:81:
                    a2:06:e8:9c:1b:c8:d6:66:59:a8:ce:c6:00:62:17:
                    f0:04:df:52:97:2a:e0:8e:70:4a:23:22:31:30:2f:
                    57:c9:a6:8b:55:35:00:3a:86:6c:f5:35:22:f4:e0:
                    c9:fb:ed:04:62:75:35:74:49:90:36:a2:16:a7:5b:
                    53:01:bc:21:38:92:64:d4:9b:0d:45:23:c7:b3:a5:
                    ce:29:2a:92:5a:10:5b:af:c5:23:f2:dc:f3:4f:79:
                    a2:b5:e7:d2:3d:c6:42:56:83:14:1d:48:07:cb:4a:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273606

    Signature Algorithm: sha256WithRSAEncryption
         56:90:62:16:c8:76:f1:96:00:1e:16:5d:64:20:ab:80:2a:07:
         19:c6:9c:e4:bd:dc:9b:3b:c9:bd:a7:41:38:26:84:54:9b:31:
         26:81:10:f7:d0:31:a0:95:47:35:f9:2b:2d:d9:24:74:a2:0c:
         58:75:59:28:35:2b:d1:d0:b5:43:09:06:e5:b4:22:a4:f2:3e:
         e6:5e:ce:a7:85:05:0f:2d:af:c2:cb:c8:a8:b2:41:bb:4b:f2:
         b3:18:a4:23:f9:f7:2c:41:9b:fd:95:3a:14:4d:bc:5b:94:4f:
         4b:88:55:09:4a:c9:00:61:11:73:a6:99:5e:48:40:cf:dd:e2:
         da:25:70:93:de:67:69:7e:75:2c:7d:6e:8f:9b:bf:1f:54:29:
         1d:72:fa:9c:4b:a0:33:a9:b7:da:c1:09:fd:f6:29:ef:32:af:
         dc:b5:ee:0d:d0:db:18:34:41:ba:95:fd:58:99:f8:35:32:fc:
         a7:38:2b:03:e9:30:fc:44:f3:e3:20:7c:5a:a0:b5:b9:fa:0e:
         16:d1:80:41:a6:90:f0:c9:3d:da:29:8c:4d:8c:cc:f6:78:d6:
         66:82:1b:5f:f7:e0:98:f7:1e:e8:b0:a1:a8:39:03:bd:0c:1a:
         94:1f:1a:85:dd:7a:b1:61:27:cf:31:1f:f2:c9:e9:fd:ac:99:
         84:29:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org