Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF81B7592843B25D7FF58DE673BB55B14E953EA0.cer
File:                     AF81B7592843B25D7FF58DE673BB55B14E953EA0.cer (raw, json)
Hash identifier:          hYrWWvfAuvyb7Bnm0guy6vg8X82f5K+qpWYPf34Ma70=
Subject key identifier:   AF:81:B7:59:28:43:B2:5D:7F:F5:8D:E6:73:BB:55:B1:4E:95:3E:A0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       041BE1FA1332C38B65A455EDF28AA4D476D9AE90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/AF81B7592843B25D7FF58DE673BB55B14E953EA0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Aug 2023 19:55:34 +0000
Certificate not after:    Fri 09 Aug 2024 20:00:34 +0000
Subordinate resources:    AS: 269307
                          IP: 45.184.8.0/22
                          IP: 2804:629c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1b:e1:fa:13:32:c3:8b:65:a4:55:ed:f2:8a:a4:d4:76:d9:ae:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 19:55:34 2023 GMT
            Not After : Aug  9 20:00:34 2024 GMT
        Subject: CN=AF81B7592843B25D7FF58DE673BB55B14E953EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:77:1e:24:b8:a7:bb:4a:6a:5b:c4:7d:79:
                    aa:36:d3:c3:96:75:c6:23:92:9d:50:f7:cb:6b:68:
                    27:a1:59:b1:07:a5:d4:5e:35:5e:27:a3:c9:f5:8f:
                    0e:bf:61:54:84:ab:fc:e6:aa:50:4b:90:94:6c:6f:
                    be:8b:84:c5:79:b2:08:af:ef:ad:fd:3e:38:a5:35:
                    37:1d:97:5d:31:b8:1f:00:66:26:7a:c2:be:7f:10:
                    4d:1a:45:70:78:c6:fc:3d:1a:37:55:46:82:25:2b:
                    30:cd:ed:cd:f0:fa:1c:23:d4:1d:0d:cd:08:ce:1b:
                    2e:1e:be:00:d7:16:48:35:de:c3:a4:63:c9:be:93:
                    97:e0:69:0f:eb:9f:52:25:70:4f:59:88:0c:27:92:
                    f1:ed:9c:2a:0f:12:25:30:7f:94:63:e7:a5:55:99:
                    a9:33:a2:f9:9a:40:70:9f:42:d5:84:50:58:07:17:
                    ad:9a:0c:8d:f2:9b:dd:a6:2f:fc:ef:22:8c:6e:4e:
                    f7:a6:2c:42:70:26:39:90:95:8c:67:85:61:5b:22:
                    73:ce:de:b7:33:ef:a2:d7:f3:c9:a1:4a:b2:2a:ab:
                    6d:a4:17:c0:d9:6c:54:fb:ea:a7:a7:0a:5e:af:e1:
                    82:a6:d3:2c:08:dd:d2:75:97:b1:a6:17:45:6f:22:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:81:B7:59:28:43:B2:5D:7F:F5:8D:E6:73:BB:55:B1:4E:95:3E:A0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/AF81B7592843B25D7FF58DE673BB55B14E953EA0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.8.0/22
                IPv6:
                  2804:629c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269307

    Signature Algorithm: sha256WithRSAEncryption
         39:db:17:80:3c:de:4f:b2:2b:52:10:a1:f4:7f:68:22:61:60:
         38:01:46:ae:10:bb:ab:9a:50:d1:43:d1:28:d5:75:5e:c5:4f:
         4e:05:0f:ee:82:fa:41:ef:af:38:8b:2f:47:20:c8:41:d9:21:
         6f:8c:37:5b:32:d3:ed:2e:87:08:63:80:34:c3:f6:08:16:fe:
         a5:81:b0:29:d2:3d:18:16:90:a5:6e:f8:76:bb:d4:e9:d8:3d:
         dd:00:76:e7:0a:7c:1b:72:20:0d:b7:da:de:5e:91:fa:85:fa:
         01:7e:b7:e8:84:35:01:0b:f3:e5:59:94:19:1e:0d:cd:c6:34:
         22:fb:64:cf:33:2e:a4:60:50:9c:b7:37:bc:8d:a2:19:e2:24:
         a7:f6:71:52:d2:05:28:58:c5:e7:5f:7b:0f:cf:23:95:e6:4d:
         b1:2f:81:1c:49:81:fe:94:c5:7b:76:29:8e:02:f2:b7:d5:28:
         8e:02:98:26:e5:16:e1:c5:93:13:38:ba:b2:0f:c3:07:9b:cb:
         da:9d:b7:3e:97:0f:76:26:1b:a8:f5:94:9d:74:30:0a:92:f3:
         62:35:b6:f0:79:3b:e3:ab:e5:64:4e:c2:88:94:7f:d4:4e:05:
         71:16:2d:29:fa:a1:68:56:14:0d:07:10:19:f0:d9:03:ba:46:
         4c:fe:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org