Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.cer
File:                     AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.cer (raw, json)
Hash identifier:          xlRdepNppG+x3m0rg98dk3io6hQXtwpZYoYhbvkDqe8=
Subject key identifier:   AF:A3:BA:1E:41:52:6F:CA:F7:1A:02:A0:6C:E4:6C:D9:01:C0:69:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75338870D6FF4FAD9AD19FB068B4EA2DE3A46606
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 23:31:23 +0000
Certificate not after:    Fri 08 Nov 2024 23:36:23 +0000
Subordinate resources:    AS: 267602
                          IP: 45.71.84.0/22
                          IP: 2804:4418::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:33:88:70:d6:ff:4f:ad:9a:d1:9f:b0:68:b4:ea:2d:e3:a4:66:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 23:31:23 2023 GMT
            Not After : Nov  8 23:36:23 2024 GMT
        Subject: CN=AFA3BA1E41526FCAF71A02A06CE46CD901C069C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:0e:32:1b:a9:e4:25:97:76:de:3a:b0:a3:
                    85:1c:44:17:bc:f2:78:9f:d3:3b:31:62:4d:e2:67:
                    93:5a:ba:af:0f:7a:24:8a:98:bc:72:35:46:93:75:
                    df:cd:2d:10:d1:17:64:2b:4f:80:dc:f8:d9:26:19:
                    8c:5e:75:3b:b0:24:67:12:4d:0a:30:a8:09:93:24:
                    a5:5d:f8:15:cc:e5:7c:74:b6:10:6e:48:6f:e4:33:
                    6f:b6:a3:98:27:7d:b2:67:6a:cd:9c:f0:f6:27:9e:
                    3f:40:77:a6:06:b8:0f:0e:04:87:6f:7b:da:69:57:
                    8f:b2:6b:c8:46:62:d7:55:fb:75:ef:b4:a4:3f:9a:
                    78:91:5f:ac:f7:6c:2c:16:bc:4f:87:c2:41:e2:24:
                    6c:26:4d:ee:e8:71:f3:a0:d9:1f:96:2a:65:49:79:
                    f8:a1:a8:a4:ff:4e:f8:ab:30:43:b9:e8:22:ac:97:
                    85:48:47:f3:4f:f3:6a:f5:9c:3d:30:68:54:48:13:
                    b4:35:8a:c9:f9:bd:39:82:b8:60:29:36:80:9a:35:
                    3f:a5:e7:b2:5f:6e:11:cd:fc:0c:f0:22:11:41:1a:
                    9b:4c:19:48:8a:c4:85:2e:e5:21:b8:6c:b0:a1:f7:
                    2e:9b:fb:06:f9:a8:33:4d:79:23:03:96:c6:59:14:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:A3:BA:1E:41:52:6F:CA:F7:1A:02:A0:6C:E4:6C:D9:01:C0:69:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.84.0/22
                IPv6:
                  2804:4418::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267602

    Signature Algorithm: sha256WithRSAEncryption
         3b:ec:7f:29:76:82:43:4e:a8:9a:0c:6f:43:a1:ff:22:7f:ad:
         85:02:87:0c:c1:93:d8:ab:80:55:c2:7b:94:c0:8c:6e:93:b6:
         a0:cf:df:24:e8:f2:54:59:5c:83:4e:01:8b:e3:13:46:38:48:
         e0:90:56:84:65:a9:8a:50:9e:18:c1:43:74:19:96:97:55:50:
         e8:54:7a:95:d4:ac:24:f9:40:d7:8c:ee:78:f1:60:82:c7:49:
         2e:84:38:f9:67:4c:7a:1f:26:63:14:76:38:04:73:59:03:cc:
         fa:f4:35:e8:ba:c0:15:e7:6d:c0:40:e6:aa:55:02:d6:b4:d9:
         3a:88:f8:ab:f0:b9:80:59:57:b5:64:4f:ad:8d:28:c4:1d:b0:
         77:9b:ec:40:36:ff:f3:7b:03:57:38:56:dd:75:a6:e3:f9:1f:
         e8:bf:82:19:3f:85:42:86:78:3b:d7:80:2f:bd:da:fe:fc:0b:
         eb:42:16:91:ae:a2:16:f2:6d:59:e2:50:d1:24:85:1f:50:9f:
         6f:3b:aa:3e:0e:ae:df:4f:e3:e5:8c:99:70:a0:23:62:f0:53:
         52:fc:73:83:1a:d2:80:ce:c0:ee:3b:fe:4c:23:bd:7c:f3:4b:
         cc:ad:7a:be:a1:8e:e1:22:2f:51:16:10:38:ed:d4:a9:57:7a:
         2f:24:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org