Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
File:                     AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer (raw, json)
Hash identifier:          FwwaTnnolo4VZa1+UwKuiamo1pWuBwkVkumNPywnViI=
Subject key identifier:   AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3938CFB4379881F54546B92642FA1B1964F34B2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 20:52:13 +0000
Certificate not after:    Mon 17 Feb 2025 20:57:13 +0000
Subordinate resources:    AS: 267942
                          IP: 45.166.4.0/22
                          IP: 2804:5590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:38:cf:b4:37:98:81:f5:45:46:b9:26:42:fa:1b:19:64:f3:4b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 20:52:13 2024 GMT
            Not After : Feb 17 20:57:13 2025 GMT
        Subject: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:b4:55:a3:08:6e:02:dd:05:45:15:32:9c:
                    2d:93:e3:e6:a0:2b:1d:6a:f0:31:fa:13:e3:d2:66:
                    1d:cf:59:57:39:ed:8a:f2:a4:17:77:d9:a4:e1:e2:
                    f8:1c:6f:6f:c3:ed:ca:08:e6:76:1b:ff:44:9f:24:
                    c7:d8:89:d4:6d:9c:dc:79:a6:5d:9c:8b:b6:e5:a1:
                    26:67:ad:83:c3:31:a3:43:dc:cb:db:73:33:3e:e1:
                    9d:c3:a0:e8:35:7e:68:cc:c7:92:06:9f:d5:5b:49:
                    db:f7:58:b1:5d:11:06:6e:a9:5e:fc:22:09:9e:6c:
                    01:d3:c8:12:ad:d7:97:6b:c9:78:a9:f9:ae:2a:c8:
                    ab:14:43:9c:12:36:04:c1:4b:87:ac:d2:94:41:8b:
                    3b:74:a3:f5:86:fc:38:c2:85:c5:a3:df:0f:90:fb:
                    ba:52:09:b7:a5:d9:2c:92:88:f1:b2:de:2e:29:2c:
                    b8:88:0c:46:46:82:5e:be:e8:cf:a3:c9:72:10:b6:
                    88:21:2d:e0:bf:af:43:4c:e6:33:68:21:2b:03:cf:
                    12:38:bb:b7:3c:52:50:55:3e:a0:59:db:29:95:f4:
                    24:d2:3b:88:9a:91:76:d1:d1:bf:be:e4:b2:5d:a0:
                    47:4c:d5:1b:42:c8:12:cf:a0:72:cd:32:12:93:15:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22
                IPv6:
                  2804:5590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267942

    Signature Algorithm: sha256WithRSAEncryption
         89:5f:a3:aa:9b:d1:ee:b5:d6:e9:de:ec:ee:41:74:aa:c8:ca:
         e4:82:ac:53:c9:9e:d0:22:e9:ba:ce:71:3e:79:2a:10:ab:ab:
         55:f7:c1:6c:3e:00:89:a1:2c:ae:fd:ea:94:8b:9d:e6:94:1a:
         09:a8:27:1c:54:e0:03:39:ab:1a:68:22:36:3c:33:ee:10:c1:
         48:87:8c:9b:ba:54:10:66:bc:3b:c0:04:e3:14:f7:0c:9e:75:
         75:72:78:af:ea:9a:96:ca:0d:64:36:7d:87:69:39:bc:4f:f0:
         c5:b9:e7:f9:e5:4e:65:df:bd:02:df:d7:3c:1d:f9:61:a0:bc:
         31:4b:15:9f:d0:96:f7:5c:d2:58:e5:fe:d8:ca:ab:eb:6b:b8:
         d5:39:6b:e5:5b:f7:b0:73:0c:ef:6f:1c:34:78:88:9d:5b:60:
         05:9a:13:3a:e5:22:ff:13:12:8e:8a:61:2d:1a:04:99:24:23:
         bb:90:ff:92:43:25:38:da:89:c5:44:a5:da:59:c6:82:76:cb:
         ac:06:8e:6a:41:7f:dc:91:94:79:b6:c6:55:cb:53:02:d0:77:
         76:dd:a9:a9:10:2e:b0:2e:1f:a3:34:0b:3b:ce:30:ad:ad:11:
         47:73:4d:09:b5:c1:8f:91:b2:9c:af:4d:92:0b:75:0c:69:7c:
         5f:47:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org