Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.cer
File:                     0CE2E9D8B228E9F56BD781EB40042472C4050A4D.cer (raw, json)
Hash identifier:          EYAhwn7ASosdCFaT/hvFLcLLCuTKgv6iE/0sj8WybCI=
Subject key identifier:   0C:E2:E9:D8:B2:28:E9:F5:6B:D7:81:EB:40:04:24:72:C4:05:0A:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CF48083802E7DAFF93597BC27C6246053696B0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 20:25:10 +0000
Certificate not after:    Mon 24 Jun 2024 20:30:10 +0000
Subordinate resources:    AS: 263311
                          IP: 191.7.48.0/21
                          IP: 2804:1414::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f4:80:83:80:2e:7d:af:f9:35:97:bc:27:c6:24:60:53:69:6b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 20:25:10 2023 GMT
            Not After : Jun 24 20:30:10 2024 GMT
        Subject: CN=0CE2E9D8B228E9F56BD781EB40042472C4050A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:c3:d6:43:1d:0f:dd:1c:91:09:01:92:92:
                    af:77:56:d3:14:97:cb:86:7c:87:f0:fe:5e:92:c5:
                    49:60:0a:c4:29:aa:d4:0c:f1:74:85:86:2f:d8:41:
                    0e:86:0f:8d:c5:72:56:a2:e7:3f:d0:c6:c0:4b:21:
                    96:c3:6b:7e:aa:b0:59:bb:80:cb:2c:83:7e:49:31:
                    a3:d1:44:6a:f4:e8:6f:14:24:4b:60:69:26:17:31:
                    34:21:ed:e7:95:80:98:ab:01:c5:fd:ab:17:3f:e0:
                    dc:48:53:6d:b8:bc:2c:36:01:f9:4e:54:13:47:e9:
                    7a:c3:8a:8d:1e:fd:29:2c:e7:b2:ea:77:d8:35:f1:
                    bc:77:40:73:84:69:74:ac:2a:04:57:e8:a6:b3:ef:
                    b2:90:1a:04:6b:a1:9e:b3:ae:64:b1:4b:33:a1:67:
                    2d:50:0b:3e:5f:22:54:d3:2f:6f:a0:20:97:ce:42:
                    3e:34:84:c8:b7:28:5c:9e:8b:10:4a:93:f3:e1:26:
                    3a:df:89:c2:4d:81:bf:0f:77:12:ee:ce:a4:48:c0:
                    f5:e7:61:35:7a:5a:5d:2c:0c:14:39:d6:94:62:ee:
                    7c:d5:55:a9:3d:3f:92:66:c5:29:8e:16:e1:81:23:
                    20:e7:49:ad:bc:b1:79:3d:c1:1d:42:ec:d1:4e:44:
                    63:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:E2:E9:D8:B2:28:E9:F5:6B:D7:81:EB:40:04:24:72:C4:05:0A:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.48.0/21
                IPv6:
                  2804:1414::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263311

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:73:90:c3:e1:50:a8:c1:e1:c8:5d:d0:27:cb:25:22:ed:
         9c:69:13:a9:35:be:1a:63:35:84:fb:00:87:a1:a8:a7:b4:0f:
         98:4e:44:6a:82:b6:6c:52:0c:ef:fe:f6:9c:f8:55:fa:49:31:
         aa:3b:f0:7c:12:b2:d6:90:11:ad:34:d5:f7:af:a9:41:59:4b:
         dd:c3:6f:ca:66:69:07:61:ed:5c:d8:6b:00:58:3e:d1:6f:ce:
         de:a0:3b:53:d8:d6:55:0a:a5:2e:74:be:87:55:f2:0f:e0:40:
         6d:26:3c:58:a9:60:9b:5e:23:77:e1:86:c6:bb:41:cd:bf:f3:
         5a:50:f6:d7:0a:f5:8d:e1:e6:a7:94:2c:48:4b:38:8c:60:9f:
         e3:fc:97:5c:6e:c9:06:a2:ab:f6:ce:ff:40:89:82:fd:e3:8d:
         6c:c4:f1:70:99:a1:2e:0f:72:26:5d:c3:1e:bd:e2:b4:8d:33:
         b7:be:6b:f0:34:79:b0:76:6e:b1:66:00:00:0e:b0:6f:6f:b6:
         ab:8c:fd:6e:39:12:9c:e9:29:33:b7:27:eb:06:11:23:3d:3b:
         fa:b4:f6:9b:dd:4a:a0:4f:14:1a:bd:3f:88:37:29:1e:e9:eb:
         b5:dc:c1:6a:ad:67:55:a1:b7:46:94:c4:d8:5f:41:06:bb:d8:
         a5:97:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org