Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer
File:                     E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer (raw, json)
Hash identifier:          4nqSJVgUySxQNHsxMzQJRkT6viTrx1vgTKd343JLDf4=
Subject key identifier:   E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       546F650BB6A91F4AAAAD9A539A6082DC477C718E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 20:15:55 +0000
Certificate not after:    Mon 16 Dec 2024 20:20:55 +0000
Subordinate resources:    AS: 269077
                          IP: 45.179.44.0/22
                          IP: 2804:5f1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6f:65:0b:b6:a9:1f:4a:aa:ad:9a:53:9a:60:82:dc:47:7c:71:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 20:15:55 2023 GMT
            Not After : Dec 16 20:20:55 2024 GMT
        Subject: CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:5e:b6:48:e1:9b:07:a7:4e:a1:fb:bf:7a:
                    6e:9f:01:02:35:cd:1f:39:0b:cd:96:44:08:69:0e:
                    fb:af:2e:0e:72:ed:79:f8:6a:e5:a0:f1:96:5e:cc:
                    57:82:19:94:af:66:3b:3c:e2:56:46:5b:dd:d1:64:
                    6e:bc:09:6c:75:46:6f:d6:0c:d6:52:c2:db:e2:10:
                    11:24:40:fb:17:6b:83:e7:35:5d:fa:ce:c8:d0:6f:
                    44:be:13:c4:11:cc:40:28:93:a6:88:6a:1e:17:b5:
                    71:a2:c1:a0:01:2c:7a:8c:1d:ac:5e:b5:2b:4f:95:
                    53:e6:f1:ad:44:1e:ee:97:c4:59:58:ac:65:03:76:
                    c9:f9:e8:db:af:a8:c7:ae:bf:a6:31:e8:fa:7d:b7:
                    b6:f9:6e:58:85:9f:21:ed:0f:a8:60:ac:60:8a:42:
                    a0:05:29:fc:e6:77:d2:e6:c4:8d:f7:d4:66:4d:83:
                    f5:11:62:26:b9:56:d5:08:e6:f7:3b:56:1b:48:48:
                    2d:49:88:5d:a2:47:08:c9:ac:d3:5b:a9:f0:8c:5f:
                    71:34:2e:73:40:b7:aa:88:b4:fa:b8:88:b1:c2:60:
                    96:bb:d1:63:1c:52:1f:c8:07:79:53:ac:f1:61:3b:
                    7d:07:83:c3:0d:e6:51:50:39:77:93:00:60:08:24:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.44.0/22
                IPv6:
                  2804:5f1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269077

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:ce:e7:e4:df:b5:bf:2d:cf:39:83:51:99:97:b2:60:68:
         5b:c8:6d:51:ec:8e:9e:3b:cb:92:e6:e8:e4:5b:66:f6:83:e0:
         e3:5c:60:a2:a6:89:97:2b:8d:e5:dd:fb:88:ea:60:82:52:c4:
         70:b8:09:9a:50:4d:de:e0:6a:09:4d:3e:35:39:18:be:a3:2c:
         1c:fe:5e:1f:01:56:0c:0d:98:70:60:8d:e1:04:ff:6f:b8:dc:
         35:b0:a2:9b:d4:c0:1b:9a:2f:26:5b:5f:ec:c3:06:33:c0:ce:
         87:c5:88:50:2d:87:1e:22:59:c1:e5:c8:27:6e:00:41:31:d0:
         c2:7e:86:30:4d:fe:f5:1a:b6:f7:ca:ab:ee:a5:a3:71:d0:d4:
         d1:85:07:08:a1:45:7b:51:b2:15:d3:36:38:cb:3e:1e:1f:9f:
         7c:ae:ed:6d:a0:2f:a7:f6:8b:3c:86:13:24:d0:16:0b:dc:8b:
         75:31:b2:71:dd:9e:e7:75:32:7f:e9:4c:f4:3b:98:30:ec:7f:
         8c:ef:38:f9:e7:b6:92:3b:bf:dd:06:65:da:10:35:0f:2b:91:
         c8:04:fe:b9:89:c6:85:ff:ab:5e:13:5a:bf:0e:4f:02:cb:26:
         70:46:5a:ec:21:57:46:1d:93:fa:6b:e8:a6:fa:24:27:e6:d8:
         7b:5a:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org