Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.cer
File:                     E8D6B7E362471FF9C1271F9331457BFA45AB085C.cer (raw, json)
Hash identifier:          dMap+7RvVrN2IlPHmfYVBgHNkpPoVFQ0as/BSca9aDw=
Subject key identifier:   E8:D6:B7:E3:62:47:1F:F9:C1:27:1F:93:31:45:7B:FA:45:AB:08:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AA9740572278697273C07C29B5F605205623919
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2024 14:32:30 +0000
Certificate not after:    Thu 23 Jan 2025 14:37:30 +0000
Subordinate resources:    AS: 271573
                          IP: 200.0.179.0/24
                          IP: 200.6.134.0/23
                          IP: 201.131.106.0/24
                          IP: 2804:7da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a9:74:05:72:27:86:97:27:3c:07:c2:9b:5f:60:52:05:62:39:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 14:32:30 2024 GMT
            Not After : Jan 23 14:37:30 2025 GMT
        Subject: CN=E8D6B7E362471FF9C1271F9331457BFA45AB085C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:53:f5:4f:f2:4f:7f:e2:09:8e:b2:1d:43:
                    40:05:8b:82:0f:4d:41:a3:11:cd:46:d7:e8:4d:ed:
                    c7:7b:d5:62:d3:2d:74:bb:cc:1d:16:d3:da:8b:3d:
                    c3:e6:2f:cc:57:cd:1f:11:b8:72:c1:8f:46:db:20:
                    88:f5:71:d8:3c:6f:65:36:ec:03:a5:72:c9:c5:50:
                    8e:47:c3:40:d0:e9:44:a5:9c:37:45:97:01:df:61:
                    aa:fa:24:b6:db:79:55:83:12:2c:09:37:4d:a3:93:
                    04:55:65:5e:8d:65:ad:f7:4f:16:93:86:24:77:6e:
                    9a:c3:56:23:9b:da:f1:58:15:c6:55:0d:7c:1f:fb:
                    26:2c:7b:99:66:6a:85:6e:58:77:7c:60:e3:6a:b7:
                    3e:64:f7:3d:ed:a8:14:3d:f1:3f:b4:c6:33:2a:cd:
                    1e:57:81:ab:fc:ab:2d:48:5b:4b:03:aa:57:db:da:
                    3f:07:7f:89:99:2d:81:35:8c:0e:dd:57:e0:79:e1:
                    6d:61:1f:67:ce:8a:2f:a4:a6:de:3f:5f:4e:5f:f2:
                    13:d1:94:93:f2:69:a0:b1:a2:62:61:13:8a:4d:07:
                    a0:0e:14:f5:22:90:71:c1:d9:fa:b5:da:e5:81:52:
                    82:ec:fb:2b:a3:7a:74:d1:95:eb:e5:59:7c:da:80:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:D6:B7:E3:62:47:1F:F9:C1:27:1F:93:31:45:7B:FA:45:AB:08:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/E8D6B7E362471FF9C1271F9331457BFA45AB085C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24
                  200.6.134.0/23
                  201.131.106.0/24
                IPv6:
                  2804:7da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271573

    Signature Algorithm: sha256WithRSAEncryption
         07:f4:5d:be:7e:26:d8:de:73:3d:84:0b:d4:df:d8:11:6e:76:
         d5:b0:6a:5a:20:e2:9b:5f:7d:30:19:ce:0b:f4:3a:e8:ae:1c:
         18:39:1b:7f:be:c4:ca:e1:ff:9c:4b:ba:61:56:66:50:1a:d6:
         85:cb:81:2e:88:64:56:79:83:07:56:f1:dd:8c:05:68:86:10:
         f3:97:d2:f0:35:92:8d:4f:bc:d0:38:ce:ed:7b:e0:e5:8b:e8:
         35:55:58:b7:02:5d:60:88:28:84:df:42:b1:39:52:4a:19:2a:
         e7:be:c1:e9:86:2f:3e:d8:d1:c2:2d:5c:9b:98:a0:a2:b7:9e:
         f2:5b:10:99:aa:aa:3b:d7:9a:6f:97:55:19:07:ef:52:92:99:
         ab:ae:d9:ba:7c:98:88:5f:1f:0f:85:5c:3a:b0:5f:a7:92:b3:
         20:38:80:cc:4c:c3:f6:29:f1:f5:04:b5:45:44:ef:e2:d6:ad:
         9d:3b:66:8a:ab:9e:07:26:9e:4f:9a:7f:53:4b:22:8f:eb:da:
         25:62:25:27:a7:5f:fa:34:19:bb:c5:b9:48:72:02:82:ce:41:
         34:15:05:4d:ac:5d:3c:b0:eb:fa:6f:f4:6f:d8:b2:dd:5b:0b:
         1e:99:7b:28:e5:0b:74:95:d4:60:bd:87:50:a4:46:0b:1e:57:
         fb:27:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org