Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34.cer
File:                     EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34.cer (raw, json)
Hash identifier:          PhBmMuBStWgqWWhRVBChh3UMppm3UJg8ZBF7oHQzcmo=
Subject key identifier:   EE:5C:25:C1:4E:7F:4C:70:E0:C0:7E:FF:95:95:1C:9F:3E:E1:1F:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35069EF9F4420415DF10DC71E61F0DA6B45256A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Sep 2022 20:39:04 +0000
Certificate not after:    Tue 05 Sep 2023 20:44:04 +0000
Subordinate resources:    AS: 265356
                          IP: 168.181.124.0/22
                          IP: 2804:2ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:06:9e:f9:f4:42:04:15:df:10:dc:71:e6:1f:0d:a6:b4:52:56:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 20:39:04 2022 GMT
            Not After : Sep  5 20:44:04 2023 GMT
        Subject: CN=EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:88:02:b1:5e:11:1d:9d:90:50:c1:37:d5:
                    fe:64:3a:92:f4:da:3d:40:20:81:aa:92:af:c8:eb:
                    dd:96:cf:45:ca:78:c9:61:c8:ed:e5:e8:d5:0d:02:
                    b2:c9:7d:54:88:23:49:b7:27:28:9c:49:c5:ad:da:
                    57:e9:8f:8f:43:ec:bd:f8:d7:ef:e6:52:2c:43:60:
                    85:29:ec:ca:f2:9e:78:1f:85:06:82:0f:1c:81:7d:
                    22:01:d4:96:46:3d:13:85:97:d1:99:da:2a:fd:10:
                    a5:77:e3:04:ad:ba:f7:8a:5f:3f:22:5b:f3:cb:51:
                    d8:39:ff:0d:f2:d7:9e:fa:b7:c4:27:4c:59:86:75:
                    a3:4c:7a:29:84:bd:d5:36:33:96:6f:b5:54:ee:17:
                    38:2f:86:ee:7e:f1:32:71:63:18:ac:fc:eb:7b:09:
                    8c:5b:4c:bb:fb:15:b1:23:16:6d:fd:99:e3:66:c4:
                    9e:4a:4d:73:e0:a4:46:93:f8:b4:ad:49:56:93:69:
                    6c:a1:aa:e2:4e:69:4f:a9:b7:93:b5:12:89:4e:69:
                    cc:05:e3:74:a5:a9:ce:c5:21:7d:91:3a:9d:d9:aa:
                    42:d1:ad:4c:3a:e8:6a:5c:9e:3c:a3:7f:d3:82:b8:
                    f2:5d:71:93:26:e3:5f:15:d5:48:b8:68:02:6f:62:
                    2c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:5C:25:C1:4E:7F:4C:70:E0:C0:7E:FF:95:95:1C:9F:3E:E1:1F:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/EE5C25C14E7F4C70E0C07EFF95951C9F3EE11F34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.124.0/22
                IPv6:
                  2804:2ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265356

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:38:b1:b9:42:26:c1:21:2b:1f:29:ff:a7:dc:ed:c8:db:
         a9:b2:7a:bb:13:87:62:47:17:00:46:99:93:f4:ae:19:24:05:
         ff:19:0b:16:8b:75:06:68:9d:44:ef:a2:24:65:f9:07:16:67:
         94:12:b6:81:64:16:34:0c:aa:9f:2b:85:9f:22:73:4a:2e:55:
         90:7b:42:56:cf:6c:38:ed:de:43:e8:19:06:aa:2d:ba:d0:3f:
         ef:b7:a6:e6:9a:0e:0a:ef:66:ae:77:69:4b:97:95:6a:d3:af:
         ca:c5:77:c5:fa:46:b1:c5:85:a6:7f:91:6c:72:97:77:74:b4:
         77:19:01:9b:a4:2d:e8:d1:e9:e9:29:6c:96:9e:06:ad:7f:70:
         66:5e:2f:8b:7d:19:c7:4d:fe:63:04:00:24:d3:bd:e5:90:3e:
         26:35:01:41:e0:9f:f1:fd:38:59:f1:fd:2e:7c:b8:62:da:da:
         5b:b4:a0:76:55:4c:b1:90:04:72:58:51:e7:17:e8:1b:2f:ac:
         f2:4c:3d:74:91:df:52:0a:57:c8:e7:4a:4a:05:bd:83:e1:91:
         8f:3e:cc:88:2d:cd:96:f9:15:ae:60:e1:ad:e7:9c:3a:c7:a3:
         9b:45:ff:d3:5f:13:71:31:ce:4e:77:65:cb:13:62:e0:8d:bb:
         d2:6e:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org