Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0E0889DC7078949A45B24442CCF76DBCF87CB806.cer
File:                     0E0889DC7078949A45B24442CCF76DBCF87CB806.cer (raw, json)
Hash identifier:          gbELrAct19pnyigm/xOLS/5Lm9DTI+QE/wroB0eZaMo=
Subject key identifier:   0E:08:89:DC:70:78:94:9A:45:B2:44:42:CC:F7:6D:BC:F8:7C:B8:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4ECFCB1F1F159C5C613DBEB12D5105DB599F3378
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/0E0889DC7078949A45B24442CCF76DBCF87CB806.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 14:28:19 +0000
Certificate not after:    Tue 28 May 2024 14:33:19 +0000
Subordinate resources:    AS: 266570
                          IP: 45.7.72.0/22
                          IP: 2804:3e0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cf:cb:1f:1f:15:9c:5c:61:3d:be:b1:2d:51:05:db:59:9f:33:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 14:28:19 2023 GMT
            Not After : May 28 14:33:19 2024 GMT
        Subject: CN=0E0889DC7078949A45B24442CCF76DBCF87CB806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:d7:fb:a5:b5:02:d1:7f:0f:b8:66:84:01:
                    fc:eb:5a:5e:e5:4e:3e:83:71:0b:03:ed:da:5e:74:
                    18:6c:b2:21:39:8f:54:02:35:f0:3f:20:d7:6d:ab:
                    3f:d1:c3:71:5e:8a:78:b3:a6:0d:56:80:98:ae:b2:
                    1c:56:7b:6b:89:70:d6:27:6e:5c:6a:44:cf:20:b4:
                    5e:3b:eb:27:47:68:bc:aa:2e:12:c6:4e:a3:1a:6c:
                    74:06:e3:f9:5c:0f:ee:e3:bf:77:f8:3f:63:69:d1:
                    e2:06:8d:ea:fc:de:24:4d:29:9b:d3:48:f5:83:83:
                    16:45:a6:00:b0:7a:c9:5f:4e:20:24:81:e1:63:8f:
                    cf:ae:fb:37:8a:8a:3b:10:54:8e:77:44:8a:f3:fe:
                    2c:c7:e9:22:6f:31:e8:f2:b0:8f:3a:ff:49:c2:61:
                    36:b0:23:60:68:80:a1:75:ed:cb:48:38:34:ba:07:
                    d8:7d:21:35:05:1a:d1:45:71:bb:6e:a3:0e:ad:a7:
                    c2:32:fa:e7:3a:94:93:f8:cf:dd:01:bf:93:c7:ed:
                    55:b0:39:da:0e:93:6a:45:5e:53:be:99:6e:cc:50:
                    21:16:63:17:b8:ee:8c:58:db:f4:eb:fd:6c:8c:1d:
                    18:02:ae:b3:8b:01:c2:48:53:e6:42:51:0b:cb:87:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:08:89:DC:70:78:94:9A:45:B2:44:42:CC:F7:6D:BC:F8:7C:B8:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/0/0E0889DC7078949A45B24442CCF76DBCF87CB806.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.72.0/22
                IPv6:
                  2804:3e0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266570

    Signature Algorithm: sha256WithRSAEncryption
         14:2b:fc:c2:84:0b:f7:d5:41:e0:19:61:a7:a9:9e:11:d3:95:
         cc:6a:09:9b:9c:ee:59:4a:e0:ca:06:27:6c:bc:1d:0b:fb:8d:
         5c:38:d7:ee:d7:df:3f:67:94:29:a3:46:7a:23:84:20:ba:3b:
         aa:49:a2:fd:e7:5d:3c:27:59:3a:f0:5a:3f:3f:f4:b0:c5:d3:
         30:09:0c:c5:f8:15:1d:10:94:ef:e3:13:dd:a0:41:ec:fc:30:
         dd:23:e3:72:b2:6c:ec:37:fb:a6:0c:ea:10:2e:44:c5:63:af:
         f2:08:a9:a3:aa:7d:c4:ae:5d:4d:c5:c8:a2:1e:26:1e:6f:9c:
         66:2a:3e:52:0c:68:19:69:a5:f3:cf:0e:cc:9a:b5:4c:91:96:
         3e:a3:e2:56:70:3d:9d:53:83:53:f3:0a:16:58:9a:70:a9:74:
         ae:91:3e:1b:2e:a1:c0:01:ff:66:a8:5b:10:ae:89:b9:90:0f:
         ff:65:d8:db:b5:11:20:e5:47:c0:12:9b:08:fd:bd:21:28:59:
         2f:b5:63:c8:e6:12:2f:c4:e9:32:7b:2a:42:56:71:f5:99:58:
         64:8d:fb:f8:dc:62:cb:d7:81:48:8b:25:4c:f1:94:56:db:4f:
         cb:e9:65:0b:b2:12:55:6a:5e:e2:b9:a3:34:dc:89:3d:08:97:
         fa:67:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org