Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0E6404A90D19500EB80586A86D8324CB631FF854.cer
File:                     0E6404A90D19500EB80586A86D8324CB631FF854.cer (raw, json)
Hash identifier:          8KI/wo0d2QfAmRw96H1oOitUhMIQqw7hhlB1pMN+/n0=
Subject key identifier:   0E:64:04:A9:0D:19:50:0E:B8:05:86:A8:6D:83:24:CB:63:1F:F8:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       186573D6905308DF747558958C967EE52FCAEF34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/0E6404A90D19500EB80586A86D8324CB631FF854.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Dec 2022 13:09:23 +0000
Certificate not after:    Fri 08 Dec 2023 13:14:23 +0000
Subordinate resources:    AS: 267264
                          IP: 45.232.124.0/22
                          IP: 2804:4acc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:65:73:d6:90:53:08:df:74:75:58:95:8c:96:7e:e5:2f:ca:ef:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 13:09:23 2022 GMT
            Not After : Dec  8 13:14:23 2023 GMT
        Subject: CN=0E6404A90D19500EB80586A86D8324CB631FF854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:a9:11:6f:20:90:ec:7d:a5:eb:e2:d7:0d:
                    ca:9f:7c:0d:6a:61:a4:7d:93:44:ce:9d:48:04:8f:
                    f9:f6:49:63:02:21:52:76:90:33:44:b6:e7:1f:b9:
                    2c:5f:35:41:64:a4:4d:32:c0:00:92:6e:05:46:cc:
                    29:20:93:21:7e:49:b9:44:0f:f3:62:d7:92:cd:eb:
                    19:1d:a5:37:e0:99:6a:0c:0b:fc:5e:1f:86:48:e8:
                    3f:44:ec:05:bc:5c:5e:20:b7:73:63:99:cb:1a:aa:
                    4e:35:ad:29:7b:ad:1f:94:ce:71:8d:1e:a7:36:02:
                    6d:68:31:db:72:12:85:50:b4:79:53:ea:71:5d:06:
                    e8:66:53:33:52:0b:ac:38:41:b9:ee:d8:25:6d:71:
                    74:6b:13:9f:1e:50:34:ba:53:49:37:6e:63:71:76:
                    dc:75:ed:20:79:76:32:e5:86:92:f4:a2:58:a6:03:
                    94:19:fa:49:7b:ff:42:0c:5b:eb:6e:71:ff:3c:7d:
                    29:99:63:4e:41:99:f9:9f:6b:aa:06:b0:46:68:15:
                    64:d4:f7:0c:9e:6f:58:56:28:fb:3f:7c:5c:17:e2:
                    65:e2:97:f3:3f:3c:8e:89:08:55:b1:62:d8:3f:87:
                    7e:dc:8e:86:17:05:18:9c:79:a0:c9:c3:f7:1a:a9:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:64:04:A9:0D:19:50:0E:B8:05:86:A8:6D:83:24:CB:63:1F:F8:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/0E6404A90D19500EB80586A86D8324CB631FF854.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.124.0/22
                IPv6:
                  2804:4acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267264

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:dd:78:36:6f:0b:1d:19:bd:d2:84:b4:be:29:28:53:eb:
         9b:71:fc:ec:af:29:7f:39:7d:b7:8f:7a:02:07:f9:db:58:fe:
         8f:07:6a:bb:e1:59:19:df:11:58:d9:9c:75:0b:96:8c:93:32:
         27:77:56:cb:af:e5:d4:73:db:1d:84:75:bb:2b:b5:1c:89:08:
         9d:92:f0:65:dc:82:4f:6c:66:2e:0f:64:2f:d7:58:0e:38:9b:
         55:e1:c2:b3:5b:16:05:12:f3:57:9d:4a:d6:b1:ad:d9:f0:b9:
         61:ab:87:fa:b2:12:95:7e:ca:ab:99:76:b9:e4:bb:a2:af:3c:
         92:9c:42:b1:0c:02:dc:4b:0c:2c:94:54:cd:5a:3f:aa:03:e6:
         de:4f:f1:ba:16:92:bf:f2:34:ed:05:d5:35:26:d0:66:a7:a7:
         08:0e:11:63:73:ca:eb:ea:09:06:6f:33:0b:89:39:a5:7c:26:
         8d:23:15:8e:8d:b9:20:51:d4:3a:d9:91:54:d1:c3:f6:23:f8:
         07:59:5c:a8:c1:30:d9:20:89:4e:8a:8a:e3:99:e8:cd:34:51:
         e0:b7:4f:86:a1:84:2d:1c:1d:9a:d0:33:07:1b:69:60:0c:04:
         02:36:39:12:f2:7f:16:5a:50:80:94:33:43:4f:06:b4:6a:cc:
         47:4b:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org