Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.cer
File:                     0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.cer (raw, json)
Hash identifier:          NfcagXUN+nB3He+thqVXnOEuvNdzxB2dE1AgMv+6R90=
Subject key identifier:   0E:A5:ED:0B:D9:E5:F3:A3:E0:18:D8:8B:6A:B7:8B:F5:83:30:B0:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       322524E0985AD6B9695D80EA5BB7A36A2A01484A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 17:37:55 +0000
Certificate not after:    Mon 03 Mar 2025 17:42:55 +0000
Subordinate resources:    AS: 266498
                          AS: 269051
                          IP: 45.178.248.0/22
                          IP: 170.244.72.0/22
                          IP: 2804:38bc::/32
                          IP: 2804:5eb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:25:24:e0:98:5a:d6:b9:69:5d:80:ea:5b:b7:a3:6a:2a:01:48:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 17:37:55 2024 GMT
            Not After : Mar  3 17:42:55 2025 GMT
        Subject: CN=0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4b:e0:26:f8:48:50:41:03:50:61:d1:a5:95:
                    06:2a:6a:b3:5b:6c:29:a5:32:c0:9c:7e:6f:a0:97:
                    66:f6:95:07:1a:d1:5d:f5:9f:49:a8:cf:3a:57:a1:
                    e8:61:d7:a2:26:0e:14:6f:d5:ab:cd:63:ac:51:e9:
                    5f:e9:b8:84:0c:a0:e3:bc:b7:61:7f:c2:e1:44:a1:
                    9a:44:56:fb:7a:3a:7b:3b:bc:5d:5e:69:59:6a:a8:
                    f8:f2:82:55:db:cf:c3:14:44:7d:72:da:f8:d2:30:
                    36:be:e2:c0:72:a9:17:b3:3a:59:0b:dd:d9:5c:ff:
                    cc:9e:09:f4:4f:63:d5:5a:11:2a:bd:a0:94:7a:51:
                    5f:97:35:ce:23:0b:06:40:27:fe:b5:34:e3:ea:c1:
                    97:5f:17:80:a5:3b:54:31:da:d0:b3:0e:55:7b:92:
                    6e:fb:8b:1a:8b:a0:08:ba:f0:84:cf:3a:90:d7:98:
                    0c:14:35:23:1c:97:85:a1:fd:d7:d4:9c:98:79:4a:
                    ab:f7:cb:78:be:21:9d:fb:cb:6c:5b:d1:cf:2b:83:
                    ed:c9:42:d0:cd:f2:5d:e9:6f:05:f3:94:d3:d4:4b:
                    dc:c0:33:03:ed:90:81:24:44:10:b7:70:4a:0a:cc:
                    09:be:6f:09:37:75:00:92:82:46:4e:69:0c:1f:73:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:A5:ED:0B:D9:E5:F3:A3:E0:18:D8:8B:6A:B7:8B:F5:83:30:B0:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.248.0/22
                  170.244.72.0/22
                IPv6:
                  2804:38bc::/32
                  2804:5eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266498
                  269051

    Signature Algorithm: sha256WithRSAEncryption
         2c:73:23:3c:89:ad:29:23:f5:ae:71:c2:1a:8e:e2:98:bd:11:
         a2:ce:e8:f2:9e:7d:fb:f0:f8:33:e3:d2:fd:a8:1b:b6:3b:0a:
         55:77:1e:89:e6:dc:5f:fa:ea:cd:5e:f5:d5:17:f3:ba:e7:93:
         ed:53:0c:4d:c9:43:3a:1d:ea:aa:35:77:89:b3:48:09:a2:74:
         49:56:66:42:d7:cd:82:4b:be:9e:1b:c3:4b:8c:75:7f:6c:1a:
         7f:47:a4:07:17:e1:6f:b7:f2:14:88:e1:05:84:14:90:bc:61:
         16:4e:3f:60:b5:cc:18:66:fd:b2:e0:02:45:88:87:bf:41:f2:
         e6:fc:6b:94:91:33:85:c8:a4:2a:80:0e:da:a7:67:1e:bd:67:
         f3:1e:70:ed:de:7a:21:fb:ef:78:6f:d0:e4:0f:f3:1a:d5:df:
         39:04:36:7f:7d:73:21:57:af:0d:77:58:a8:47:84:f3:10:0a:
         d1:d5:9b:06:f6:6d:3b:60:8a:cd:a3:db:7f:ad:2f:0d:82:82:
         21:7b:4b:f4:b4:5a:d9:48:21:25:a6:c0:9c:2b:af:a1:94:1e:
         d2:5a:ab:bc:c3:93:cc:08:36:8b:12:5c:01:20:1a:8c:d7:b0:
         67:3b:60:20:d1:90:4f:59:3d:9a:cd:05:d1:ce:87:c3:04:df:
         f0:1a:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org