Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0EE5D20712B0FC6EB8454C2206F8D8AD49283DEA.cer
File:                     0EE5D20712B0FC6EB8454C2206F8D8AD49283DEA.cer (raw, json)
Hash identifier:          X1nM5ZRezPB8T30TgN+Z6YYvtxTck1/m1BBz3u+naD4=
Subject key identifier:   0E:E5:D2:07:12:B0:FC:6E:B8:45:4C:22:06:F8:D8:AD:49:28:3D:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78CF46ADC39116BC98EF97A96B4ABEB41A778D98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/0EE5D20712B0FC6EB8454C2206F8D8AD49283DEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 15:41:50 +0000
Certificate not after:    Thu 21 Nov 2024 15:46:50 +0000
Subordinate resources:    AS: 270577
                          IP: 187.94.12.0/22
                          IP: 2804:6e20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cf:46:ad:c3:91:16:bc:98:ef:97:a9:6b:4a:be:b4:1a:77:8d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 15:41:50 2023 GMT
            Not After : Nov 21 15:46:50 2024 GMT
        Subject: CN=0EE5D20712B0FC6EB8454C2206F8D8AD49283DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:74:6d:c7:e2:a6:f6:51:cb:62:db:9d:94:
                    89:21:25:d5:40:54:2e:ad:9b:73:d8:67:dc:81:c7:
                    eb:dd:43:54:40:de:85:5d:81:79:6b:f6:a5:65:c9:
                    c4:45:a3:ab:3a:6f:66:36:a4:85:e1:11:f4:87:15:
                    d1:0d:31:ca:27:fc:36:f9:aa:6f:e2:78:f7:e2:14:
                    ed:b7:a3:cf:36:b2:48:1f:48:5f:70:f4:c0:53:ad:
                    78:15:bd:d2:8f:e7:55:5d:50:b1:6f:89:63:cd:6f:
                    49:a5:fc:ba:0e:0a:80:ab:cb:99:29:4b:1b:d4:fa:
                    48:7e:95:ac:b2:9b:07:e4:42:86:e3:4a:a3:5d:a7:
                    1d:49:5c:8c:43:ca:c7:22:6b:65:9b:1f:ac:ac:2d:
                    c1:a0:ef:f2:27:ee:39:49:e0:90:70:65:f9:23:85:
                    3e:9e:14:ba:d3:d6:44:e1:68:08:71:e9:11:67:16:
                    77:62:5e:5c:25:6b:b5:20:64:1e:27:03:b6:58:0e:
                    92:d6:8d:94:8b:31:f0:4d:7f:eb:c9:8c:51:ee:b5:
                    4a:c9:c7:e2:cf:e1:09:fe:ae:da:20:86:f1:86:89:
                    d5:0e:11:a3:37:f3:4a:04:43:93:35:32:fc:37:25:
                    27:ad:47:80:40:50:9b:0b:c1:66:68:d9:31:3e:fc:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:E5:D2:07:12:B0:FC:6E:B8:45:4C:22:06:F8:D8:AD:49:28:3D:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/0EE5D20712B0FC6EB8454C2206F8D8AD49283DEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/22
                IPv6:
                  2804:6e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270577

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:2f:b1:c8:4a:98:78:6d:a5:9e:e6:46:0c:33:ac:4e:75:
         b9:70:39:39:80:b2:a6:ed:30:c7:fe:86:e6:80:91:5a:ef:a0:
         36:a0:ad:aa:d8:1c:52:50:ff:68:63:89:5e:2b:6f:67:a4:d6:
         cc:7a:d2:21:85:01:b8:78:f4:37:4e:75:21:3a:c9:55:9d:61:
         d5:cf:d5:8a:7d:ff:a7:c3:f3:0c:d1:c6:e0:c4:ff:dd:0d:18:
         a1:d2:dc:30:4e:cc:90:59:cb:8a:20:40:24:fc:d5:d6:d8:44:
         ef:7f:eb:f2:46:69:f6:e4:25:6b:c3:25:b2:93:4f:71:72:12:
         2c:23:4a:55:eb:90:5e:ec:63:39:fb:67:e3:22:38:ad:0a:6e:
         d2:56:60:04:95:a9:71:f4:45:da:71:85:c5:33:db:94:7a:1a:
         04:9d:cc:99:cb:47:6f:9c:bc:78:31:f8:24:56:9a:aa:00:f4:
         26:7e:5f:d9:59:5e:51:c6:8f:e1:6a:cd:53:3d:27:6d:da:02:
         75:22:54:a0:e0:f4:d3:20:f3:61:41:98:f2:c9:56:5d:6e:9d:
         96:13:f4:28:c4:91:5c:fd:0b:40:0e:bc:da:b5:e4:e6:b1:0b:
         10:98:7d:0e:b7:dc:f0:47:8d:d4:c4:f0:93:57:13:60:27:3f:
         38:94:ea:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org