Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0EFC5AE6D405491E7EC9E9B1E9C480FDE3B3D85B.cer
File:                     0EFC5AE6D405491E7EC9E9B1E9C480FDE3B3D85B.cer (raw, json)
Hash identifier:          eeVtzPGUnyUJXLpEKks/qbfiUx/rduvQM2bZ6tJKYM0=
Subject key identifier:   0E:FC:5A:E6:D4:05:49:1E:7E:C9:E9:B1:E9:C4:80:FD:E3:B3:D8:5B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44C9275A6521ACCADD46F1C788842C65263BC912
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/0EFC5AE6D405491E7EC9E9B1E9C480FDE3B3D85B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 12:26:06 +0000
Certificate not after:    Mon 17 Feb 2025 12:31:06 +0000
Subordinate resources:    AS: 262789
                          IP: 177.221.120.0/21
                          IP: 186.233.128.0/21
                          IP: 2804:208::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c9:27:5a:65:21:ac:ca:dd:46:f1:c7:88:84:2c:65:26:3b:c9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 12:26:06 2024 GMT
            Not After : Feb 17 12:31:06 2025 GMT
        Subject: CN=0EFC5AE6D405491E7EC9E9B1E9C480FDE3B3D85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:f3:f5:51:31:e1:ea:29:6d:e2:3d:98:51:
                    42:38:b1:cf:cf:b0:12:88:42:3b:71:fe:97:ec:d4:
                    fa:93:58:ca:11:99:57:c0:7a:9b:34:a2:b7:20:0f:
                    ea:ea:14:b0:91:6f:53:60:45:ec:d3:e2:40:0b:de:
                    0f:af:60:b7:cc:c8:ce:a1:61:89:20:c1:65:64:f9:
                    b3:59:dc:d5:04:14:57:3e:8e:15:be:11:a3:0e:b5:
                    e7:ac:78:30:14:1b:1c:86:f2:28:21:07:94:de:51:
                    f4:86:5d:e0:2d:ff:fe:54:9d:0e:c3:b7:6c:a1:a9:
                    be:e9:8f:6a:20:35:5c:64:6e:f1:25:69:08:a5:64:
                    47:a8:87:0b:74:86:82:cc:99:5f:a2:35:fb:97:85:
                    e8:49:38:02:1e:c8:90:0c:14:fa:64:96:9f:de:01:
                    e3:85:38:9a:61:c2:74:0e:61:62:53:bc:2c:61:be:
                    85:d0:9f:62:1f:55:0a:05:8e:da:78:99:5c:02:86:
                    a3:e5:8a:1b:f8:f7:15:f9:25:6b:ca:69:47:4e:42:
                    98:fd:68:d0:c5:b2:5e:00:c7:57:25:7b:3b:ee:72:
                    64:14:ac:7b:f3:37:7b:56:24:0f:cf:8e:cb:e1:9b:
                    4a:e5:fc:67:d7:71:73:af:be:f7:d9:f9:ca:9a:23:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:FC:5A:E6:D4:05:49:1E:7E:C9:E9:B1:E9:C4:80:FD:E3:B3:D8:5B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/0EFC5AE6D405491E7EC9E9B1E9C480FDE3B3D85B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21
                  186.233.128.0/21
                IPv6:
                  2804:208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262789

    Signature Algorithm: sha256WithRSAEncryption
         26:65:0c:e2:53:91:fe:af:08:ee:cc:69:c2:13:c7:35:6a:22:
         b2:e0:2d:b2:e5:3d:9f:11:6f:4e:0a:2d:e4:57:3c:a0:dd:73:
         0e:ad:03:62:66:96:38:4d:80:f1:f7:6e:cf:81:f6:f3:53:ab:
         ca:23:5a:d4:7e:7f:e0:be:c0:8f:bd:44:ea:08:62:a5:8f:33:
         34:21:dd:d6:3a:d8:ba:f1:5f:05:85:d9:32:d2:e8:17:ff:c1:
         74:12:22:1b:dc:24:5b:68:2b:eb:8e:97:c0:bf:fc:b6:e7:6d:
         6e:1f:46:7f:37:5b:80:f1:8d:29:1d:f4:52:be:47:f5:58:c2:
         8e:cf:a6:72:ab:a9:17:5b:56:d9:ee:77:34:63:07:d6:5a:a4:
         53:18:b7:90:ee:45:72:61:e0:34:f0:7a:e2:8e:bb:fe:21:a8:
         de:e1:5c:21:1c:86:fe:6e:70:58:d2:a4:a8:8b:2f:08:e9:42:
         c2:c1:cc:0e:cc:38:b3:59:11:5e:a0:a3:17:6d:21:bd:cd:22:
         2c:15:18:33:8f:d4:9b:08:72:64:41:9d:79:d1:a8:28:86:76:
         a7:b4:94:0f:8f:a9:c9:c8:a8:1c:3a:f0:64:94:4f:c4:55:be:
         37:da:ed:c1:7d:5e:cf:b2:53:0d:a7:a4:e1:c8:60:9d:dd:0b:
         76:a9:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org