Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.cer
File:                     11EC55DCC6754328D555246C7EB1FC903158C2CF.cer (raw, json)
Hash identifier:          EumiliRIvxpbDEHNmfgT2V4nDdRWDUS+D+IW8WiC4IU=
Subject key identifier:   11:EC:55:DC:C6:75:43:28:D5:55:24:6C:7E:B1:FC:90:31:58:C2:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       015307CCE577A0DE59A4BCFAE11D7FDF0DBC6051
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 14:44:40 +0000
Certificate not after:    Mon 20 May 2024 14:49:40 +0000
Subordinate resources:    AS: 268308
                          IP: 45.238.4.0/22
                          IP: 2804:4f28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:53:07:cc:e5:77:a0:de:59:a4:bc:fa:e1:1d:7f:df:0d:bc:60:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 14:44:40 2023 GMT
            Not After : May 20 14:49:40 2024 GMT
        Subject: CN=11EC55DCC6754328D555246C7EB1FC903158C2CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a5:77:e1:cb:e1:9c:29:18:31:bc:8c:f0:c1:
                    ec:64:8d:7b:90:4e:16:88:35:7d:fa:81:49:70:93:
                    3d:91:98:3f:ca:3a:88:d7:a4:a0:ea:de:de:54:bf:
                    cc:37:63:39:fb:70:4d:d6:a4:45:87:13:f7:81:e0:
                    fa:00:25:1f:ea:98:ce:be:57:b3:1d:a7:a9:1a:45:
                    d9:77:f1:92:13:60:80:76:b7:df:6f:16:26:04:03:
                    1b:0e:59:e1:4a:ab:8d:b1:1a:fe:70:cb:8d:bc:eb:
                    15:09:92:2f:eb:63:88:bd:26:d8:6a:3e:57:35:36:
                    d9:d9:33:99:17:b7:dc:21:19:24:7f:d6:ef:01:7f:
                    07:94:a9:e7:e3:88:5b:67:37:64:3f:8f:f5:23:65:
                    25:0f:5b:d9:46:5c:24:60:08:76:c7:eb:66:86:dc:
                    be:27:00:66:c0:f8:26:dc:de:4b:1c:21:91:c1:79:
                    d4:c1:49:4d:72:53:95:d4:31:5d:70:0b:8b:38:be:
                    df:e4:0d:ff:88:e4:26:69:cb:89:fe:72:5a:64:e7:
                    30:6d:51:35:5b:8c:be:48:c6:29:bf:69:35:27:1f:
                    2a:37:18:0a:63:03:11:30:69:fa:90:17:08:1c:d3:
                    fd:1e:7c:8e:3b:9f:cd:2a:ba:2f:f5:05:e5:6c:92:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:EC:55:DC:C6:75:43:28:D5:55:24:6C:7E:B1:FC:90:31:58:C2:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/11EC55DCC6754328D555246C7EB1FC903158C2CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22
                IPv6:
                  2804:4f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268308

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:6a:c2:d9:c4:63:38:e0:2c:56:24:02:54:d8:84:65:53:
         93:87:57:e6:a2:3a:ea:40:a2:b1:2e:2e:78:e4:5c:93:a6:d9:
         44:d5:cb:78:9c:00:87:a6:3d:24:4c:31:d4:9a:a6:3c:0c:ac:
         ca:9a:1e:87:6d:f3:16:2a:bc:eb:66:c8:80:4f:f0:3a:f1:bf:
         46:05:98:c4:c1:14:98:67:4c:17:10:30:c3:29:f4:ca:63:a0:
         0e:f7:9b:38:b2:60:76:cf:bc:9c:8c:dd:8b:56:95:b0:ab:48:
         f4:ef:f4:ba:28:7e:ec:b3:41:de:64:05:33:cf:7d:4f:d7:ee:
         c5:ac:5f:1e:f0:22:6d:64:24:16:4b:4e:d4:bd:21:2a:af:3d:
         9f:74:a4:59:47:f3:af:e9:da:9d:77:74:66:59:87:ed:a7:60:
         11:00:39:57:45:cc:8a:90:c7:57:3d:6b:c2:53:9b:4b:ec:3a:
         8c:06:79:b4:be:1a:e7:4e:79:be:0b:2d:b5:d6:0a:28:52:47:
         ae:7f:c7:9b:bf:b7:4d:5a:59:d1:4a:ba:69:91:6c:15:41:9a:
         ea:3d:e3:f1:25:d1:40:92:f5:d2:fb:cb:a4:83:7b:b6:f2:37:
         9f:b5:eb:cd:c9:8e:a3:cb:9c:a9:88:9c:63:c7:37:a8:5c:19:
         91:77:49:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org