Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer
File:                     1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer (raw, json)
Hash identifier:          sES2wHF5okBQJxodDgPTpG+mxWI54jGPvNLmH+vFk0s=
Subject key identifier:   1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39DB8411188B3EC7E87C7F97695C228D553B0573
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Apr 2022 23:46:10 +0000
Certificate not after:    Sat 15 Apr 2023 23:51:10 +0000
Subordinate resources:    AS: 268876
                          IP: 45.171.122.0/23
                          IP: 2804:5be8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:db:84:11:18:8b:3e:c7:e8:7c:7f:97:69:5c:22:8d:55:3b:05:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 16 23:46:10 2022 GMT
            Not After : Apr 15 23:51:10 2023 GMT
        Subject: CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:10:5f:d9:98:d0:b8:21:4d:83:27:43:ff:
                    c0:36:4b:09:bb:da:24:63:30:33:2f:37:f5:ca:e1:
                    88:06:e5:11:0e:e5:76:eb:09:8c:f1:b2:b7:e2:a0:
                    5c:65:23:61:c3:57:e7:55:cf:8d:52:97:c6:90:2e:
                    ab:af:54:17:75:58:ac:8b:34:7c:9d:04:89:74:30:
                    2f:f6:e5:38:6a:53:1f:8b:0b:34:be:3d:05:0d:ed:
                    c3:5e:66:02:30:27:f7:5f:d5:e4:b3:1d:69:3a:b8:
                    54:2d:28:e0:7f:88:f5:8d:83:b1:3e:de:be:89:1b:
                    0f:e3:bf:ae:9c:02:43:35:56:6b:94:49:0e:31:df:
                    92:21:43:f2:4d:8d:a6:c1:f0:e4:fb:73:e1:a6:ab:
                    9d:f8:d1:c1:c1:08:cc:20:4e:4a:19:c9:ae:fa:b2:
                    f3:bf:80:3f:10:61:33:8a:af:3f:66:ae:2e:87:1f:
                    0a:f1:38:b5:a6:09:02:29:1d:4a:0f:72:08:c0:77:
                    10:d1:94:19:fc:b9:a3:d1:a5:f6:85:e7:27:6a:f0:
                    ec:8a:1a:28:b8:15:3b:f8:8a:df:2d:6a:de:53:27:
                    9a:6e:ed:03:cd:e3:3b:f3:43:87:3d:ef:fd:8e:31:
                    3b:65:80:c9:26:17:e2:eb:08:a5:4f:c4:2d:69:dc:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/23
                IPv6:
                  2804:5be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268876

    Signature Algorithm: sha256WithRSAEncryption
         5d:3e:d4:07:9b:9c:a7:8e:7e:ee:8c:65:9d:b6:d4:62:75:08:
         13:5f:30:8a:c9:b6:74:39:4e:ed:d7:29:92:83:cf:c6:0e:f5:
         1c:f7:1b:66:fe:69:fc:69:3c:eb:0e:a1:de:51:ff:37:d2:d3:
         22:e5:03:4b:7c:18:16:0e:e7:0e:d1:25:46:62:62:c0:bd:c4:
         6d:db:39:dd:42:6a:e2:9d:3b:bd:8d:d3:b0:e4:4b:39:40:fe:
         0e:da:5d:1f:d2:ac:8b:83:aa:9c:5b:0b:d9:ef:78:68:32:cb:
         eb:6c:7b:86:83:ae:d4:14:4a:48:72:f2:ae:58:a3:5e:85:73:
         b3:ad:b7:73:b6:ee:b9:fc:12:87:8e:d8:1e:b0:ee:fd:cb:de:
         d8:87:a9:76:52:49:da:54:25:3b:28:00:0b:1c:2b:e3:21:2b:
         e4:cc:c6:14:d3:a7:43:27:55:2d:3a:b1:43:05:31:3f:4f:f5:
         ff:04:28:62:71:5c:33:0a:ea:6e:af:b5:c5:32:68:1f:36:ea:
         f1:49:91:51:2a:c0:b4:06:8d:99:3c:26:cd:e7:ab:8b:65:93:
         95:78:24:e4:46:e5:41:f2:ae:5f:b6:df:16:ac:1e:27:8b:e5:
         c1:7c:2d:b3:ce:53:62:9a:22:6b:88:05:d8:55:ff:94:f0:7d:
         99:94:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org