Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2E78C4F1802647F690C49D27B7E3B9419D3E3EBF.cer
File:                     2E78C4F1802647F690C49D27B7E3B9419D3E3EBF.cer (raw, json)
Hash identifier:          pDRAevhLCDhhG1J65xks2c8aw55RTJYmoQhPuZhWtb0=
Subject key identifier:   2E:78:C4:F1:80:26:47:F6:90:C4:9D:27:B7:E3:B9:41:9D:3E:3E:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       052C886E6101030CC635589A85CF9628C62D5DD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/2E78C4F1802647F690C49D27B7E3B9419D3E3EBF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 13:30:28 +0000
Certificate not after:    Fri 03 May 2024 13:35:28 +0000
Subordinate resources:    AS: 267374
                          IP: 45.234.124.0/22
                          IP: 2804:4c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2c:88:6e:61:01:03:0c:c6:35:58:9a:85:cf:96:28:c6:2d:5d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  5 13:30:28 2023 GMT
            Not After : May  3 13:35:28 2024 GMT
        Subject: CN=2E78C4F1802647F690C49D27B7E3B9419D3E3EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:bb:b9:12:3b:3f:31:61:d9:e2:c8:44:5a:
                    18:ed:23:b2:3b:29:e0:bc:11:bd:06:e0:8c:91:bd:
                    55:07:80:e3:21:81:2e:bc:1f:64:c8:ba:cb:69:4f:
                    f0:8d:c4:51:8d:28:05:1a:5a:6e:15:2c:a5:89:ea:
                    be:70:a8:b5:e7:e6:ea:16:c1:f1:58:95:72:5b:89:
                    be:4e:e8:ff:7b:03:82:a6:29:34:25:c1:df:6c:3c:
                    5a:e6:23:01:02:92:0e:08:30:c3:0b:5c:13:a2:66:
                    7b:6e:10:b4:2a:6c:0c:69:d2:50:b5:8e:ec:38:3a:
                    4c:e7:c1:ad:7a:c2:eb:4e:e4:16:31:0c:1a:3d:ca:
                    14:da:5d:01:d0:73:18:4f:73:37:56:98:95:12:c3:
                    c9:46:80:af:c5:af:87:ab:b3:5f:b1:ea:0b:f3:ff:
                    15:8d:fa:c9:aa:76:c4:1a:1c:c0:44:67:58:bf:85:
                    bf:52:47:7f:44:33:39:40:d2:e6:c2:ba:bd:a5:c9:
                    68:17:f2:89:19:ec:50:d5:29:f3:8a:67:bd:2f:9a:
                    fe:99:2e:75:35:34:1b:e4:9c:58:05:fd:6b:92:84:
                    bb:ea:12:09:cc:16:15:38:6a:d2:92:ae:3d:34:1b:
                    e0:f3:f2:75:65:3f:fa:58:8b:52:9f:ef:3a:16:e0:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:78:C4:F1:80:26:47:F6:90:C4:9D:27:B7:E3:B9:41:9D:3E:3E:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/2E78C4F1802647F690C49D27B7E3B9419D3E3EBF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.124.0/22
                IPv6:
                  2804:4c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267374

    Signature Algorithm: sha256WithRSAEncryption
         15:15:68:e7:df:d1:02:ec:b3:b1:dc:08:54:6b:fb:b5:84:5f:
         18:e2:56:6c:16:3a:e9:20:4b:48:0a:39:14:f2:a6:32:39:f6:
         c1:37:04:ca:86:e6:ff:40:76:7d:8c:58:33:44:e4:d6:b8:33:
         f6:13:68:0c:5e:37:26:46:ad:d2:f7:56:f4:a2:40:12:d5:c7:
         80:5f:16:1a:d8:e3:3f:79:c7:61:2c:20:92:eb:cb:c8:fe:b4:
         37:0a:4d:a9:29:d4:0d:05:9c:02:20:a9:e8:44:3a:32:a9:93:
         b2:0c:12:ee:7c:16:cf:07:7f:30:ca:d8:2d:8c:09:89:0d:dd:
         87:7b:67:b8:3f:4b:f4:b1:93:6e:15:5b:b4:23:57:41:c2:56:
         df:f0:34:63:29:e1:e7:14:ec:ee:7c:7d:96:ea:44:ac:9e:8d:
         a6:35:ef:a5:1e:ad:1c:d9:e3:17:0c:c3:90:a4:7f:ff:7f:ad:
         5d:da:f8:ad:58:5a:4e:37:68:56:52:b4:2e:7f:53:dd:06:cc:
         4b:63:fa:c7:14:4e:af:60:11:71:cd:5a:68:3b:12:d4:b2:b4:
         4c:60:23:6d:9b:45:a8:50:bd:3a:5a:72:b1:83:43:80:3a:34:
         c3:a6:53:99:aa:1f:a8:f4:56:4b:e6:1e:e5:19:42:58:61:e4:
         67:b4:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org