Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.cer
File:                     2EB1573F98123E28FC28A2381146A49E59E8D2FE.cer (raw, json)
Hash identifier:          1MTnO8tid7+k14eKmHuUMDz+H3rueldFmdrIZ3iFmJg=
Subject key identifier:   2E:B1:57:3F:98:12:3E:28:FC:28:A2:38:11:46:A4:9E:59:E8:D2:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E90E6CA8A886A9BF28764750D9A7B1556817625
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Sep 2023 12:13:22 +0000
Certificate not after:    Tue 10 Sep 2024 12:18:22 +0000
Subordinate resources:    AS: 270305
                          IP: 201.216.120.0/22
                          IP: 2804:6a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:90:e6:ca:8a:88:6a:9b:f2:87:64:75:0d:9a:7b:15:56:81:76:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 12 12:13:22 2023 GMT
            Not After : Sep 10 12:18:22 2024 GMT
        Subject: CN=2EB1573F98123E28FC28A2381146A49E59E8D2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:a6:ef:03:d7:02:30:c7:73:55:a1:50:a0:
                    09:eb:af:ff:a8:ce:d1:4b:db:87:cf:d0:f4:5a:f1:
                    07:87:55:82:dd:49:60:3d:ad:22:99:a8:7f:58:4d:
                    e5:3e:10:c9:f7:39:92:45:d1:2d:fd:55:ae:c5:7e:
                    33:33:07:f4:75:25:55:07:04:cf:09:36:59:91:17:
                    cd:69:7e:00:17:6b:ff:fe:97:b1:57:0d:1c:3d:a2:
                    f2:61:61:ab:71:0d:39:84:a5:6d:c8:73:de:49:d0:
                    0e:59:14:cd:a8:b3:bc:26:98:a7:f6:00:4c:48:3b:
                    40:88:8b:bf:da:33:10:f7:38:b8:9f:50:72:41:d8:
                    83:45:d4:a8:69:ca:29:48:7e:ea:7e:17:38:b2:47:
                    e1:00:5e:94:26:37:0e:ca:82:b2:1b:01:7e:64:26:
                    f9:db:57:7f:04:0b:bb:96:aa:d9:a4:89:84:f2:2e:
                    a9:84:54:72:42:f0:11:a0:9a:28:b0:d2:54:72:49:
                    9f:c8:05:8e:a1:c2:dc:93:7f:90:de:d4:47:93:e4:
                    16:09:a9:60:62:44:d0:d0:6c:f3:90:6c:2d:37:27:
                    3a:62:d3:ae:6a:0a:1b:c0:5c:9b:c6:d9:e1:d0:af:
                    7d:9e:0b:78:70:7a:0f:0c:80:54:ba:a6:30:be:4f:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:B1:57:3F:98:12:3E:28:FC:28:A2:38:11:46:A4:9E:59:E8:D2:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/2EB1573F98123E28FC28A2381146A49E59E8D2FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22
                IPv6:
                  2804:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270305

    Signature Algorithm: sha256WithRSAEncryption
         53:f9:ad:65:4f:c5:6b:2b:cf:ec:27:4e:36:48:5a:de:4d:51:
         7d:fe:3c:15:6d:7b:af:07:a0:aa:65:26:2a:37:f0:1a:74:1a:
         d6:ac:13:41:de:ce:30:1b:71:b9:78:ef:93:c5:25:ea:43:0c:
         3d:5f:90:fb:78:bf:55:51:fc:9f:fe:56:3a:f2:89:22:07:ef:
         87:cf:fe:f5:79:2d:48:8c:2a:66:06:90:85:f9:a7:00:6a:5b:
         ad:78:f8:fb:d5:23:4a:a7:85:00:28:f2:b0:a8:fd:ca:64:c5:
         16:fa:d2:6a:17:0b:e8:ef:03:b6:e0:74:0d:84:01:4a:c0:89:
         48:c5:b4:f0:f1:da:3f:7a:6f:c6:d1:78:c5:ac:28:f4:65:db:
         8c:c3:92:ca:9c:cf:8a:2d:36:4b:ed:c7:66:fe:2e:b9:fa:b4:
         9c:ed:a3:2f:d7:05:b4:3d:45:d7:ac:14:b8:3b:54:f8:3b:50:
         08:d2:af:c0:6a:dc:4d:bb:2d:41:8d:d4:46:ba:42:5d:b4:1a:
         9d:80:53:8a:d5:95:4c:de:20:96:77:3a:2f:20:a8:16:33:b3:
         59:dd:a3:fb:0f:08:59:66:9f:f6:75:5a:2d:c6:9a:3b:ac:a3:
         e3:b4:64:e6:c3:99:76:c8:f0:8c:fb:3f:5d:f2:44:fc:17:d0:
         2a:3d:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org