Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961.cer
File:                     2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961.cer (raw, json)
Hash identifier:          zN44YCrq9TOEJks+8GfIWmw5W4SuXNlYHKAhgIHLdd4=
Subject key identifier:   2E:E9:60:8C:E3:44:58:A0:C4:A2:E8:7C:A6:EC:F6:5A:AD:D4:D9:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01009FB2409F0E5B902F70CBA5F19721F6B56C56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/1/2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Aug 2023 05:09:27 +0000
Certificate not after:    Mon 26 Aug 2024 05:14:27 +0000
Subordinate resources:    AS: 268091
                          IP: 45.169.24.0/22
                          IP: 2804:57dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:00:9f:b2:40:9f:0e:5b:90:2f:70:cb:a5:f1:97:21:f6:b5:6c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 28 05:09:27 2023 GMT
            Not After : Aug 26 05:14:27 2024 GMT
        Subject: CN=2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:4c:ee:69:9d:1e:b0:21:2b:1b:f7:e1:5b:
                    df:f9:e9:62:d1:80:83:a3:d8:59:7e:50:d4:8a:ed:
                    17:bb:59:6b:33:df:40:7c:a8:96:4c:b8:d4:13:bb:
                    39:2e:cb:aa:cf:ab:2a:2b:e9:7d:3d:b6:f7:28:82:
                    d0:e0:4c:bb:7a:8e:d8:50:65:99:64:5b:42:33:2c:
                    b8:c9:de:d2:73:c0:57:46:6b:ab:28:50:06:7a:35:
                    50:7f:c2:78:a2:19:81:19:e5:be:53:7e:69:0a:b5:
                    86:8d:6d:5a:0d:fe:d9:99:97:4c:ef:f2:ea:d3:62:
                    dd:b9:6a:16:84:9b:4c:20:80:f2:f1:2b:71:d2:76:
                    b8:6a:48:cd:00:2b:b2:6a:6e:29:4d:69:12:50:e5:
                    5d:f9:bd:d4:82:ee:f9:ed:29:af:45:52:25:19:44:
                    1b:c3:8f:17:81:32:60:81:9b:cb:7b:47:30:b7:8e:
                    72:7a:9a:9b:3c:35:54:f2:c8:af:31:61:e1:41:07:
                    cd:04:17:ae:48:91:c1:47:18:b9:19:6b:d8:aa:7a:
                    65:8b:da:99:82:ad:cc:44:52:c3:12:61:84:d5:ed:
                    db:c2:c7:b6:ae:f9:3c:9b:d0:a0:62:cf:d4:a3:d7:
                    87:90:93:be:9b:66:d0:e6:7b:8a:6e:7a:72:43:cf:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:E9:60:8C:E3:44:58:A0:C4:A2:E8:7C:A6:EC:F6:5A:AD:D4:D9:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/1/2EE9608CE34458A0C4A2E87CA6ECF65AADD4D961.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/22
                IPv6:
                  2804:57dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268091

    Signature Algorithm: sha256WithRSAEncryption
         2a:68:86:80:c3:7f:e6:bd:f2:b5:07:d5:26:a0:e6:af:2a:02:
         c0:8c:43:f3:e0:fb:de:f0:aa:f4:1e:0d:77:85:03:23:45:04:
         10:73:46:61:f4:4e:fd:fe:ae:7a:80:24:85:35:ed:4b:a1:ba:
         8d:73:48:19:68:34:a4:63:db:7a:b4:92:54:cc:b6:59:5a:4b:
         10:a0:40:f9:bf:a4:c6:07:e7:6c:b9:83:a6:61:76:a7:8d:ce:
         dd:e9:e0:16:5c:78:dc:1b:5c:23:35:ac:45:36:4e:f8:f7:2a:
         7e:75:c0:57:23:e9:12:26:5c:09:35:91:33:64:a5:cd:be:e5:
         a9:db:a5:ef:dc:d1:97:69:d1:e6:8b:ed:6c:85:e8:84:5b:74:
         92:66:a2:33:31:08:9e:74:1a:f9:70:35:8c:10:4c:75:de:2b:
         53:8b:75:38:7b:86:cc:80:5d:58:39:94:df:0d:14:90:76:ae:
         0b:57:56:79:99:20:23:fa:f8:5b:17:d4:40:f4:68:c1:d5:07:
         69:9a:57:ec:21:28:a5:5f:e7:64:9c:e4:f8:76:4f:a3:81:a2:
         87:2f:91:55:3f:ba:26:84:ef:52:81:0e:2a:15:a0:9a:f1:10:
         e3:34:d1:d3:d5:e0:7c:20:89:73:55:c3:0b:99:9f:e3:73:76:
         ab:4b:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org