Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer
File:                     81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer (raw, json)
Hash identifier:          2nEz8UQzY8Yil/e+iPnwFPqYuuJ3AxN/64zml2NxOx8=
Subject key identifier:   81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4904C0DD89B4E817D02604CEE3725514EEF740CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:27:21 +0000
Certificate not after:    Tue 28 May 2024 19:32:21 +0000
Subordinate resources:    AS: 269031
                          IP: 45.177.60.0/22
                          IP: 2804:5e68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:04:c0:dd:89:b4:e8:17:d0:26:04:ce:e3:72:55:14:ee:f7:40:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:27:21 2023 GMT
            Not After : May 28 19:32:21 2024 GMT
        Subject: CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:15:05:8e:6c:a5:f5:6c:de:d7:dc:5f:76:
                    91:5a:51:ef:83:fb:4a:14:85:d1:0f:dc:8b:2a:4c:
                    52:1b:05:ae:30:28:07:5f:a7:d4:f8:fe:bc:0e:c2:
                    be:50:90:91:f8:bb:0e:91:f2:a8:80:1b:b5:99:03:
                    ce:9e:4f:6e:1d:ae:5a:ee:24:ce:8b:83:6a:da:eb:
                    b2:09:b3:b7:b9:e5:03:df:81:f1:ea:22:db:bc:f4:
                    e5:d4:1e:a7:be:ea:01:1a:00:47:84:03:81:33:5e:
                    05:ce:46:b8:14:2e:fe:6d:fc:d4:28:49:7c:a3:cc:
                    d1:a3:5a:d7:cc:fc:f6:45:26:47:88:44:d1:58:5b:
                    16:03:22:4c:20:10:72:ab:1e:b6:94:cd:ed:9d:bc:
                    78:78:f1:1f:13:51:8b:c1:6d:54:79:7f:f8:5f:b5:
                    eb:71:f7:3c:74:3e:83:49:88:48:81:c8:87:0c:c2:
                    02:1d:6d:ea:da:93:3f:f5:01:ee:68:a1:b9:4f:d3:
                    61:7f:d3:54:9a:5b:c5:14:ac:10:96:dc:4a:9b:ed:
                    2f:da:cb:c8:b1:87:4a:bb:ad:1c:ae:b9:9f:ec:57:
                    f1:b4:b3:a2:d8:a0:26:91:aa:f5:ea:2f:fe:ce:a8:
                    d4:ce:90:d3:e6:95:a1:29:42:7f:35:51:f2:06:84:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.60.0/22
                IPv6:
                  2804:5e68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269031

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:02:88:9b:c3:f2:a0:10:07:1d:23:8e:5b:02:0c:3a:02:
         57:53:95:76:d2:6a:26:28:f0:37:87:56:71:6e:69:a3:bb:2c:
         88:ee:4a:cf:2d:9d:54:f7:7a:95:4f:b3:d3:8d:9f:6c:31:ad:
         a2:97:a8:47:e5:62:ef:cc:c7:7f:14:aa:64:7c:b7:19:fc:32:
         d0:3a:27:29:6e:03:9d:b5:ee:0f:21:2c:93:68:b2:f1:2d:97:
         17:15:f0:48:55:9e:f9:ee:8b:8b:14:b0:34:df:6c:ee:28:cd:
         b6:66:35:f5:a2:c2:7c:8c:df:25:3e:71:17:00:bd:b8:98:c6:
         bd:ab:47:b3:10:64:ca:51:12:6b:da:1b:ba:2f:51:38:86:05:
         dc:9d:80:dd:ea:85:1d:48:a9:84:3a:53:e6:16:8b:cb:1e:5c:
         74:15:ee:ac:e2:03:96:06:23:ef:45:65:2f:91:1e:56:f4:26:
         d0:eb:08:0d:0e:70:57:4a:e8:69:20:15:42:42:c4:a1:2d:12:
         29:80:12:0b:ae:87:c5:74:b8:07:85:7e:d8:d2:9f:ff:d3:0d:
         7f:82:a4:b6:27:96:e1:8a:21:2b:6d:65:ea:53:51:fb:be:87:
         57:3b:28:af:a3:6a:bf:40:1c:40:96:57:ea:dc:dc:ff:50:4c:
         28:44:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org