Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9ECD5E60CB5DA7C9654458CB6F7ED5DE85C5EB48.cer
File:                     9ECD5E60CB5DA7C9654458CB6F7ED5DE85C5EB48.cer (raw, json)
Hash identifier:          rA+qmn7EOH+eIQMjX1yyw8wqcdd/2qMctynSa31ZIgo=
Subject key identifier:   9E:CD:5E:60:CB:5D:A7:C9:65:44:58:CB:6F:7E:D5:DE:85:C5:EB:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       160E8628B6E6E5049E928971C95BE3B101E06C51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9ECD5E60CB5DA7C9654458CB6F7ED5DE85C5EB48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Dec 2022 00:45:30 +0000
Certificate not after:    Tue 26 Dec 2023 00:50:30 +0000
Subordinate resources:    AS: 263948
                          IP: 138.219.236.0/22
                          IP: 2804:2838::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0e:86:28:b6:e6:e5:04:9e:92:89:71:c9:5b:e3:b1:01:e0:6c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 00:45:30 2022 GMT
            Not After : Dec 26 00:50:30 2023 GMT
        Subject: CN=9ECD5E60CB5DA7C9654458CB6F7ED5DE85C5EB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:06:11:7a:5e:32:68:c6:63:16:58:0b:c2:
                    c4:89:cf:c3:30:43:bb:68:41:59:61:dc:fe:49:87:
                    dc:14:2d:34:44:8c:0a:46:89:61:eb:32:74:97:18:
                    f2:91:7d:ed:83:47:9b:d5:9f:aa:ec:21:40:d1:12:
                    57:ce:95:7e:17:54:38:54:b0:48:dd:f4:6d:36:3d:
                    e2:58:67:6a:b9:0b:b5:98:18:9a:fd:41:35:4d:3b:
                    e6:6b:bf:52:0f:b8:65:df:bd:4e:fb:0b:a7:08:6f:
                    63:ba:c1:0f:9f:86:23:e5:57:af:c1:59:d0:89:7c:
                    b9:c1:06:10:72:ac:0b:b6:e9:d7:38:e0:8d:21:46:
                    a0:8a:53:01:10:9f:60:28:86:6d:45:0a:d1:d8:3b:
                    77:e1:a2:79:b1:60:d1:99:1b:bc:b8:2e:be:26:b1:
                    b1:f1:5a:08:2f:aa:41:ec:e1:d4:ea:bc:b7:10:46:
                    5b:2a:39:fd:ba:9c:f8:e7:c9:fd:f1:ba:42:7b:34:
                    11:ee:eb:7f:58:65:a0:6f:37:00:c6:78:d1:b8:cf:
                    4a:87:7f:9f:9a:6e:9f:6f:ee:fe:f1:96:13:cd:0a:
                    94:6a:28:4e:b3:6c:4b:74:7e:2b:e4:d5:14:7e:ea:
                    08:a6:fc:65:14:3f:85:13:29:42:ab:2e:be:9b:13:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:CD:5E:60:CB:5D:A7:C9:65:44:58:CB:6F:7E:D5:DE:85:C5:EB:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9ECD5E60CB5DA7C9654458CB6F7ED5DE85C5EB48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.236.0/22
                IPv6:
                  2804:2838::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263948

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:ff:54:a4:fc:0a:a5:88:41:fb:f4:82:44:14:70:08:11:
         0d:bb:8e:2b:62:df:fe:b7:f0:b2:c0:26:28:c6:2e:55:51:ae:
         d7:7f:99:38:5a:16:8f:5d:a9:77:73:e8:49:11:13:66:ea:6c:
         35:bc:7c:f3:36:63:48:92:d1:dc:12:f4:9e:27:2d:27:b7:63:
         22:82:2c:cd:77:aa:9d:00:1c:bd:f6:d9:ef:8b:81:08:35:38:
         32:49:2d:95:a6:f4:ba:42:e4:c2:73:45:71:4c:e4:24:01:cc:
         5d:92:9a:e8:9e:65:ef:f8:4e:f3:ad:77:50:06:7e:58:0f:76:
         0e:58:cf:a8:98:38:b5:0b:8e:e6:49:a0:a3:8e:d7:e3:29:86:
         0b:5f:89:98:df:f8:38:63:69:54:9a:93:e0:d9:6c:18:f4:10:
         66:9b:49:27:6f:b3:cb:76:d3:b3:9b:71:87:7e:4a:66:d3:93:
         b6:86:12:1f:97:1d:4d:a2:5e:77:ff:a0:58:7d:e4:87:c2:68:
         d6:48:7d:fa:48:0c:e1:d3:46:fd:ed:1d:e9:cb:ce:26:fa:cb:
         08:16:a2:91:f2:90:bb:a9:57:37:40:02:50:ce:aa:8e:db:d1:
         e5:e4:f0:cf:b7:c6:3e:ae:fd:45:d0:27:fb:1c:d9:ae:0f:2a:
         4d:00:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:05 2025 by rpki-client