Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer
File:                     C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.cer (raw, json)
Hash identifier:          Fna7cm8j1QGHK2ZivwgOYqn8yWOrleZijZm+os2eQZs=
Subject key identifier:   C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B76D9368E5AE4361B21FEFECA011AF88A77E4A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 17:27:30 +0000
Certificate not after:    Wed 27 Nov 2024 17:32:30 +0000
Subordinate resources:    AS: 271492
                          IP: 181.224.76.0/22
                          IP: 2804:7c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:76:d9:36:8e:5a:e4:36:1b:21:fe:fe:ca:01:1a:f8:8a:77:e4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 17:27:30 2023 GMT
            Not After : Nov 27 17:32:30 2024 GMT
        Subject: CN=C0EF709048855BA9C15EDC1FB1E07C8C74D4212F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:05:f7:fb:d1:01:d2:ec:0c:fc:89:c7:7c:
                    83:6a:1d:c3:68:50:6e:b0:47:f8:4d:86:8c:b3:de:
                    98:d8:d8:fe:de:ae:81:a5:1f:a1:80:4e:25:ff:fc:
                    e9:fa:c8:50:b7:4d:84:de:1a:fa:90:48:72:ba:78:
                    11:a1:2e:1a:5a:f6:32:4b:c0:6f:61:19:02:5d:2e:
                    7b:ae:94:07:6e:d8:52:8f:45:cc:44:41:32:86:3a:
                    6e:ae:49:00:89:ed:c3:9c:93:1b:f0:c0:5f:94:fb:
                    53:c4:78:ad:f3:bf:61:3b:76:39:54:ed:db:bd:31:
                    13:0a:e9:0e:78:87:75:a9:aa:8c:ad:1d:9e:50:84:
                    a4:4b:8e:24:cc:ac:53:c5:56:5e:61:50:0c:53:60:
                    14:af:b9:06:73:dd:0d:35:2d:cd:12:02:7d:e7:08:
                    f3:e0:25:22:19:f9:a5:b3:90:a0:69:5b:01:a4:13:
                    a2:f6:55:c1:7c:36:cc:be:f3:2d:24:93:5e:57:52:
                    46:3f:15:49:87:22:08:a9:3d:53:b8:60:d2:3c:eb:
                    ed:fc:81:f6:63:bf:80:88:b3:19:f4:87:e3:14:42:
                    63:e8:1a:3a:06:52:ef:5c:64:a8:22:98:21:ca:e2:
                    14:5b:31:0e:12:d6:95:cc:62:ab:39:05:24:5e:73:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:EF:70:90:48:85:5B:A9:C1:5E:DC:1F:B1:E0:7C:8C:74:D4:21:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/C0EF709048855BA9C15EDC1FB1E07C8C74D4212F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/22
                IPv6:
                  2804:7c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271492

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:7d:4d:fc:c4:3c:5a:7f:75:17:f4:07:ad:eb:a7:cd:45:
         c3:c3:2a:11:ff:b9:7e:c2:ab:82:51:ed:13:0c:7a:06:c4:17:
         94:b3:7b:d5:76:ef:14:d5:f4:b1:92:a6:d6:62:df:90:f0:8f:
         82:8b:8b:98:a3:65:bd:5a:1d:6d:43:9b:26:4f:55:7a:32:b5:
         73:f2:e6:32:41:54:43:72:ec:80:7e:fb:34:6c:33:f3:5f:7d:
         9a:41:b9:6b:3b:07:19:4f:0c:6e:87:5f:51:b5:9c:b3:0e:46:
         67:5f:6e:6a:76:a2:20:2a:22:bd:c4:67:6f:50:15:af:5f:25:
         3f:32:6e:66:f9:bd:43:f2:cf:99:3a:36:c2:07:26:62:f2:a6:
         11:c5:fc:4e:20:e6:6b:98:85:62:86:a8:00:f4:1b:00:3c:6d:
         2d:a1:a6:4b:dd:15:43:86:d7:31:cd:92:f1:92:9a:c0:48:eb:
         36:11:6a:b0:26:1b:ef:3b:e3:cb:69:9c:00:cc:13:a8:98:2b:
         90:66:b6:57:83:3d:2a:11:ad:a8:34:70:64:54:81:f2:ed:ef:
         9d:7f:87:c9:c4:dc:c7:c2:4e:30:bc:e5:5a:a6:f2:14:5b:5d:
         68:5d:09:62:99:d5:83:7c:d8:8c:6a:eb:ef:6b:78:49:63:83:
         8e:d3:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org