Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE74E05121680DDBA09A09B53A2E409B5C2381F2.cer
File:                     CE74E05121680DDBA09A09B53A2E409B5C2381F2.cer (raw, json)
Hash identifier:          mBLv19c8YznTQWqPxpmFkkPIL6S/igB5VljIcAeNadk=
Subject key identifier:   CE:74:E0:51:21:68:0D:DB:A0:9A:09:B5:3A:2E:40:9B:5C:23:81:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DA9CC57B57823AA3FC87F8FF6222F6552176CBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/CE74E05121680DDBA09A09B53A2E409B5C2381F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 19 Dec 2021 18:08:03 +0000
Certificate not after:    Sun 18 Dec 2022 18:13:03 +0000
Subordinate resources:    AS: 265184
                          IP: 167.249.160.0/22
                          IP: 2804:2bec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a9:cc:57:b5:78:23:aa:3f:c8:7f:8f:f6:22:2f:65:52:17:6c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 18:08:03 2021 GMT
            Not After : Dec 18 18:13:03 2022 GMT
        Subject: CN=CE74E05121680DDBA09A09B53A2E409B5C2381F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:17:88:12:77:8e:06:44:69:f4:b7:cd:78:3c:
                    d1:18:a7:15:86:7f:e2:92:0f:f2:88:b8:3e:08:78:
                    c6:a3:6e:b3:c7:9d:72:6e:71:29:bd:a7:2b:a2:87:
                    1f:3e:1c:62:8c:d1:1c:d8:81:32:ce:6c:e7:12:4e:
                    59:e3:c9:ca:d6:30:61:46:c5:c0:93:c3:e1:77:4f:
                    92:66:9d:9b:a5:46:6c:96:79:37:3a:9e:a2:40:46:
                    47:da:1e:b7:24:ef:e8:f1:cf:20:f9:78:4d:6a:61:
                    28:5e:57:35:01:f2:d6:45:8a:7d:0a:61:21:df:35:
                    28:44:49:01:7d:d4:f6:4e:71:5d:a6:ab:9f:e8:ac:
                    8b:7b:79:f7:5b:25:e2:d3:1e:96:b0:a5:aa:42:0d:
                    0e:86:4e:61:d0:53:2a:95:2e:26:df:2f:0e:df:82:
                    68:90:d0:c7:07:ef:9c:3f:7a:d1:31:ab:da:b1:99:
                    d6:e0:a8:82:1d:74:a7:4f:9c:f1:3c:37:a1:fa:d6:
                    22:52:d9:8c:2c:e3:ef:f7:6f:ca:7d:da:86:96:92:
                    3d:a3:49:02:b4:e7:37:ef:85:a9:3d:e4:08:b8:3d:
                    66:16:e2:70:c5:a1:43:6f:4c:1b:e2:72:89:14:43:
                    f3:f8:a0:42:8a:97:b2:52:57:b3:c5:69:c0:28:fe:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:74:E0:51:21:68:0D:DB:A0:9A:09:B5:3A:2E:40:9B:5C:23:81:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/CE74E05121680DDBA09A09B53A2E409B5C2381F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.160.0/22
                IPv6:
                  2804:2bec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265184

    Signature Algorithm: sha256WithRSAEncryption
         95:70:1a:5c:42:37:45:eb:77:06:bf:34:a1:76:08:50:3c:48:
         b8:2c:58:24:bb:87:5d:c2:2a:83:c7:7d:c7:d6:f8:ad:95:64:
         fc:85:ed:05:a7:9c:b0:f2:01:e9:ae:9b:2b:91:49:e3:88:99:
         f3:85:4a:3d:e9:91:dd:b9:80:a0:38:2b:d5:a6:40:69:45:53:
         c4:6d:0a:8f:61:f9:63:25:3b:84:52:33:93:28:1a:e4:f3:79:
         ca:85:f3:88:0b:8e:17:26:95:bd:e3:50:eb:ca:1b:31:70:55:
         1d:32:04:13:ef:2d:c6:c0:69:bd:a9:47:c7:35:da:38:1c:1e:
         8c:57:da:13:65:cc:66:9d:b7:18:7f:58:19:e7:dc:24:60:19:
         d0:e7:9a:b8:68:b4:27:77:8b:94:b3:46:ad:62:11:29:59:d8:
         ad:53:25:ed:05:3c:0b:97:df:c3:31:61:f3:73:eb:00:a6:0f:
         46:a5:97:85:44:b1:8c:f9:06:7c:08:ea:ad:53:93:2b:8d:4e:
         c4:84:00:3e:86:df:9e:c9:26:c4:5e:90:27:67:b7:e1:38:6c:
         6d:f8:ec:c2:4c:0a:58:a8:84:60:5d:0c:2c:95:8c:56:94:09:
         b6:2f:41:19:eb:cd:5d:58:6c:05:35:f9:85:d3:f3:f4:32:4d:
         63:3f:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org