Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E02BEBB99B45357AB821A178286DBBA83174E0ED.cer
File:                     E02BEBB99B45357AB821A178286DBBA83174E0ED.cer (raw, json)
Hash identifier:          Q6b9w2/E7xAOhJb4AwG5PupZTGXJ/xirlkoBgswL9+c=
Subject key identifier:   E0:2B:EB:B9:9B:45:35:7A:B8:21:A1:78:28:6D:BB:A8:31:74:E0:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DA761D3095CD026C90A0FD67474FFC1F892B854
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/E02BEBB99B45357AB821A178286DBBA83174E0ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Mar 2023 18:16:31 +0000
Certificate not after:    Sat 23 Mar 2024 18:21:31 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a7:61:d3:09:5c:d0:26:c9:0a:0f:d6:74:74:ff:c1:f8:92:b8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 18:16:31 2023 GMT
            Not After : Mar 23 18:21:31 2024 GMT
        Subject: CN=E02BEBB99B45357AB821A178286DBBA83174E0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:36:e0:1f:94:da:d0:26:5f:3f:32:0b:41:
                    b3:3f:7b:44:a9:7c:12:46:6c:17:15:62:35:3a:c1:
                    d5:22:37:55:cd:ab:a2:24:bf:f0:a5:19:ff:a7:f2:
                    23:db:87:0d:71:f4:2d:64:bf:88:63:25:89:a3:d4:
                    95:02:e5:f9:31:41:a9:51:3a:66:2c:21:36:5d:66:
                    72:c8:db:22:83:ae:0b:a0:f8:95:a0:ef:dc:2e:39:
                    d3:7b:00:51:96:be:83:16:bd:99:82:72:3f:cb:65:
                    4c:2c:82:d0:b9:27:35:28:74:0d:02:75:19:44:c3:
                    08:e6:da:4f:2a:e8:cf:ee:55:b2:9a:7a:7a:70:43:
                    26:f0:5c:76:d1:32:da:cb:46:68:a8:cd:e1:ac:43:
                    04:3b:ff:ab:ec:7c:38:2f:54:0f:a2:d2:e9:43:40:
                    dc:e4:2e:1c:38:f1:08:0b:6d:db:c7:0d:b8:f0:fa:
                    32:90:2b:1b:63:b3:ea:25:86:67:04:41:8e:78:6a:
                    cc:3d:58:da:52:d7:81:e4:f8:b4:13:ae:8a:9c:62:
                    92:60:93:b8:81:a3:d2:aa:95:31:a7:ce:ed:41:75:
                    6f:7b:d2:4a:3d:c4:10:5e:a9:f1:46:bf:5a:fc:ab:
                    9d:34:6f:05:a3:57:ff:e7:43:c9:0c:07:dc:a8:58:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:2B:EB:B9:9B:45:35:7A:B8:21:A1:78:28:6D:BB:A8:31:74:E0:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/E02BEBB99B45357AB821A178286DBBA83174E0ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         b2:3d:02:21:a5:ae:b3:01:f5:a2:a0:b6:34:ad:d6:95:e6:47:
         24:72:05:28:3a:8a:50:3f:dc:1d:10:11:1f:04:4a:86:e4:05:
         4c:3c:fb:a1:ec:13:06:66:cd:2e:82:7d:0f:9e:a4:35:c0:19:
         b5:aa:ca:a1:6c:67:5d:d9:19:cc:61:2a:46:72:5d:a4:b9:ae:
         2c:eb:bc:e7:06:a8:15:ce:31:48:6b:91:dd:25:35:82:55:92:
         41:8f:1b:99:fc:75:45:1d:34:8b:b0:94:2a:20:50:31:2a:71:
         c4:f9:e6:bd:a2:7f:b1:c4:2b:62:f8:95:37:25:1a:47:bc:65:
         52:30:ab:7c:23:9e:43:07:68:12:cf:29:3c:af:fc:8f:9a:c7:
         e2:b5:29:0b:44:6a:ba:ea:2b:ef:db:87:87:0f:25:ed:c3:96:
         73:5e:a5:ef:6d:9a:ea:c7:8f:9e:55:ec:5d:7d:99:a4:4b:02:
         ba:74:09:7d:81:cd:fb:90:c6:47:56:cc:f6:c1:b3:56:e1:3a:
         1a:48:33:32:0a:9f:b9:0e:eb:ce:2b:de:f6:d2:ac:67:1c:3b:
         e2:6d:68:0d:5c:d2:57:0d:98:31:6d:cf:34:71:9b:56:ae:57:
         4c:4d:7b:53:63:40:d1:98:ca:2f:fb:9f:1c:d6:23:05:63:b8:
         c2:f6:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org