Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9.cer
File:                     E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9.cer (raw, json)
Hash identifier:          VJtTpMofuiBIN4Ls96JJk/SIDhvM0VinT20fjqQ7DNM=
Subject key identifier:   E0:50:B2:C6:5D:6F:6B:58:4E:9A:D4:75:1F:31:DB:19:AB:E8:DB:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33F0054FB39D4B84BEE5A2F3488CE6CD4AC19326
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 14:24:25 +0000
Certificate not after:    Thu 20 Feb 2025 14:29:25 +0000
Subordinate resources:    AS: 268449
                          IP: 45.161.72.0/22
                          IP: 2804:5164::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f0:05:4f:b3:9d:4b:84:be:e5:a2:f3:48:8c:e6:cd:4a:c1:93:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 14:24:25 2024 GMT
            Not After : Feb 20 14:29:25 2025 GMT
        Subject: CN=E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:7f:21:6e:e9:09:00:5f:e1:13:88:56:70:
                    b4:53:3e:2f:bd:b8:31:60:30:c8:71:57:eb:71:86:
                    d2:6a:41:a6:c6:7d:7f:cb:22:d0:79:ba:6f:33:dc:
                    81:80:1c:9e:36:fa:71:ee:e8:0e:82:52:ee:cc:f8:
                    5e:9e:63:d8:80:04:4f:44:bc:f8:85:80:f7:5f:fd:
                    5f:ff:94:b5:d6:e6:fa:c0:27:d7:6c:e2:e2:dc:39:
                    17:a6:df:81:6d:41:54:24:c6:86:5a:68:e8:83:01:
                    cd:1c:bb:de:86:fe:8b:4c:c8:4c:79:d0:f9:b8:4b:
                    2d:63:61:b9:b3:87:fb:50:2d:08:54:66:41:47:77:
                    5c:af:b1:91:d3:d7:f4:a3:4e:45:68:ce:bb:29:3e:
                    f0:87:a8:02:ac:0c:b8:8e:c3:ea:2f:a7:e3:f2:5b:
                    ce:f9:20:64:32:8a:cc:41:36:05:f3:16:47:7d:37:
                    73:99:86:e6:6f:00:b2:4e:66:3a:d9:25:d1:04:e0:
                    67:0f:ef:e9:81:e5:aa:15:9c:2d:f8:31:bc:80:15:
                    89:ba:a2:dc:d8:e6:ee:01:3a:7b:f3:f5:7f:85:88:
                    0d:d1:f9:cf:0c:df:46:ab:d3:c6:23:b6:eb:d7:16:
                    92:06:d6:fd:c0:e8:75:d6:bc:7a:b4:22:71:0f:cc:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:50:B2:C6:5D:6F:6B:58:4E:9A:D4:75:1F:31:DB:19:AB:E8:DB:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.72.0/22
                IPv6:
                  2804:5164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268449

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:d2:80:8f:7c:12:bb:d9:3d:70:79:6c:ae:2d:10:3a:ad:
         f7:31:b4:e9:aa:7e:4a:a5:0e:ce:db:f3:93:e1:7b:bc:fe:08:
         fc:01:ca:32:0c:0f:29:1a:08:fa:41:74:d9:d9:0a:72:e1:8d:
         f6:b0:4b:a1:f6:be:d8:86:8b:00:f3:6e:a5:0d:9d:31:34:e4:
         bb:5c:ef:0f:5d:db:14:90:65:13:cf:96:95:46:a2:04:5e:a7:
         8b:ff:6d:ac:61:d1:8c:f2:9d:d3:9a:85:b6:2b:23:d1:c7:71:
         25:d1:d3:8f:29:43:82:c9:3c:29:65:a2:a3:31:ae:f6:99:8b:
         a2:bf:d8:21:4b:b8:3f:86:43:0e:66:d2:37:2a:2f:83:7d:75:
         e9:7b:d8:00:b5:c8:3c:c9:f4:c5:22:7e:2b:3d:3f:75:37:37:
         ed:ca:aa:ff:71:6a:ef:01:6f:66:8a:a6:53:0a:24:d6:54:ea:
         67:d3:e4:77:48:66:12:50:5f:2f:86:26:3d:0d:73:a1:59:55:
         e9:db:e7:e8:8e:34:9a:bc:42:58:39:fd:e4:08:6e:4d:2e:6f:
         ba:1a:0c:c0:31:f0:32:c9:91:98:37:2c:5e:27:1b:0c:00:a2:
         19:6f:12:f8:03:62:a3:54:38:30:5b:43:5c:60:72:4e:a3:86:
         b7:a1:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org