Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E06D672CEFBF21FDC97999C20CCA42839A2980F3.cer
File:                     E06D672CEFBF21FDC97999C20CCA42839A2980F3.cer (raw, json)
Hash identifier:          BJK0uFF+I7B36hcuPN5EDSobm0T7ii27qMTGwlmejNw=
Subject key identifier:   E0:6D:67:2C:EF:BF:21:FD:C9:79:99:C2:0C:CA:42:83:9A:29:80:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4ADFE89A36FC11AA8EDE69C3BA784E4CDEB3DFAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/E06D672CEFBF21FDC97999C20CCA42839A2980F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Mar 2023 22:06:29 +0000
Certificate not after:    Tue 05 Mar 2024 22:11:29 +0000
Subordinate resources:    AS: 263025
                          IP: 177.10.200.0/22
                          IP: 2804:a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:e8:9a:36:fc:11:aa:8e:de:69:c3:ba:78:4e:4c:de:b3:df:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 22:06:29 2023 GMT
            Not After : Mar  5 22:11:29 2024 GMT
        Subject: CN=E06D672CEFBF21FDC97999C20CCA42839A2980F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:64:e5:c8:0f:96:4b:5d:ee:0e:f3:36:6d:
                    b5:21:bc:87:54:bd:36:6d:69:8f:7e:9c:9e:0f:e6:
                    a0:04:01:d1:5c:af:c5:50:26:8b:50:0c:dd:9c:da:
                    2e:ba:17:d6:f2:aa:b4:dc:3c:3d:a4:2b:4a:ad:9a:
                    df:f9:99:93:44:ed:01:b3:bc:19:c2:ce:d7:50:91:
                    f6:dc:05:05:30:94:54:4d:0a:61:8e:93:9d:98:3f:
                    67:a6:ae:80:18:c2:cf:2f:13:92:14:44:5d:16:4f:
                    5d:94:32:42:eb:1c:e1:f4:fc:80:59:4b:e3:d0:d9:
                    66:7a:84:59:0d:0d:36:72:fc:e5:85:b8:b8:3a:ff:
                    80:be:ac:a2:23:87:f2:25:61:1a:39:56:28:e4:09:
                    f0:6d:e0:78:67:9c:52:e1:c5:93:f4:d3:65:a4:82:
                    f6:28:3e:9a:2b:1f:13:0c:d8:52:cd:41:06:13:bc:
                    58:44:6c:b3:39:a8:83:ba:3a:b4:54:48:f1:bd:18:
                    92:97:02:83:1d:86:2f:5e:a2:b9:df:49:d2:c9:0c:
                    36:eb:ed:48:a6:a9:ae:eb:1c:42:23:35:d0:22:c2:
                    4a:e4:81:b6:f2:7e:29:54:01:07:d2:25:ee:4e:64:
                    71:59:47:b8:1c:ed:df:3f:40:ee:5f:12:8d:43:04:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:6D:67:2C:EF:BF:21:FD:C9:79:99:C2:0C:CA:42:83:9A:29:80:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/E06D672CEFBF21FDC97999C20CCA42839A2980F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.200.0/22
                IPv6:
                  2804:a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263025

    Signature Algorithm: sha256WithRSAEncryption
         45:83:77:16:58:96:9d:83:ed:44:fc:a0:06:fc:61:96:bf:ca:
         96:52:6e:1a:e6:d0:2b:1b:ac:09:42:4d:ba:43:31:db:01:e6:
         e9:63:54:3f:9f:d3:93:09:38:7a:ff:62:aa:e2:8d:f9:f8:2c:
         31:95:5c:cd:ff:29:65:d6:28:dc:b7:1e:d9:f6:01:3b:82:1b:
         ca:86:37:83:dd:94:0c:6a:b8:28:5d:9f:18:15:45:87:31:ca:
         a9:fb:e3:c8:62:5e:e0:7f:4f:6b:cf:40:9e:b9:fe:73:70:12:
         11:d3:d5:83:2c:81:95:8b:45:28:e4:32:0c:73:80:fe:cd:6f:
         63:d5:8d:6a:0a:de:24:82:45:24:36:6b:74:80:72:1a:29:d4:
         ab:a5:1f:c5:24:65:fb:8d:86:88:6d:1c:06:37:62:63:16:6b:
         64:0f:3b:14:11:91:21:6a:a1:69:64:c7:0c:a9:06:2b:8a:8c:
         31:6c:2a:46:3a:af:2a:76:65:e7:ef:04:de:32:bd:d3:da:49:
         68:b9:93:56:28:b7:cc:8f:72:5e:a6:27:ec:48:df:2c:51:d6:
         4d:7a:f9:76:a2:b1:5c:3a:55:74:aa:bb:11:ad:2c:8e:35:d2:
         02:39:95:a5:00:30:35:ec:b0:fb:14:8f:52:02:c2:2d:fd:f1:
         12:4c:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org