Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E0825DF3AD76970627ED7EBB895A766E4DC891DA.cer
File:                     E0825DF3AD76970627ED7EBB895A766E4DC891DA.cer (raw, json)
Hash identifier:          /Y3oXniSIDm3cNm5aMd6uvV+gBhKyIp0OCV+Jy8EjCU=
Subject key identifier:   E0:82:5D:F3:AD:76:97:06:27:ED:7E:BB:89:5A:76:6E:4D:C8:91:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       724A8B86101EF4D6D9F890251FB5E2DF24CEDDB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/E0825DF3AD76970627ED7EBB895A766E4DC891DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 16:52:06 +0000
Certificate not after:    Tue 08 Oct 2024 16:57:06 +0000
Subordinate resources:    AS: 268434
                          IP: 45.160.236.0/22
                          IP: 2804:5128::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4a:8b:86:10:1e:f4:d6:d9:f8:90:25:1f:b5:e2:df:24:ce:dd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 16:52:06 2023 GMT
            Not After : Oct  8 16:57:06 2024 GMT
        Subject: CN=E0825DF3AD76970627ED7EBB895A766E4DC891DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:74:86:72:31:8f:02:76:4b:32:ca:4d:43:
                    39:6e:88:e2:f9:bd:d2:a8:bf:a1:6e:1d:25:7b:bb:
                    f1:94:39:45:0b:52:19:96:29:8f:e0:36:7e:3a:e2:
                    2c:74:73:3f:8e:7b:19:ea:ad:5a:0e:ee:7e:4d:e3:
                    75:09:fd:ef:c8:34:46:bf:ca:78:99:88:9d:ff:be:
                    fd:34:6e:c6:56:33:e8:9a:5b:35:ed:0c:01:6c:c2:
                    40:25:0f:c8:83:f0:3d:20:e2:74:f0:83:b5:06:a2:
                    66:db:1e:17:b6:c9:fc:b6:3a:ca:d9:10:16:46:65:
                    fb:47:95:c0:b0:6a:4b:dd:a7:b1:1c:66:95:42:7b:
                    07:9c:f1:e6:ee:8e:19:17:12:04:66:c5:d7:a6:47:
                    67:fd:c3:84:5c:97:92:ff:cf:ed:3a:cb:18:bd:0d:
                    be:84:94:50:11:49:19:c2:2d:0a:1d:dd:e2:ec:26:
                    d4:62:7d:92:ac:18:69:97:66:5d:56:7d:ab:4f:68:
                    d0:24:74:13:45:5d:96:b4:e1:7f:ef:4e:ea:e1:57:
                    5a:2c:cb:61:0f:94:0b:32:85:23:51:52:66:ff:8b:
                    26:ee:3b:5c:ec:69:ad:95:e6:7f:6f:29:da:6e:a7:
                    51:a6:09:ba:ef:04:06:cd:6d:3c:97:1e:7e:25:fd:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:82:5D:F3:AD:76:97:06:27:ED:7E:BB:89:5A:76:6E:4D:C8:91:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/E0825DF3AD76970627ED7EBB895A766E4DC891DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.236.0/22
                IPv6:
                  2804:5128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268434

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:ec:13:f3:f4:5f:56:c2:f3:07:46:fe:10:2e:a9:57:a7:
         eb:1d:c3:c3:6b:f9:d9:14:a4:25:df:1e:d7:06:8e:bb:97:ae:
         8d:35:86:9c:bc:e1:a2:2a:a2:3c:ce:3a:69:35:72:d6:87:65:
         7a:30:b0:fb:1c:45:1c:b9:47:41:3a:6f:f4:cc:47:19:6f:0c:
         de:10:6d:a5:b5:29:56:ed:58:0b:01:f5:a4:92:0b:48:23:4d:
         7a:87:89:7b:42:f8:6f:01:6f:0f:2a:39:64:04:d5:ac:fe:79:
         16:81:27:50:d8:86:77:9f:ba:0b:4a:32:5f:8a:d6:5e:25:5c:
         7f:e8:37:93:64:9f:67:06:7b:ba:08:1e:0c:1f:8e:c6:cc:ed:
         32:df:7d:86:62:fa:84:f9:a2:f6:cf:23:d6:fe:da:85:10:02:
         c0:66:82:07:c6:6b:00:ef:9b:21:68:5a:f4:18:9e:3e:bf:83:
         61:77:8b:b0:bb:a0:f9:b4:3c:0c:90:8b:21:96:48:6a:79:fb:
         5b:9b:40:47:15:4b:62:c6:87:07:ae:22:b0:0c:1f:bc:07:a6:
         88:9d:56:17:a9:37:34:eb:15:ab:4a:3d:fe:ed:f0:8c:2b:06:
         2c:13:dc:59:8c:67:80:67:74:36:e1:4f:f4:a9:80:d6:eb:f1:
         1d:c4:c4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org