Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E08E682D405D9343D0CCCDE549AE84CDE2872E06.cer
File:                     E08E682D405D9343D0CCCDE549AE84CDE2872E06.cer (raw, json)
Hash identifier:          gGJwikI8keCNcOma9utonJUhrNIqbstkpCRVwzw+l+s=
Subject key identifier:   E0:8E:68:2D:40:5D:93:43:D0:CC:CD:E5:49:AE:84:CD:E2:87:2E:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CFBD7C60B49B61A1A8C0A7DA3BC351F4100CA4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/E08E682D405D9343D0CCCDE549AE84CDE2872E06.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 13:27:07 +0000
Certificate not after:    Mon 06 Jan 2025 13:32:07 +0000
Subordinate resources:    AS: 61775
                          IP: 138.204.36.0/22
                          IP: 200.229.84.0/22
                          IP: 2804:1928::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fb:d7:c6:0b:49:b6:1a:1a:8c:0a:7d:a3:bc:35:1f:41:00:ca:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 13:27:07 2024 GMT
            Not After : Jan  6 13:32:07 2025 GMT
        Subject: CN=E08E682D405D9343D0CCCDE549AE84CDE2872E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:d8:c8:f2:87:cc:95:00:74:e9:5d:0d:3a:
                    52:97:cc:38:2a:5c:4c:82:6b:77:63:9d:da:25:4e:
                    e2:9a:4e:0e:92:63:ab:74:b0:b6:01:65:59:cb:1e:
                    f3:89:ed:0c:d1:9e:1d:c2:3e:c2:80:0a:ac:fd:a8:
                    d3:f4:78:b2:23:75:c0:28:6b:38:a7:1d:70:7a:6c:
                    65:a9:3c:5a:45:1b:0c:86:8e:ca:ce:c0:32:65:7c:
                    f3:34:28:2d:8b:25:f6:5c:21:a5:a1:ae:19:0b:85:
                    29:5c:6a:dc:a1:1c:68:d5:e8:c9:ba:3d:f2:44:ec:
                    66:97:a1:0c:e6:cb:a3:f3:63:25:76:85:f3:53:8d:
                    58:03:76:cb:b7:5a:c8:49:4d:0c:79:97:22:bc:3e:
                    e4:05:9d:b4:ba:c9:68:ae:09:26:92:03:16:4a:ce:
                    9c:f9:c3:bf:7f:bc:40:f8:87:b4:84:90:7e:0a:1b:
                    3b:85:1c:35:70:37:60:98:f5:0f:f6:02:5a:5a:5a:
                    53:cc:1c:c0:7b:7c:05:5f:3a:e2:40:16:bc:3d:e9:
                    5f:e6:0b:47:c2:44:6a:10:a1:b8:36:76:f4:ff:fd:
                    60:92:9c:0e:6a:cd:da:03:99:f1:08:8e:6b:cc:7c:
                    5e:dd:fc:2e:27:8f:44:8a:97:bc:43:e4:1d:c2:f7:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:8E:68:2D:40:5D:93:43:D0:CC:CD:E5:49:AE:84:CD:E2:87:2E:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/E08E682D405D9343D0CCCDE549AE84CDE2872E06.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.36.0/22
                  200.229.84.0/22
                IPv6:
                  2804:1928::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61775

    Signature Algorithm: sha256WithRSAEncryption
         6f:c4:ed:90:5b:d4:8c:f3:80:39:ec:f3:93:a8:72:24:f9:80:
         9b:1c:65:01:e5:2f:59:41:c5:a8:cd:50:e4:bc:60:cb:ae:8f:
         2a:0a:68:05:b6:62:77:0d:05:a0:84:c6:42:13:e5:0c:87:3e:
         60:07:4c:cf:81:b4:ca:95:2e:13:a8:2f:7a:95:7d:71:ea:39:
         5a:54:2b:b2:db:19:33:bf:16:12:26:81:3f:38:c2:2c:12:82:
         d4:72:23:84:d8:a9:e8:6b:43:53:f5:38:92:69:3c:54:73:48:
         e1:5d:ac:6e:e5:9a:01:0e:8c:d9:09:be:fd:98:56:9e:5c:8d:
         2e:9d:38:a4:5b:7a:44:10:b6:0f:56:3a:7c:92:8e:a4:f1:de:
         7e:a9:dd:f1:d2:a0:56:f0:be:91:d8:ce:d4:20:e1:00:e0:66:
         11:32:87:98:fb:11:55:23:6d:6f:70:02:08:8a:08:89:c5:03:
         04:d9:2c:70:8a:6a:e3:58:c4:6a:fa:f7:5e:b9:0d:a7:9f:cf:
         ef:11:d9:1d:f1:20:e3:af:c0:03:a7:67:93:0c:37:40:9c:af:
         dd:dd:d1:af:b7:3a:a8:07:a2:a2:05:ad:ff:3a:07:8b:a4:34:
         2c:ce:f2:51:af:f3:ca:c4:35:9d:27:34:b2:59:76:3c:8a:96:
         df:8d:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org