Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
File:                     E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer (raw, json)
Hash identifier:          4ielgDiq+3mkesBuPWGHS7XGEra6i9F9cP2AY5uR18Q=
Subject key identifier:   E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56593C26B02883269F278F3F997B2EA3071B951D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 14:00:48 +0000
Certificate not after:    Wed 18 Dec 2024 14:05:48 +0000
Subordinate resources:    AS: 263900
                          IP: 138.204.148.0/22
                          IP: 2804:276c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:59:3c:26:b0:28:83:26:9f:27:8f:3f:99:7b:2e:a3:07:1b:95:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 14:00:48 2023 GMT
            Not After : Dec 18 14:05:48 2024 GMT
        Subject: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:69:fd:45:35:f7:bc:50:67:de:58:b8:05:
                    9e:94:99:7e:3a:d3:af:9f:05:1f:48:25:ff:df:8b:
                    ca:19:b0:94:b3:f1:ae:84:e3:b1:59:cd:71:ea:b5:
                    ad:6f:f8:33:d3:37:66:82:34:62:3d:9e:0f:f7:d7:
                    90:2c:14:a6:37:cb:2c:86:b2:1d:5d:28:df:ca:fe:
                    2c:9f:88:4d:f3:08:00:fa:83:54:e2:eb:8f:87:cc:
                    84:3b:e6:41:00:d2:ac:26:df:41:62:d1:c7:07:b9:
                    ad:c5:f2:96:49:03:c4:ad:af:99:b3:7b:17:83:43:
                    56:e7:a4:11:9e:cb:a0:5c:c7:33:e2:7b:c2:a3:23:
                    01:7c:07:3e:30:1b:01:64:b5:06:de:53:a6:a3:d9:
                    85:9c:93:50:21:4a:cc:62:d3:2a:62:8f:1d:53:b2:
                    4e:a1:95:f1:5d:c2:9e:36:8f:d3:bf:4b:b8:9a:2e:
                    ed:04:1a:d3:30:a4:3b:7d:ee:38:cb:21:5a:37:8c:
                    41:63:b1:e0:9e:8d:92:dc:f4:57:41:1f:8d:c7:24:
                    d8:cd:95:60:da:23:fd:be:40:e6:ad:fb:7c:59:29:
                    25:44:25:52:8e:2a:c4:56:ef:db:14:15:8a:44:16:
                    62:32:c9:ca:bb:25:7d:7b:c4:d3:ed:67:57:13:09:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/22
                IPv6:
                  2804:276c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263900

    Signature Algorithm: sha256WithRSAEncryption
         00:40:2e:75:65:6b:b7:75:43:d0:f3:17:d8:96:ae:82:51:41:
         62:a8:e7:73:d3:1f:84:6b:a2:88:66:64:94:53:2e:d8:d0:e3:
         ff:65:88:2c:cf:8f:a1:44:30:45:df:9d:73:f6:f1:35:d6:d7:
         fc:8a:05:2d:38:8f:ba:07:10:e4:82:3a:85:bf:ab:ef:f5:3c:
         c4:bb:75:71:e4:d7:76:e1:62:ac:7a:ca:41:f1:c4:cd:59:3f:
         23:46:d5:6d:79:a4:a7:4d:89:0b:8b:ff:53:b9:6c:50:13:43:
         10:02:d3:d2:05:93:d4:a7:9e:8b:b2:24:9f:99:d0:c4:5a:98:
         a2:89:31:81:16:02:c6:4b:a0:ba:17:f5:74:be:f2:fc:70:60:
         37:3d:68:6e:c6:03:f5:35:07:bf:b7:b2:fe:cb:80:c9:c3:d3:
         26:74:a4:e3:e9:44:9b:27:87:e8:aa:20:14:fd:b5:9e:c7:3f:
         4e:64:05:47:5a:3c:34:3c:16:13:1a:2c:f4:76:be:81:ce:32:
         08:f8:86:e0:e7:1e:30:31:be:dd:cc:72:2a:b4:f1:75:ca:5e:
         7f:a8:77:0c:79:ca:67:93:31:24:ea:25:a6:d9:8a:f0:fc:e8:
         e6:fa:7b:87:b2:45:c9:a7:b6:14:6b:c9:f2:fd:99:ee:e4:fd:
         29:35:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org