Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E0C4373014D9C5D8E1048B2CB3B99422E238503D.cer
File:                     E0C4373014D9C5D8E1048B2CB3B99422E238503D.cer (raw, json)
Hash identifier:          ZGKTMGMCXJ+9t7WQDKv6QctVpdrbYIxqzZ9fsYNkxF4=
Subject key identifier:   E0:C4:37:30:14:D9:C5:D8:E1:04:8B:2C:B3:B9:94:22:E2:38:50:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       06E56E277CE3AEF570A2A597D844E5E65EC40DCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/E0C4373014D9C5D8E1048B2CB3B99422E238503D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 18:30:48 +0000
Certificate not after:    Wed 25 Sep 2024 18:35:48 +0000
Subordinate resources:    AS: 271670
                          IP: 200.150.252.0/22
                          IP: 2804:7f28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e5:6e:27:7c:e3:ae:f5:70:a2:a5:97:d8:44:e5:e6:5e:c4:0d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 18:30:48 2023 GMT
            Not After : Sep 25 18:35:48 2024 GMT
        Subject: CN=E0C4373014D9C5D8E1048B2CB3B99422E238503D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:b9:56:22:83:a5:e1:60:79:fa:bc:bd:21:
                    48:26:d9:75:46:81:b4:d4:4c:95:dc:2a:ec:f7:bd:
                    18:10:7e:21:ee:57:37:a3:5e:1d:55:46:a9:e4:22:
                    ae:d9:32:95:7d:41:7f:0a:93:c9:10:39:d6:b3:20:
                    cc:4f:79:e5:b2:0b:ac:ea:7f:66:af:3b:a6:4a:72:
                    3a:fa:e7:7f:3a:ce:e2:c2:4c:db:fb:eb:d8:2e:cc:
                    27:2f:ce:7a:13:f1:00:bc:33:f2:70:75:8a:b0:b1:
                    68:a0:98:0c:e6:2c:ab:cf:3a:fc:da:89:20:83:b1:
                    ab:cf:c6:3c:31:d0:69:fb:38:9b:ae:c9:7d:26:c2:
                    10:7f:8d:fa:f6:f4:e4:cb:48:b7:29:39:a8:21:1c:
                    3a:dc:51:83:61:05:55:80:9c:a9:ac:38:47:c3:a3:
                    61:1c:c9:43:e3:2f:4a:5b:9f:7b:55:67:07:db:7b:
                    a5:b7:6e:4c:08:b0:25:c4:88:4c:b0:fa:96:c7:55:
                    8c:b2:4e:c0:70:2a:4d:76:5b:99:d4:c7:44:4b:ca:
                    73:1e:4d:fd:e0:85:d8:90:05:22:52:2c:09:e5:c9:
                    88:ea:40:72:56:2f:c5:b3:37:0f:5b:16:08:0d:f8:
                    73:ce:ef:84:ea:8b:91:78:b8:1b:06:42:20:41:7b:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:C4:37:30:14:D9:C5:D8:E1:04:8B:2C:B3:B9:94:22:E2:38:50:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/E0C4373014D9C5D8E1048B2CB3B99422E238503D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.252.0/22
                IPv6:
                  2804:7f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271670

    Signature Algorithm: sha256WithRSAEncryption
         1a:23:3f:76:54:0c:47:a4:86:06:d1:98:8a:4d:50:0b:73:c5:
         29:3e:3f:0c:68:3d:3a:43:14:4f:8d:7f:18:bb:7b:53:bb:34:
         04:ad:3d:cc:6c:6b:34:b4:50:89:c5:26:13:e9:76:4c:ba:f9:
         fb:52:b9:24:42:9b:57:dc:05:e7:bf:f4:36:0a:2a:f3:72:99:
         82:18:89:b8:6d:fa:48:4a:3c:6f:ae:de:c0:43:ea:e8:10:ca:
         35:d6:38:97:21:84:a1:09:7a:9a:4c:42:de:9b:59:d1:97:06:
         87:ab:d2:c8:67:fb:bf:e4:d0:20:87:4c:4c:aa:47:75:39:8d:
         9b:e1:af:ab:c4:67:ef:67:a4:3b:db:f1:cc:a2:c0:38:65:63:
         ee:86:67:c7:3d:e3:0c:24:2c:58:2b:8a:e7:dd:fe:9c:74:bf:
         f9:e7:d0:8c:ec:6d:e6:03:6b:5d:12:ed:20:e1:ee:1f:8e:05:
         b6:6d:82:8d:2c:89:ed:45:7b:2b:4e:fd:0b:27:2c:6b:48:ee:
         fd:de:13:84:83:b3:18:3b:8f:99:ff:bd:bb:ac:cd:6b:8e:80:
         dd:95:d1:36:a7:5b:7e:4f:e9:22:f2:50:e3:fa:4f:c0:4b:6c:
         68:65:14:31:bc:25:74:dc:95:7e:50:3f:12:e6:0e:fa:58:bb:
         2a:47:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org