Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.cer
File:                     E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.cer (raw, json)
Hash identifier:          ynChRO/k+GgYEygeWI7HS7/decuZXznNCSmoDsY6hoc=
Subject key identifier:   E0:E8:8C:0E:CD:EE:6F:4B:0F:14:27:B3:F5:35:37:2B:20:F7:6C:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41A9F292B736E6A587B112FFDF341FE304CF6587
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Mar 2023 12:45:16 +0000
Certificate not after:    Fri 01 Mar 2024 12:50:16 +0000
Subordinate resources:    AS: 270577
                          IP: 187.94.12.0/22
                          IP: 2804:6e20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a9:f2:92:b7:36:e6:a5:87:b1:12:ff:df:34:1f:e3:04:cf:65:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  3 12:45:16 2023 GMT
            Not After : Mar  1 12:50:16 2024 GMT
        Subject: CN=E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:37:ae:57:bf:85:d9:51:f3:eb:bf:b9:0a:
                    8d:5f:08:2e:06:55:e9:e5:17:5b:49:5e:e7:6a:a2:
                    76:53:29:5f:5f:bf:67:0c:f3:b9:98:25:d1:30:41:
                    3a:42:2f:0f:46:42:31:79:3c:c0:58:23:c4:fa:bf:
                    fc:66:15:cf:0b:3b:1c:1f:6e:55:7f:2c:d4:81:4d:
                    ca:10:21:cc:60:f8:5a:2c:0c:05:b0:23:5b:42:e9:
                    7d:ad:46:55:8c:22:88:e1:d7:4d:37:69:d7:f6:e5:
                    89:da:63:59:98:2f:e3:9d:50:92:07:b5:e2:c2:85:
                    56:c6:4f:86:22:0f:5f:3a:3d:67:58:f2:81:08:d9:
                    e5:b0:70:8f:fe:3a:0c:d1:64:3b:cc:35:75:28:31:
                    0d:c7:61:d9:c3:79:b7:c4:04:7d:52:f6:1b:0d:74:
                    ea:dd:d7:86:5b:8a:17:3a:89:a7:f4:38:68:16:a0:
                    31:95:9a:ff:fc:f3:4b:f7:fa:66:b4:d3:a6:db:70:
                    60:95:47:a0:8b:f8:70:2b:15:d7:ab:ee:c0:ab:e5:
                    a7:c0:86:b1:fb:ad:f0:23:94:9d:80:c4:65:f9:ac:
                    12:03:03:a8:ed:88:96:37:7a:79:fa:36:1f:56:6a:
                    a7:95:5a:3e:22:67:66:38:2c:ae:39:f6:34:07:03:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:E8:8C:0E:CD:EE:6F:4B:0F:14:27:B3:F5:35:37:2B:20:F7:6C:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/22
                IPv6:
                  2804:6e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270577

    Signature Algorithm: sha256WithRSAEncryption
         6a:fd:1b:f7:f8:ce:70:4c:45:2f:0c:38:83:85:e0:06:d0:16:
         98:c3:e5:79:6a:77:b8:69:d6:fd:4c:19:f4:52:78:bc:4a:fd:
         0a:47:01:d0:83:f5:df:70:6d:9e:4c:68:ba:33:2d:04:f7:fd:
         cb:0c:e4:1d:e1:88:0b:21:33:30:f7:b5:22:a5:7d:c4:59:24:
         21:66:8f:18:9d:8d:ec:4d:89:3b:50:fa:99:9c:c1:6a:a9:93:
         19:bf:3d:21:e3:5e:27:36:77:f9:b1:d5:6d:c7:ad:92:64:9e:
         be:98:fe:06:42:5f:00:95:db:4d:f4:0c:18:45:42:8f:b0:cb:
         d5:f2:24:72:53:fd:89:f8:e0:ee:2b:d2:b1:6e:1b:1e:40:e3:
         ca:2d:1e:c3:1b:e9:f0:ce:0d:1e:57:c6:eb:a2:13:b3:e5:82:
         cc:0b:1b:bb:1e:85:8f:e4:b2:7b:4a:91:c2:02:81:99:f5:80:
         f2:4b:34:b2:25:68:88:20:10:ba:2c:c5:5b:1a:d4:98:fd:88:
         d0:59:60:5d:45:73:e8:46:e9:cd:ca:64:2c:6f:4c:e0:ae:ce:
         ab:35:50:c1:2b:55:53:60:ff:6f:03:e5:9c:bf:8d:f2:a1:03:
         1a:bb:b6:87:d0:d0:b1:da:dd:fc:a6:78:10:07:a6:55:ac:ac:
         83:86:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org