Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.cer
File:                     E0E973E8DD046A62F5490A0C4B758171A606CEBE.cer (raw, json)
Hash identifier:          Yz6IHLVCCX519o0SZB3OvVzpTeEXX3TrZ+R6Gy6+l3A=
Subject key identifier:   E0:E9:73:E8:DD:04:6A:62:F5:49:0A:0C:4B:75:81:71:A6:06:CE:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02E3A51BFDE5AD0E79AA9ED22875F4244C760ADF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 19:42:04 +0000
Certificate not after:    Thu 29 Aug 2024 19:47:04 +0000
Subordinate resources:    AS: 262979
                          IP: 138.186.232.0/22
                          IP: 168.197.64.0/22
                          IP: 186.226.48.0/21
                          IP: 2804:9a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e3:a5:1b:fd:e5:ad:0e:79:aa:9e:d2:28:75:f4:24:4c:76:0a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 19:42:04 2023 GMT
            Not After : Aug 29 19:47:04 2024 GMT
        Subject: CN=E0E973E8DD046A62F5490A0C4B758171A606CEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:d8:72:57:54:d9:bf:33:0a:52:10:1b:ff:
                    c4:de:12:ee:89:ca:e7:c0:10:13:39:4f:41:5a:3e:
                    ad:bc:eb:06:ed:17:69:f9:f6:68:3e:ac:83:cc:7b:
                    49:9c:56:d7:6c:1a:72:eb:e3:4b:20:6b:6a:aa:b2:
                    de:ee:df:c4:cc:7d:4e:3c:9f:d4:3e:ef:ce:5b:dc:
                    bf:88:10:d9:ac:c2:fb:9a:88:6f:21:ee:3e:88:e9:
                    8f:58:fe:da:86:c5:02:72:b4:c5:07:a5:05:2f:0e:
                    65:c4:28:38:09:a3:01:7f:31:cb:03:33:b6:a4:16:
                    83:26:5c:79:0e:c6:df:a0:f9:ab:3c:63:63:a2:d5:
                    ca:b0:ae:97:76:81:e1:8b:61:4b:ca:55:59:3c:43:
                    91:4e:c1:0f:4b:4f:cb:81:c7:42:c6:cc:99:b4:00:
                    64:4c:88:bf:1b:3d:ae:52:b2:ae:5f:0a:de:b1:70:
                    5e:7c:1a:e9:a1:a2:d8:28:67:45:2c:88:5d:87:f0:
                    6a:51:ec:7d:81:82:4a:4a:65:60:a5:e4:ed:51:22:
                    1d:64:07:9c:73:78:bc:fb:3c:1a:de:14:5d:56:d5:
                    4c:6c:b8:30:41:00:10:15:21:67:9b:20:83:2b:53:
                    a5:8c:cc:89:93:5e:4a:18:f7:b1:03:06:83:66:d4:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:E9:73:E8:DD:04:6A:62:F5:49:0A:0C:4B:75:81:71:A6:06:CE:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.232.0/22
                  168.197.64.0/22
                  186.226.48.0/21
                IPv6:
                  2804:9a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262979

    Signature Algorithm: sha256WithRSAEncryption
         91:26:b9:c9:59:70:9d:32:e7:e3:bb:fd:94:c4:73:43:12:71:
         b2:ff:39:4f:03:e0:66:24:91:65:a8:d7:7b:a9:fa:aa:f5:6f:
         be:df:89:be:21:62:79:08:0b:80:72:0e:6b:54:88:6c:0d:dd:
         b7:5c:86:23:25:34:17:a6:ee:e3:d7:98:0f:41:cb:0b:73:cb:
         78:34:32:37:af:f6:5c:1c:c4:3a:b5:a1:45:25:37:fc:ec:cc:
         88:fe:62:75:f5:cb:16:70:55:53:59:92:aa:3e:07:3e:b6:0a:
         21:7b:80:8c:1d:0a:c4:86:23:2f:99:ae:43:b2:b7:6a:c0:09:
         45:a7:92:43:70:70:15:17:1b:49:bc:5a:a1:b8:bc:73:d7:d3:
         bf:f9:85:88:82:43:4f:dc:70:38:3c:b4:0c:95:b3:7b:91:11:
         d1:6b:9c:ba:da:1d:6b:b7:db:a0:b3:88:8e:f0:24:02:2f:b8:
         6d:ea:53:66:fd:4c:77:0e:cf:0c:20:3c:61:9c:c2:f2:f9:19:
         9d:25:90:2b:be:4f:4a:f6:c6:56:ae:1c:a9:06:6c:c8:86:dc:
         73:d1:bf:60:ed:d9:a5:5d:37:9d:61:7b:b5:75:98:68:d4:d8:
         13:d7:3d:e9:63:46:4f:4e:7a:3e:c2:7d:ca:7f:67:bc:85:8f:
         b4:43:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org