Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E0FA40C9CDFDACDD45349DCD5D0E415422D2B220.cer
File:                     E0FA40C9CDFDACDD45349DCD5D0E415422D2B220.cer (raw, json)
Hash identifier:          EqaKFbE3IjInQGarSXgWfzlyL0hj3tLKEzIgQeqA9fE=
Subject key identifier:   E0:FA:40:C9:CD:FD:AC:DD:45:34:9D:CD:5D:0E:41:54:22:D2:B2:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       24E3952E719B07F097454256A41C8190861D65D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/E0FA40C9CDFDACDD45349DCD5D0E415422D2B220.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 02:25:11 +0000
Certificate not after:    Thu 25 Apr 2024 02:30:11 +0000
Subordinate resources:    AS: 263164
                          IP: 191.6.164.0/22
                          IP: 2804:17ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e3:95:2e:71:9b:07:f0:97:45:42:56:a4:1c:81:90:86:1d:65:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 27 02:25:11 2023 GMT
            Not After : Apr 25 02:30:11 2024 GMT
        Subject: CN=E0FA40C9CDFDACDD45349DCD5D0E415422D2B220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:62:f1:0b:de:76:d4:9b:1b:aa:9f:8f:37:
                    1d:5e:96:d1:b7:3b:96:ef:e3:21:2b:dd:21:d1:da:
                    56:6e:2b:6e:f5:a9:ec:30:d0:56:76:30:7b:46:48:
                    d8:36:07:01:e7:60:c2:ce:54:0b:57:e0:81:66:62:
                    f2:7f:8d:28:86:46:29:2d:58:ca:7c:25:db:d5:22:
                    a1:44:26:58:7f:ea:69:95:6d:55:e4:7b:92:8f:eb:
                    04:0e:ca:03:4f:4a:34:48:81:cd:a6:b7:4b:3e:eb:
                    81:5c:74:a1:2d:a7:4b:70:8b:30:7d:82:3e:44:19:
                    e8:85:99:69:e6:46:b6:10:b1:a2:5a:96:38:67:22:
                    da:50:0a:11:9e:36:97:69:b1:2b:e6:61:3e:9a:d3:
                    6c:d4:d9:c4:6d:0e:40:ec:3f:83:26:3c:20:f7:29:
                    7f:97:d3:b1:f5:a5:ff:cb:aa:6e:fb:c8:3b:be:64:
                    d3:f3:26:f8:e7:9c:e9:76:8f:1e:f8:c0:80:4d:bc:
                    a5:db:bc:3c:41:d9:38:30:15:43:55:fe:b1:4d:3f:
                    1f:e3:7b:6c:76:f8:ad:79:15:c9:8e:92:fd:f9:03:
                    f3:72:7d:bf:f7:f2:92:36:53:28:c2:a5:05:9c:b7:
                    cc:63:85:c6:71:d8:35:5d:5c:12:6d:46:69:25:33:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:FA:40:C9:CD:FD:AC:DD:45:34:9D:CD:5D:0E:41:54:22:D2:B2:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/0/E0FA40C9CDFDACDD45349DCD5D0E415422D2B220.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/22
                IPv6:
                  2804:17ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263164

    Signature Algorithm: sha256WithRSAEncryption
         26:b0:90:21:ce:75:cf:56:20:98:de:16:6c:ee:6d:b4:47:6e:
         56:a3:63:e4:5e:4e:3d:be:1f:66:2e:64:07:50:63:4b:33:19:
         8f:5e:94:d7:60:8d:55:d3:89:18:8a:ba:2e:68:a3:59:c0:a2:
         c9:9b:8e:44:54:78:32:84:e7:26:b4:9d:7b:8b:98:e6:39:9c:
         38:08:6e:23:3f:20:0b:6c:6a:36:18:91:e3:a6:88:9b:dc:3c:
         c6:db:41:24:6b:e1:38:30:bc:fd:fb:92:63:50:bf:74:f2:f2:
         f8:b9:ad:10:a1:e9:e0:31:d8:a5:e6:3f:30:41:52:76:70:7d:
         b6:bf:e2:47:5c:40:8d:5b:d3:cb:05:92:ee:f1:dd:73:45:25:
         aa:a6:f8:96:76:b6:d2:5c:f2:fe:cb:2c:65:9d:fb:5d:f5:de:
         cb:d6:e5:1b:b0:81:aa:3a:68:81:6c:4f:1b:fc:c5:7f:a4:92:
         c0:63:a5:39:13:32:e6:7e:5b:8a:62:5e:da:85:9a:77:04:ce:
         ed:57:61:5e:e1:3c:bb:c9:78:a4:db:c2:7f:ef:40:f8:fe:60:
         c1:70:8c:ac:ca:1d:71:00:d0:0a:18:10:9e:67:a6:86:a8:af:
         8b:a7:fa:44:e7:73:5f:bc:d4:a9:4f:1a:6f:d8:ea:7b:4f:e7:
         68:d1:2d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org