Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E13603AFC1D8790DA6B473EF931EE5BBAC512037.cer
File:                     E13603AFC1D8790DA6B473EF931EE5BBAC512037.cer (raw, json)
Hash identifier:          1OuEqeupM7Uy01z58s0vLiwE98DShomVl1fToboObrQ=
Subject key identifier:   E1:36:03:AF:C1:D8:79:0D:A6:B4:73:EF:93:1E:E5:BB:AC:51:20:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A0CD0D5201B5C271A0CED420EE20E3F16712836
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/E13603AFC1D8790DA6B473EF931EE5BBAC512037.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 10:49:58 +0000
Certificate not after:    Wed 12 Feb 2025 10:54:58 +0000
Subordinate resources:    AS: 265461
                          IP: 168.196.152.0/22
                          IP: 2804:347c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0c:d0:d5:20:1b:5c:27:1a:0c:ed:42:0e:e2:0e:3f:16:71:28:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 10:49:58 2024 GMT
            Not After : Feb 12 10:54:58 2025 GMT
        Subject: CN=E13603AFC1D8790DA6B473EF931EE5BBAC512037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:88:23:f5:85:9e:47:73:9c:6d:c6:59:68:
                    fc:90:f8:45:c4:fd:b8:c1:92:05:71:fc:0c:c4:aa:
                    64:f2:99:9e:04:7f:1f:91:5c:5e:b3:a7:d5:0f:2b:
                    0d:db:ca:57:94:b4:87:eb:9d:d0:36:9d:86:e5:eb:
                    91:ff:a8:68:85:8d:eb:6f:f9:03:96:0c:f9:08:17:
                    b3:84:22:44:50:6b:dc:10:00:70:71:2e:43:dd:6f:
                    d0:9b:94:b7:fd:f2:c1:54:42:0a:68:c7:d1:0e:db:
                    5f:59:1b:73:c6:ce:8f:5e:9b:0f:c3:dd:f4:80:cf:
                    f5:07:07:e7:f2:18:c9:6c:6e:97:b4:d6:62:c1:51:
                    09:71:c0:cb:94:17:09:f9:01:80:ab:08:20:e7:8a:
                    68:a4:d9:52:ab:75:23:ae:ac:4b:9e:8f:e5:0f:46:
                    27:c0:06:01:b3:3e:af:d9:b9:31:2a:57:f2:e8:02:
                    5d:01:c4:60:56:37:13:52:9c:8a:eb:93:b1:f0:a1:
                    6b:b4:48:88:3f:42:a9:b9:c4:52:47:02:92:a0:7a:
                    93:6a:c1:1a:cf:ba:30:5c:e5:29:1c:d4:9e:19:70:
                    eb:f5:eb:50:b1:47:f2:4c:8b:43:54:d8:31:d1:25:
                    12:c9:e9:86:92:9c:24:6d:fd:af:22:40:c1:d5:71:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:36:03:AF:C1:D8:79:0D:A6:B4:73:EF:93:1E:E5:BB:AC:51:20:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/E13603AFC1D8790DA6B473EF931EE5BBAC512037.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.152.0/22
                IPv6:
                  2804:347c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265461

    Signature Algorithm: sha256WithRSAEncryption
         14:87:c5:61:3b:5b:79:a3:c6:85:df:b0:c6:85:4b:48:c7:05:
         06:62:55:40:f1:d3:a3:9d:65:9b:e0:94:61:f5:9b:b6:72:e2:
         1d:bc:57:78:37:2b:29:22:e4:84:45:38:51:16:90:47:d0:06:
         db:44:55:6f:56:9c:44:02:82:bc:ab:24:5b:c6:9e:27:fb:8b:
         64:6c:58:7a:c7:0a:cf:28:39:3c:55:d7:36:89:e3:9f:e0:79:
         04:48:7c:20:95:40:45:a9:cc:00:5b:2c:78:97:aa:1d:cf:db:
         d7:9e:cf:c0:3c:ca:17:a9:2b:86:f8:09:a3:46:a5:03:80:34:
         51:c0:7e:fd:bd:b7:01:c4:7f:13:cd:b1:ec:5f:80:50:8b:e2:
         62:95:f2:44:68:d9:b0:ac:7c:a0:c6:1d:91:2d:5d:a6:7d:05:
         23:c4:3d:40:3e:32:95:d7:9a:54:fe:63:e1:57:74:e2:02:d7:
         b0:b4:29:ab:bb:09:b6:d1:58:78:7e:9c:39:ac:28:6f:f0:e1:
         c4:08:e5:00:1a:09:f2:1b:8f:f3:00:bc:08:ab:79:8f:58:39:
         6e:20:e4:24:da:d1:42:99:a8:04:95:44:33:ec:4d:10:6e:fd:
         76:c5:dd:6f:a4:eb:82:ce:f6:b5:01:cb:4d:08:b0:f5:ff:3a:
         d8:2f:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org