Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
File:                     E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer (raw, json)
Hash identifier:          7AjxOfQaDrwZbnY0CwZXeJ4pNO8EySpla4F5ozWJIaQ=
Subject key identifier:   E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C5281342962102A8E24BA87440BF6B854104A3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 22:13:31 +0000
Certificate not after:    Wed 29 May 2024 22:18:31 +0000
Subordinate resources:    AS: 262866
                          IP: 177.12.240.0/20
                          IP: 2804:5eb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:52:81:34:29:62:10:2a:8e:24:ba:87:44:0b:f6:b8:54:10:4a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 22:13:31 2023 GMT
            Not After : May 29 22:18:31 2024 GMT
        Subject: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:48:12:c8:b3:c1:c2:56:bb:b8:2d:93:f3:
                    30:8e:cf:39:5d:e4:88:a4:37:01:8f:14:1b:16:fd:
                    f3:56:40:99:bf:9d:04:7a:3b:a2:02:90:a4:90:e2:
                    62:d8:09:25:4c:f7:5d:e3:ef:0a:4f:7e:42:8a:2e:
                    06:2d:57:d5:bc:cd:2e:13:cc:18:4f:a5:71:14:c6:
                    0b:44:b4:91:51:cd:4d:b3:a5:14:bd:b3:84:72:46:
                    e5:9e:df:63:bc:79:af:da:7e:8a:02:1e:d3:a7:5e:
                    c3:e0:f9:53:6d:3d:a8:5f:ab:0a:6d:89:e0:f1:7f:
                    0d:21:fa:1d:d5:79:37:dd:8a:94:f5:c0:0b:08:8c:
                    76:c5:1b:00:81:fa:0f:b7:c1:79:62:90:57:16:3f:
                    fc:ea:09:d0:5a:e7:61:a7:d2:8e:56:4b:e7:90:7d:
                    07:1f:f7:d8:61:3a:0e:10:19:67:d8:b6:4f:5d:c5:
                    dd:4e:f6:74:e1:03:98:06:f0:1f:71:91:cf:7e:5a:
                    ac:e7:4b:f9:30:86:e6:dd:7f:3e:fa:f4:5e:88:09:
                    e4:c4:6b:fa:71:8f:26:3f:ae:e9:6a:04:24:df:c0:
                    ee:23:9e:0a:fd:7c:6c:01:f1:02:ea:4c:df:a3:b1:
                    17:6f:a0:5a:4c:7c:64:10:05:5a:33:20:dc:a3:85:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/20
                IPv6:
                  2804:5eb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262866

    Signature Algorithm: sha256WithRSAEncryption
         9f:83:f5:14:d6:f7:78:d3:17:cf:aa:fe:e7:2c:99:11:ec:35:
         8d:68:15:91:6b:f9:4a:56:93:ee:e6:36:de:f0:04:f2:68:0a:
         88:a6:96:cc:46:c6:65:1c:e1:80:62:65:ee:5e:2c:5a:76:a7:
         6a:75:0d:96:ed:a2:43:ac:1a:68:11:a9:59:dd:f6:c0:01:a8:
         e7:b2:56:a6:27:53:cb:e5:06:66:1b:46:36:fc:3c:97:2e:d8:
         0d:e3:86:ce:96:2c:b5:12:c7:7b:e9:05:7f:7b:e4:ae:4e:0c:
         50:bf:19:d2:1e:93:62:b4:01:32:85:b3:b1:38:b6:34:b9:13:
         45:fa:d1:7b:d4:be:40:3f:87:3f:5e:84:12:ea:6f:20:5c:dc:
         e5:c2:6d:a4:7b:a4:f8:77:b1:51:42:2e:7d:04:e5:ea:a4:1d:
         08:51:6e:e7:36:b3:f7:f9:73:d9:b8:bb:1a:ae:06:8d:3d:45:
         4b:50:f8:de:6c:5e:04:80:87:2b:d6:97:4e:be:27:09:b2:de:
         0a:50:d9:dd:6c:4c:a4:34:38:7c:b6:e6:c4:34:38:55:0e:a0:
         24:44:ee:fa:4f:56:91:5f:1e:43:37:9e:35:73:58:8d:1b:2f:
         26:5e:c4:0e:3f:7d:b3:50:02:d9:26:a7:db:e7:24:70:08:a3:
         78:ff:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org