Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.cer
File:                     E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.cer (raw, json)
Hash identifier:          CntRToGHaJgUPYYRH8LSoVXHUMxFq0VdD2Xk4c5qR7E=
Subject key identifier:   E1:8B:3E:88:FE:B8:43:1A:1C:13:0B:D5:E2:B9:01:2A:3C:41:14:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1393C84063426A7B0FEE4218CF3FD347EFA3BBF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 19:21:41 +0000
Certificate not after:    Fri 28 Feb 2025 19:26:41 +0000
Subordinate resources:    AS: 27715
                          AS: 53244
                          IP: 177.11.80.0/22
                          IP: 177.153.0.0/16
                          IP: 179.188.0.0/16
                          IP: 186.202.0.0/16
                          IP: 187.45.192.0/18
                          IP: 189.126.96.0/19
                          IP: 191.252.0.0/16
                          IP: 200.234.192.0/19
                          IP: 201.76.32.0/19
                          IP: 2804:218::/32
                          IP: 2804:350::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:93:c8:40:63:42:6a:7b:0f:ee:42:18:cf:3f:d3:47:ef:a3:bb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 19:21:41 2024 GMT
            Not After : Feb 28 19:26:41 2025 GMT
        Subject: CN=E18B3E88FEB8431A1C130BD5E2B9012A3C41145E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:e2:b3:98:1f:d7:ed:cf:36:b6:a8:98:13:
                    d4:58:9b:0e:4c:7a:29:cb:49:96:78:ac:da:18:e5:
                    fa:89:d8:8f:33:a4:f0:8a:3c:6b:6d:0a:57:a1:80:
                    72:01:98:6d:99:84:09:fc:ce:07:cb:1a:b7:5c:65:
                    57:2b:74:b2:dd:c2:e9:d3:d5:c1:b4:f4:ab:48:a0:
                    88:cd:fc:59:64:61:47:f9:fb:5a:a6:a4:76:f5:9d:
                    16:59:26:3d:78:6e:0c:74:e8:86:1d:ca:b2:6b:cc:
                    5e:7a:39:49:81:c6:f9:78:a8:31:0a:70:50:41:19:
                    a5:ad:88:f5:da:7e:1e:37:6b:2e:79:3e:87:98:cc:
                    c8:4a:7e:f3:60:0c:cb:c6:41:ac:49:59:1b:b1:c3:
                    3d:d9:ba:4e:79:41:89:20:93:8d:62:0c:6d:f2:7c:
                    24:52:fd:8a:82:0f:88:02:d4:2a:bb:73:b9:2d:05:
                    c2:92:8b:f4:db:d8:91:98:08:74:f9:4f:1d:41:68:
                    b9:be:81:d4:06:02:71:75:73:de:d6:c9:e4:49:55:
                    cd:93:a1:40:89:87:ce:10:5c:0f:c7:4a:70:2d:18:
                    9a:bd:fa:e8:e5:26:87:2a:ad:73:12:77:5a:08:40:
                    e7:46:f6:62:12:26:99:7c:43:f2:f7:96:d8:d6:dd:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:8B:3E:88:FE:B8:43:1A:1C:13:0B:D5:E2:B9:01:2A:3C:41:14:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.80.0/22
                  177.153.0.0/16
                  179.188.0.0/16
                  186.202.0.0/16
                  187.45.192.0/18
                  189.126.96.0/19
                  191.252.0.0/16
                  200.234.192.0/19
                  201.76.32.0/19
                IPv6:
                  2804:218::/32
                  2804:350::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27715
                  53244

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:c4:be:a3:26:1f:73:24:bb:e1:bd:c9:1d:7e:71:90:f7:
         fb:a4:47:a3:1d:5f:09:d2:8f:87:88:cd:45:27:98:95:1e:19:
         4c:0b:22:94:60:3d:38:6a:4b:69:f1:0d:b9:46:be:48:be:24:
         50:b1:67:5f:ee:20:11:0d:f2:b4:03:86:84:18:e9:f2:ca:ee:
         98:06:1d:a1:21:69:f1:33:fb:58:d1:eb:bb:02:09:cd:40:77:
         14:05:a3:e9:bf:49:9c:e4:f0:29:8f:24:62:1a:d5:49:ea:b6:
         52:76:94:bf:5a:f5:fa:73:1d:31:c3:70:16:dc:d6:9e:14:99:
         a2:c1:93:16:db:a5:a4:9d:be:c4:75:e2:c2:a7:0b:8d:a7:8a:
         ad:8c:f5:b1:e5:31:20:98:3c:28:9a:dd:e6:93:ba:52:d4:15:
         91:c6:48:e1:59:14:83:4e:97:a1:58:5e:f8:da:55:d6:71:53:
         b2:5f:a5:dc:e4:81:e7:98:a9:bd:17:dd:4a:f7:4a:aa:9b:70:
         59:c2:55:c5:86:10:8a:e1:61:86:d7:f7:0e:71:29:d9:65:be:
         98:c1:10:d9:24:56:4c:ee:a4:5f:61:80:78:2f:58:23:f8:31:
         01:66:bc:93:d9:d1:cb:79:f9:1a:7a:42:b6:6e:3d:55:39:3d:
         c6:dc:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org