Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer
File:                     E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer (raw, json)
Hash identifier:          NOCwlWjECJpUHwBltNbdSHk2DAxu9C/5eAHGuCwPj68=
Subject key identifier:   E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       557A48239FBCE99B9AF64AC7DB09006904DBFF79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Nov 2022 16:22:42 +0000
Certificate not after:    Mon 20 Nov 2023 16:27:42 +0000
Subordinate resources:    AS: 265401
                          IP: 168.194.224.0/22
                          IP: 2804:3384::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7a:48:23:9f:bc:e9:9b:9a:f6:4a:c7:db:09:00:69:04:db:ff:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 16:22:42 2022 GMT
            Not After : Nov 20 16:27:42 2023 GMT
        Subject: CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ac:fd:b0:ba:e0:81:4a:e4:5b:9d:3a:fe:69:
                    f2:c3:1f:d9:44:99:e4:4a:a7:7f:bf:bd:00:e0:59:
                    8c:ab:e4:3a:f9:84:db:a0:02:3a:06:15:a8:2b:6d:
                    42:f7:8a:1b:a6:48:13:f6:0f:31:62:f6:75:c8:8c:
                    68:4b:ab:78:3b:9f:1d:65:ed:e6:c5:ce:cd:25:52:
                    8d:03:81:0a:91:db:ba:72:c8:17:18:f0:48:fc:ec:
                    91:94:93:ad:4e:3f:4e:62:83:4f:a7:c4:4f:c0:8a:
                    ae:55:dc:57:9e:a2:95:9b:79:ca:14:26:eb:1f:5a:
                    25:ce:47:44:1e:9e:dc:b5:f5:fa:13:ac:dc:8c:40:
                    50:c3:b4:e3:06:0e:21:d7:31:67:b7:b1:2a:a3:38:
                    ed:61:84:91:c8:90:5c:80:0b:fd:6b:5f:c2:37:de:
                    3d:20:b3:e9:bf:0e:3f:b8:95:73:85:e9:05:a7:9b:
                    de:31:0d:e0:a2:0f:20:7f:8d:3a:31:5c:81:fd:c8:
                    31:6d:4f:15:50:08:5b:ec:04:53:c9:d7:9e:ca:89:
                    7c:25:de:4e:9f:d3:f4:42:d2:86:6f:03:f9:d7:d9:
                    42:ab:e8:42:94:f6:1d:83:2e:dc:0b:22:4e:f7:44:
                    a1:b2:f8:3a:02:71:03:3d:16:57:41:ef:cf:1e:36:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.224.0/22
                IPv6:
                  2804:3384::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265401

    Signature Algorithm: sha256WithRSAEncryption
         60:f1:dd:03:3c:13:fe:d3:30:6e:9f:46:cc:1a:91:c3:fe:da:
         d4:11:db:0a:79:81:08:18:e6:90:c6:29:97:cd:1a:e5:04:81:
         0d:86:c8:bd:c6:9f:35:b6:03:c3:2d:d5:c0:cb:97:52:9b:de:
         1e:89:a9:04:28:e3:85:65:d8:1d:fa:f1:df:b9:45:2a:29:33:
         61:88:4b:30:0f:2d:7e:f8:bc:8f:08:69:ef:d6:58:e7:bf:25:
         58:60:9f:b1:fa:50:76:5c:58:1a:75:0f:7c:23:6f:5c:5e:e5:
         4b:c4:3c:44:78:3a:c8:ea:16:df:6e:12:1f:fc:bc:bb:c5:fe:
         53:a5:90:a5:58:27:20:5b:90:ac:eb:95:40:45:14:2b:6d:38:
         ee:4a:01:fd:eb:04:9f:dd:40:35:6b:26:29:44:1d:08:24:6a:
         d5:c2:89:f0:70:78:2d:67:7e:65:da:7b:b6:5c:12:90:24:9e:
         94:2d:a9:df:f3:13:35:c1:22:7f:aa:42:6f:10:e9:01:51:c0:
         d5:90:31:45:40:27:08:ad:f5:62:94:dc:b7:b4:65:9e:f2:92:
         7c:76:3a:5e:2f:65:de:0b:2c:7e:37:f6:f9:53:06:cd:53:2e:
         43:7c:fb:bc:72:07:ed:17:6f:40:f8:60:9d:54:f3:57:69:e2:
         c9:88:20:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org