Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
File:                     E1AA65A5271D31B148602437AC6385FE96B4AC60.cer (raw, json)
Hash identifier:          1qfXScdRi8u7sMN2SMT8pvyrI6/n6rzgutzUt6ty0tg=
Subject key identifier:   E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29967FA3DEBEDFEF61F1E4B9EE7FEBD1B68A8342
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Nov 2021 11:35:51 +0000
Certificate not after:    Fri 18 Nov 2022 11:40:51 +0000
Subordinate resources:    AS: 262481
                          IP: 45.160.88.0/22
                          IP: 45.166.204.0/22
                          IP: 45.237.108.0/22
                          IP: 143.137.72.0/22
                          IP: 161.22.56.0/21
                          IP: 170.245.12.0/22
                          IP: 177.53.240.0/21
                          IP: 191.37.240.0 -- 191.37.251.255
                          IP: 2804:1530::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:96:7f:a3:de:be:df:ef:61:f1:e4:b9:ee:7f:eb:d1:b6:8a:83:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 19 11:35:51 2021 GMT
            Not After : Nov 18 11:40:51 2022 GMT
        Subject: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:b8:b6:b5:de:2f:9f:d6:6d:c9:b7:5b:08:
                    6b:75:48:d9:c6:d0:0a:a4:e4:2f:f8:3b:c2:8e:d4:
                    a9:0e:11:2b:1e:ac:c5:20:de:2b:7a:3f:69:53:90:
                    f1:ea:5b:37:19:fe:37:e5:02:c3:f0:56:44:75:9a:
                    88:64:8f:95:b8:a1:11:99:8b:02:e8:5e:bd:b9:14:
                    34:cc:e0:2f:c7:bd:30:72:0b:2a:1f:50:2a:f8:52:
                    39:2f:32:c0:00:9a:be:d0:99:8a:52:dc:d8:50:db:
                    d6:39:6c:4d:ee:2f:25:d8:49:cf:ee:d3:86:20:70:
                    a8:ba:af:b5:9d:88:0b:b4:b6:71:e6:ed:6f:77:5a:
                    25:31:7d:49:e3:db:cd:4c:d8:53:4a:88:8d:97:bc:
                    fc:46:74:29:56:61:78:ee:14:66:1e:38:16:31:b6:
                    4b:35:f9:ab:bc:bf:37:08:c7:b9:50:4d:b3:a0:58:
                    f0:5c:f9:ab:1d:60:6e:cc:e9:47:01:e7:63:d8:03:
                    74:45:18:3d:ae:5d:f8:ec:ec:66:18:4c:d0:44:52:
                    67:7b:a7:14:c8:29:9d:4c:b0:98:cf:3e:ab:00:63:
                    7f:ee:80:85:26:91:4b:c5:c1:ce:80:e6:aa:2d:0f:
                    db:65:f6:2b:dd:cb:7e:ff:24:5d:e2:0b:c8:f3:f5:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.88.0/22
                  45.166.204.0/22
                  45.237.108.0/22
                  143.137.72.0/22
                  161.22.56.0/21
                  170.245.12.0/22
                  177.53.240.0/21
                  191.37.240.0-191.37.251.255
                IPv6:
                  2804:1530::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262481

    Signature Algorithm: sha256WithRSAEncryption
         0b:2d:a2:15:00:18:a1:11:93:3c:21:6c:d3:2c:e9:88:f9:9e:
         7c:33:52:8b:b6:e0:33:82:13:fa:4c:ba:04:c3:f6:52:29:62:
         9b:47:9b:2b:20:f2:6f:9d:fa:47:d0:08:b8:b6:2a:e5:4d:bf:
         77:2b:0c:a8:46:b7:86:cd:f7:d2:7d:e6:83:f8:2e:fc:c7:43:
         7f:3d:7b:3d:db:8c:a0:97:90:ef:ab:6e:f3:46:e5:b5:f9:1c:
         9d:57:2b:1e:60:aa:00:b4:d8:17:e1:98:af:1d:76:11:68:53:
         04:ab:87:70:5b:35:d8:e2:88:b2:b5:5e:c4:9e:69:61:d6:2a:
         74:99:bc:81:12:2f:cf:c8:08:67:68:f6:19:22:46:79:21:b4:
         26:c6:a2:d8:4c:01:d2:6a:cb:a6:05:08:78:dd:fb:4d:b7:d8:
         14:0d:7d:04:5f:98:84:95:b1:e0:41:ec:df:8b:92:13:aa:51:
         cc:ca:cf:23:fe:15:cc:f1:ea:36:48:94:59:1b:1c:0b:90:7b:
         e9:50:32:bd:06:44:8d:86:1b:f4:60:e2:8a:04:52:b5:94:41:
         ee:c3:45:a5:4f:74:37:24:6f:61:60:88:e5:6e:bb:2c:b2:e4:
         97:55:f3:3a:46:ab:1f:64:76:dc:69:18:18:95:b5:fd:b7:64:
         b1:63:21:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org