Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.cer
File:                     E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.cer (raw, json)
Hash identifier:          Fjxep+ION5NvjBd+WcetNnrrY/+aiQi67OXbpaG+uzM=
Subject key identifier:   E2:3D:CD:E6:C1:D8:FF:F1:C5:AB:1C:6F:4B:2D:E3:07:83:FE:55:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6137559F7447F9D1D03E440B5BF3D5B62987C2D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Oct 2023 20:47:01 +0000
Certificate not after:    Wed 16 Oct 2024 20:52:01 +0000
Subordinate resources:    AS: 267008
                          IP: 45.227.20.0/22
                          IP: 2804:46bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:55:9f:74:47:f9:d1:d0:3e:44:0b:5b:f3:d5:b6:29:87:c2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 20:47:01 2023 GMT
            Not After : Oct 16 20:52:01 2024 GMT
        Subject: CN=E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:11:c6:fc:f9:77:29:ce:76:fd:1e:5e:e4:
                    29:97:41:87:44:ca:89:4a:14:dc:4c:5e:fa:8f:b7:
                    8f:a9:0a:5c:d9:0f:37:4c:8b:67:c8:70:f8:94:49:
                    91:ee:fd:f7:48:a3:19:d4:20:23:b8:e4:12:e6:9b:
                    55:ef:bf:21:4d:8b:d9:9c:d7:4d:42:d7:17:eb:61:
                    76:e6:66:96:22:80:be:65:0d:6e:11:26:ee:07:85:
                    f8:40:e2:0a:db:c2:c0:fe:07:d5:eb:dd:39:8e:38:
                    f3:64:0f:e4:bb:a5:72:76:fc:19:30:a3:4f:87:87:
                    08:82:ea:e1:47:9a:cd:ed:55:bd:31:95:2b:82:a5:
                    8e:35:ea:5f:7a:8d:61:98:16:c5:57:6f:0f:af:3f:
                    d7:d2:54:e1:9b:a9:72:29:57:8a:f4:99:4f:22:b9:
                    2e:e4:d2:2e:19:b7:97:ab:a4:e7:6f:25:8c:5a:1a:
                    28:3a:b3:58:40:4b:71:8f:05:bf:7f:3a:7a:af:8d:
                    78:ef:e7:01:46:69:aa:51:ff:20:e2:d7:f0:05:82:
                    a3:66:17:ac:8d:01:b8:da:a0:98:cc:fb:e8:6b:5b:
                    ed:81:f7:32:c3:7c:26:df:2f:b7:39:f8:3b:f4:2a:
                    89:8d:1d:3e:ff:07:55:a2:7b:3e:f6:57:8e:6a:74:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:3D:CD:E6:C1:D8:FF:F1:C5:AB:1C:6F:4B:2D:E3:07:83:FE:55:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.20.0/22
                IPv6:
                  2804:46bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267008

    Signature Algorithm: sha256WithRSAEncryption
         1d:95:bf:69:ef:a7:aa:4c:f1:d3:11:52:11:e3:d0:7e:f7:62:
         70:09:3f:64:71:ab:23:23:b6:3c:ab:a2:a7:8b:76:58:85:4a:
         4d:39:14:18:de:86:12:3d:34:e5:27:a8:30:25:1d:f1:f5:c3:
         78:e0:39:1a:6f:e1:ca:dc:5c:00:69:44:5c:c5:4d:9d:d1:fd:
         71:87:51:9e:27:d4:9f:75:b9:3f:dd:38:f1:93:e1:26:0b:65:
         99:71:9a:1a:e5:1f:08:50:de:48:25:a3:85:c3:99:de:05:0b:
         b6:65:16:45:67:4a:ef:44:83:4b:76:f9:05:65:86:7b:bc:57:
         b2:b8:c6:77:a5:7b:ec:d9:b0:ee:8a:04:7d:6b:ba:79:14:70:
         0d:84:55:47:8a:3f:5c:24:f0:9e:eb:62:22:58:16:c4:2b:49:
         f1:30:98:f3:51:bc:08:ff:17:68:48:60:0e:63:71:07:28:61:
         93:7a:c7:e0:73:7d:96:25:51:8e:78:1d:c6:15:94:bf:75:8b:
         53:b8:3f:73:c5:24:49:06:18:20:4d:4c:a0:71:d2:f3:9d:99:
         80:51:32:25:7f:ee:6a:98:12:d6:f8:2f:8a:32:92:7e:e1:25:
         f0:47:f7:25:74:0e:28:cf:8e:74:d2:35:ea:2f:e4:06:ce:b4:
         fa:0f:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org