Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.cer
File:                     E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.cer (raw, json)
Hash identifier:          6GQBxv2j4mlWXXAhPGcILw7PELVRfcM6K0RcjoS+/3A=
Subject key identifier:   E2:4F:A9:1D:4B:C0:6D:0A:C6:62:5A:E7:7C:B8:92:27:82:C9:3B:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       381319686C1785AAC0C9B687F05A1CF9169E8A93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 13:17:57 +0000
Certificate not after:    Wed 26 Feb 2025 13:22:57 +0000
Subordinate resources:    AS: 268174
                          IP: 45.170.220.0/22
                          IP: 2804:5930::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:13:19:68:6c:17:85:aa:c0:c9:b6:87:f0:5a:1c:f9:16:9e:8a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 13:17:57 2024 GMT
            Not After : Feb 26 13:22:57 2025 GMT
        Subject: CN=E24FA91D4BC06D0AC6625AE77CB8922782C93BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:27:fd:99:41:8b:f8:43:72:7d:d0:2b:31:
                    b0:a6:ae:0b:09:56:dd:dd:d6:25:7c:91:5e:0b:16:
                    d1:29:63:50:f7:de:1b:99:ab:d8:d2:a3:56:e3:fb:
                    b1:c2:e4:09:d4:65:1e:ab:14:81:4f:60:08:99:51:
                    1b:82:b6:e5:35:90:90:f9:2a:02:17:02:e9:f3:68:
                    6d:69:52:96:97:81:f6:d7:b4:e4:c7:cf:29:42:9e:
                    c2:ee:2b:c9:34:01:a9:61:f9:4b:0d:d9:df:05:96:
                    4f:f6:50:86:56:2c:be:8a:be:dc:77:89:86:43:97:
                    7b:ab:b7:8d:70:57:c3:fa:75:73:ce:52:54:cd:4a:
                    60:16:b5:e2:99:92:28:bc:b6:2b:d3:a4:d4:3a:c8:
                    81:06:e3:da:aa:27:71:4b:53:fe:a7:82:5a:ee:b1:
                    9e:55:0c:60:c0:72:7f:02:df:4f:42:1f:a0:b9:1f:
                    af:c2:d9:74:e9:54:4e:18:6a:20:9d:b4:55:45:f9:
                    0c:2e:1e:10:83:3e:a6:e2:0f:38:f6:f1:64:37:ed:
                    db:60:1a:38:04:9a:c7:9a:36:a7:ae:b4:ff:e2:3f:
                    2f:51:a1:ac:13:41:e4:13:fb:c9:64:d9:83:0a:e4:
                    f1:4f:a8:ce:20:7b:99:e5:27:5d:90:95:fe:b5:5f:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:4F:A9:1D:4B:C0:6D:0A:C6:62:5A:E7:7C:B8:92:27:82:C9:3B:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.220.0/22
                IPv6:
                  2804:5930::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268174

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:6f:c0:9f:25:96:a0:ea:6e:d7:be:be:fb:d6:2e:6e:9b:
         03:2c:f3:96:b1:0d:3f:ae:6e:8c:0f:f5:04:00:d1:dc:22:d2:
         2c:7c:5a:ef:ef:d3:26:ae:dd:17:9c:9b:9c:7e:2c:2b:8b:15:
         2d:af:92:83:6c:fb:7c:e9:c0:3e:6f:0c:11:e5:7c:2d:9a:37:
         5a:fd:ee:ed:e4:65:26:b4:05:ed:23:7d:c9:09:36:d1:89:4a:
         d8:88:88:e7:39:1a:ca:dc:6b:f6:a6:1a:19:43:cf:49:3f:15:
         74:a1:ac:c0:99:f2:15:13:1a:aa:8b:8d:28:8d:ec:2c:f4:35:
         14:45:1f:62:69:bd:01:40:5a:b6:54:e2:b8:d2:ee:ba:5d:d2:
         d2:8d:58:ff:4d:63:e2:31:ed:57:19:07:cd:bd:3f:d8:a0:5f:
         7a:5f:c2:02:22:86:dc:3c:24:32:4b:87:6b:1f:a3:bc:33:62:
         2d:3e:82:27:b7:75:0f:4e:fb:a4:2a:0e:d7:9f:38:95:b6:d1:
         b4:7d:50:77:72:b6:bb:b3:0f:f3:a6:a1:79:16:43:a2:30:b9:
         eb:f6:c1:fd:68:68:90:af:b5:35:d0:51:00:2a:f3:0d:5a:e4:
         75:ca:26:93:a5:f8:91:2e:0c:d2:d4:41:92:0f:07:d3:64:53:
         e7:cb:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org