Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2546B758898CEC54565D23F73568DB7FAAA43FB.cer
File:                     E2546B758898CEC54565D23F73568DB7FAAA43FB.cer (raw, json)
Hash identifier:          +M8cVS+sHuJcE/jSbXyUiHRQELmoFFUB/CE51avy2n8=
Subject key identifier:   E2:54:6B:75:88:98:CE:C5:45:65:D2:3F:73:56:8D:B7:FA:AA:43:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07D02DC5328AC8F26B7B2CB4FE73D5C93962625F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/E2546B758898CEC54565D23F73568DB7FAAA43FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 18:47:40 +0000
Certificate not after:    Thu 25 Jul 2024 18:52:40 +0000
Subordinate resources:    AS: 270547
                          IP: 190.111.180.0/22
                          IP: 2804:6da8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d0:2d:c5:32:8a:c8:f2:6b:7b:2c:b4:fe:73:d5:c9:39:62:62:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 18:47:40 2023 GMT
            Not After : Jul 25 18:52:40 2024 GMT
        Subject: CN=E2546B758898CEC54565D23F73568DB7FAAA43FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:f9:e5:8e:c9:cc:0b:29:58:d7:e4:7f:3c:
                    88:01:e2:70:15:d0:9b:5d:d6:dc:aa:ba:ce:18:e9:
                    18:96:c6:78:d8:31:34:96:19:3e:b3:73:3f:21:03:
                    29:51:03:a1:76:fb:de:c5:14:50:48:31:fe:46:2e:
                    5e:e7:7a:78:b1:05:33:8c:98:eb:09:23:60:d1:4d:
                    3b:43:e8:09:bd:cf:71:e1:74:c9:59:a5:61:b9:82:
                    a8:1b:23:8f:66:11:e9:10:65:13:d6:cb:bf:69:e3:
                    6f:7d:ee:e3:60:7d:cb:72:6d:5f:b2:59:4c:bb:f9:
                    ff:a1:00:ec:39:86:a1:0b:bb:6d:49:83:c5:b1:b3:
                    a8:13:97:3c:7b:23:27:2f:9e:35:ec:f0:b5:e7:38:
                    78:15:ab:05:21:da:e6:b2:3c:36:19:56:3f:ac:99:
                    7c:d5:a2:cb:b9:5a:86:94:90:56:42:cd:f2:67:82:
                    b9:f2:3d:a5:cc:8c:c0:62:ec:6b:50:4f:00:a7:ae:
                    af:c7:df:27:8d:c5:0a:19:94:59:d7:56:4a:49:f9:
                    32:3d:4c:ba:57:86:04:89:41:c1:d0:6f:2d:50:44:
                    b4:d6:b4:d4:42:40:f6:0e:3c:77:a1:22:09:30:5a:
                    fd:18:e0:52:6a:ef:18:39:68:43:47:2e:f7:bf:80:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:54:6B:75:88:98:CE:C5:45:65:D2:3F:73:56:8D:B7:FA:AA:43:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9oPUAwyVgXskMLcGJ2B5ZwLvycqCJhzEdttuUJb71sc3/0/E2546B758898CEC54565D23F73568DB7FAAA43FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.180.0/22
                IPv6:
                  2804:6da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270547

    Signature Algorithm: sha256WithRSAEncryption
         a6:84:4d:aa:65:2f:bf:f2:55:03:32:35:db:59:f5:d9:6a:6d:
         08:8c:d8:87:13:ad:56:05:df:12:fc:f6:68:89:e5:c2:91:6f:
         e6:f8:6e:41:3a:6b:a3:bb:10:53:e3:6c:30:b6:0a:37:24:43:
         0e:c0:27:d1:d9:72:1f:fc:af:11:de:39:89:fe:83:58:8a:06:
         a7:66:76:c7:06:6d:f5:8f:41:27:71:a4:cf:92:e4:6e:0a:a3:
         0d:92:0e:f9:79:5d:e4:27:9d:db:ef:26:ef:2f:12:8b:61:93:
         70:ed:e3:46:6a:1b:4c:18:08:7e:a0:ad:5a:ce:af:c9:05:6a:
         79:36:5c:3e:67:28:94:06:77:7e:b8:0b:f8:73:3e:7e:c1:5a:
         26:38:e8:14:22:73:bd:34:e0:e8:a1:5a:3c:06:61:a8:1f:bc:
         d1:b0:3f:7f:b5:07:6d:38:7b:96:21:b7:d3:b3:05:1f:6a:1c:
         d9:3d:45:d4:01:81:5d:db:03:60:c4:74:08:eb:0a:8b:ef:fa:
         e1:bc:2d:5c:74:02:6b:48:91:a6:85:9f:43:1b:48:4a:35:73:
         21:73:45:71:3a:be:49:8c:45:fa:0f:fc:7f:82:49:43:a8:36:
         66:8b:16:d9:3a:70:38:d2:68:07:45:ed:30:4d:df:b5:dc:92:
         6d:b0:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org