Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.cer
File:                     E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.cer (raw, json)
Hash identifier:          w5Ub63JzaBmE6FnOchZLIYh5daDBRN11sA76qq6LNa0=
Subject key identifier:   E2:81:98:F7:4D:3A:8A:80:6D:75:32:D0:F2:AF:2D:7F:43:A0:C9:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E46A5C73D90620D04097A99E61048C291A01B00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 17:49:27 +0000
Certificate not after:    Mon 23 Sep 2024 17:54:27 +0000
Subordinate resources:    AS: 264927
                          IP: 168.228.184.0/22
                          IP: 2804:3008::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:46:a5:c7:3d:90:62:0d:04:09:7a:99:e6:10:48:c2:91:a0:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 17:49:27 2023 GMT
            Not After : Sep 23 17:54:27 2024 GMT
        Subject: CN=E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:c2:e0:1f:f8:ff:b9:e4:22:66:9f:a1:bb:
                    8a:21:88:8d:74:9d:00:10:b2:a7:db:1a:7e:5b:55:
                    b6:68:1e:b1:d5:be:11:08:1f:1e:d9:ca:01:55:b4:
                    b8:02:f7:c5:5b:83:1c:9d:41:cd:62:0b:9c:b1:17:
                    9d:d4:ed:64:c0:86:94:b3:d8:58:45:f4:9d:79:24:
                    c7:fa:28:a3:58:36:ca:d5:fc:11:74:54:6f:81:29:
                    e1:18:7e:7e:fe:0e:f9:c6:32:23:1c:67:3b:0a:d5:
                    ed:1f:b1:88:9f:b7:d1:8e:90:4c:64:02:f2:f6:5e:
                    7f:e7:98:1a:c5:de:41:95:c9:75:7d:48:a9:b6:71:
                    0f:09:09:e3:5a:fd:2c:08:b2:d7:50:45:07:c6:68:
                    ca:39:f6:87:fa:ce:f5:38:5e:09:31:a8:0e:c4:e7:
                    e4:71:47:d5:00:9c:5e:98:40:a9:6b:1a:b0:2a:5b:
                    9f:ff:50:43:09:84:51:03:95:e4:45:5c:bf:b0:9f:
                    a4:ab:6f:f0:6d:06:c9:a5:10:43:5c:cc:ef:71:18:
                    c3:1a:84:f3:9a:b5:4b:99:7b:a7:b7:79:4f:42:a1:
                    35:9d:e3:95:56:ed:9d:a5:39:e8:c9:19:05:81:8e:
                    84:65:49:ad:c0:28:f1:4a:8c:39:fa:b4:eb:9e:92:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:81:98:F7:4D:3A:8A:80:6D:75:32:D0:F2:AF:2D:7F:43:A0:C9:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/E28198F74D3A8A806D7532D0F2AF2D7F43A0C90B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/22
                IPv6:
                  2804:3008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264927

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:b3:51:9c:fc:3b:49:21:ae:42:68:5b:1e:ac:36:bc:2c:
         6a:23:66:ae:f4:45:12:8e:40:b2:22:97:de:5d:be:83:d8:70:
         9c:3f:6f:4c:41:18:08:cb:db:c9:2b:6d:fe:48:a0:e0:0b:9d:
         bd:f9:78:00:db:6b:d0:9d:2d:78:52:81:35:61:5d:59:57:a6:
         ca:76:61:7d:f0:d6:de:d6:cb:ca:53:fd:20:6d:71:4d:fa:1c:
         ef:33:b7:fe:d7:0d:a6:c2:62:ae:fe:89:29:69:bc:87:d9:42:
         ea:26:e0:9b:26:2c:2d:f3:bf:6b:53:88:e8:b0:23:b2:df:41:
         ad:aa:9e:9a:cd:34:92:e5:e3:37:28:1a:5c:90:f5:8e:0e:a9:
         03:80:7d:23:30:fc:e9:4e:b4:19:1a:73:99:b1:e1:72:32:56:
         bf:54:21:41:89:b7:7c:a3:72:65:fe:5a:86:eb:bb:c1:22:91:
         57:e9:b1:dc:df:8e:b8:43:70:97:7b:60:08:90:a8:8e:d7:26:
         ed:a3:e0:30:41:27:6a:43:53:8e:97:bd:09:0f:f2:4b:cf:a6:
         8b:69:99:1f:c0:f5:6a:88:68:f3:28:8b:a1:24:6c:93:0e:ff:
         31:35:39:ca:1b:b7:57:ef:ee:5b:9a:5f:08:e7:5d:65:a6:42:
         91:a9:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org