Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
File:                     E2A45668FE3BB932268BC99FB671531A9047D610.cer (raw, json)
Hash identifier:          SMynZbepf7QN1Q/dmsq2yODf4L2Hhy42nm3WQm1k9Go=
Subject key identifier:   E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66C4BB42AA498A4392502A630B28DC57694223BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Oct 2021 21:25:51 +0000
Certificate not after:    Wed 12 Oct 2022 21:30:51 +0000
Subordinate resources:    AS: 262393
                          IP: 131.72.244.0/22
                          IP: 138.121.248.0/22
                          IP: 177.129.80.0/21
                          IP: 177.190.240.0/22
                          IP: 2804:8c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c4:bb:42:aa:49:8a:43:92:50:2a:63:0b:28:dc:57:69:42:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 21:25:51 2021 GMT
            Not After : Oct 12 21:30:51 2022 GMT
        Subject: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:95:e8:41:e2:6c:d6:6e:c6:37:90:c4:a9:
                    74:6c:99:e5:2b:eb:55:79:73:fd:3e:c2:69:b6:5c:
                    30:d4:98:94:65:60:f4:73:80:29:99:31:70:ae:97:
                    16:85:b0:1e:d1:8f:1c:aa:bf:d2:46:b0:a3:f9:54:
                    a7:50:cb:7b:d1:b2:c1:09:b3:48:d6:f6:16:2a:0d:
                    ed:e5:bb:02:d6:23:76:6d:c3:47:2f:2e:87:77:c5:
                    1d:04:ad:94:d7:f6:bc:b5:a3:e1:9c:d8:4f:09:f8:
                    39:3b:f2:10:8a:8b:9c:9a:d1:ff:44:0e:09:56:5a:
                    41:a9:68:33:a2:3e:27:a4:34:da:af:36:90:a3:c9:
                    a6:28:ac:88:0e:b8:7e:8f:fb:ae:80:ca:28:58:ab:
                    b0:26:bd:81:6f:5c:d9:f6:3e:35:1e:99:65:87:4b:
                    b0:63:e9:08:75:7a:2b:b5:f4:8d:f3:e6:b1:e4:b1:
                    bb:86:7d:6a:f8:0d:42:77:43:4b:bd:21:d1:f1:37:
                    58:8e:ff:e0:47:7d:bb:27:70:92:7d:16:5c:4c:47:
                    66:1e:67:00:d6:10:ed:70:7a:9b:4e:a0:ac:be:ce:
                    81:1d:1b:24:87:16:fe:24:2d:c4:3e:68:0e:e5:f9:
                    42:37:7e:b8:2a:44:78:3d:bc:51:f7:2f:c9:b6:1f:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.244.0/22
                  138.121.248.0/22
                  177.129.80.0/21
                  177.190.240.0/22
                IPv6:
                  2804:8c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262393

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:e4:16:ce:9e:a2:05:03:31:1b:f3:ac:89:69:f2:f6:65:
         11:cf:be:ff:73:2b:e0:83:20:08:b8:d2:20:a1:54:e7:b1:89:
         23:f1:4d:5b:bd:c0:59:71:44:83:c6:d7:bf:8c:d0:b2:fb:f5:
         eb:23:6c:08:ae:ba:c2:f3:77:02:0b:e6:08:bf:97:2d:ac:9e:
         f9:f5:ee:b4:6d:03:98:30:2f:c8:4b:43:19:2b:44:57:76:56:
         0c:6f:45:69:e8:66:df:e9:e0:bf:e9:b7:9d:6c:e9:ed:69:85:
         8f:57:c8:3f:b1:d3:96:ac:a2:be:61:c2:07:0e:26:68:bf:eb:
         ae:ac:4e:98:31:61:fc:66:54:3c:01:0a:04:a9:71:27:20:23:
         1c:bb:ed:26:35:1b:af:ab:bb:db:f8:31:5f:d0:20:f3:ea:db:
         63:01:c9:a6:f3:f3:58:1f:9c:5e:4a:f0:3a:41:d1:3c:85:6e:
         18:be:6f:6a:ab:1d:b6:97:2c:da:b9:31:6c:7f:66:6d:20:43:
         0b:21:05:90:6f:0e:74:1d:8b:ba:16:66:f2:a5:f9:58:44:3e:
         83:71:07:e8:81:3a:80:11:73:52:e7:2c:bc:26:f9:63:aa:9f:
         52:39:ca:0f:6c:68:aa:36:e8:5d:43:b8:f0:f2:e7:7c:ce:1e:
         0f:ce:50:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org