Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.cer
File:                     E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.cer (raw, json)
Hash identifier:          G6wv7ZSxSALAVFmOh20mL+KIn/qpDoLXq9mqifo5ETg=
Subject key identifier:   E2:AF:FE:2C:9E:5D:D7:9F:39:9B:4D:8B:67:93:9B:CA:AC:EA:61:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46166565029EC6DDAF2D1BF93C033A8B6EE5CB55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 13:14:23 +0000
Certificate not after:    Thu 17 Oct 2024 13:19:23 +0000
Subordinate resources:    AS: 262540
                          IP: 177.72.32.0/21
                          IP: 2804:5c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:16:65:65:02:9e:c6:dd:af:2d:1b:f9:3c:03:3a:8b:6e:e5:cb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 13:14:23 2023 GMT
            Not After : Oct 17 13:19:23 2024 GMT
        Subject: CN=E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:26:75:ef:46:08:e0:c7:60:d7:4c:c7:a2:
                    1f:95:fc:ad:30:ed:02:c1:53:d2:24:42:81:b4:39:
                    b0:5a:6f:55:03:f4:a2:88:32:02:50:5f:c3:0e:49:
                    43:ca:ff:70:4a:a5:d5:a6:56:88:84:6d:2d:87:3e:
                    01:28:d3:2e:8e:29:4a:85:93:0f:bf:23:cd:86:61:
                    74:0d:bb:ea:de:0e:5c:1a:a8:e8:23:ec:be:8c:a6:
                    77:3c:a6:1f:32:70:30:52:36:d3:b5:f2:4c:a0:e1:
                    5a:6f:73:73:dc:0b:8f:60:39:3c:d9:ad:ad:b6:19:
                    1b:27:82:71:a8:2b:78:4b:b9:3d:2c:91:fc:12:79:
                    d6:41:9e:b5:ef:85:b8:de:5c:38:8e:3c:d9:ae:6a:
                    fd:d3:31:c8:ff:d1:92:7b:bc:04:55:d6:4f:24:3c:
                    dc:a5:97:76:2b:b7:a0:41:f7:b1:f6:83:f4:1b:d8:
                    e9:56:7c:49:2c:14:dc:57:95:0e:51:19:9a:71:e8:
                    d0:b0:7c:87:cc:37:a4:f4:57:bf:9e:92:64:29:64:
                    c0:8a:da:d5:ef:27:02:8f:05:01:80:dc:50:50:4b:
                    00:f1:21:29:29:de:19:95:de:82:69:bf:d3:c4:79:
                    73:ea:69:11:7d:5e:cf:7e:09:95:90:28:85:27:80:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:AF:FE:2C:9E:5D:D7:9F:39:9B:4D:8B:67:93:9B:CA:AC:EA:61:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.32.0/21
                IPv6:
                  2804:5c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262540

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:e1:42:66:f3:b4:70:30:09:d8:65:e8:ea:ca:ca:35:8d:
         62:6e:f2:e2:52:9f:2c:1d:6f:27:b6:21:44:fa:5d:35:13:a7:
         ac:16:9d:b7:d1:24:e8:6f:de:7b:87:f1:30:21:0e:71:83:77:
         d8:a8:07:86:3a:b6:7c:41:6b:6c:3c:39:d6:83:b0:16:a8:ec:
         80:ee:06:ac:82:fa:78:ab:60:26:0a:35:0b:e8:39:d6:e7:43:
         01:8a:a1:59:62:64:4e:1e:ad:cf:e0:6b:f4:1d:5d:1e:7a:41:
         fd:6c:9f:38:2a:89:53:6e:78:b6:c7:37:68:50:c4:9f:89:e9:
         42:5b:92:69:c6:15:45:56:be:02:02:d6:8b:d8:eb:cc:12:18:
         49:ac:8c:b4:44:68:9b:9f:97:b4:2e:19:f6:a6:5a:7e:e2:41:
         1f:ef:1f:9f:06:36:bc:b8:67:69:c0:1a:3f:ec:ef:57:5b:86:
         2c:74:82:d7:43:97:25:06:95:4f:08:02:99:f6:49:42:6d:40:
         de:c6:e4:da:e2:fb:18:20:bd:c3:77:55:4f:f0:93:98:da:e4:
         4d:46:06:9d:d2:5d:95:d5:40:43:48:ab:ff:9b:ea:60:cd:16:
         ce:fb:29:1c:f7:a1:09:f1:22:69:55:67:af:24:11:db:c9:00:
         c0:3a:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org