Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
File:                     E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer (raw, json)
Hash identifier:          eKtzEoyi9pADIkESLg4p6XOAr+QCS9RpkUgyPD1p/Dk=
Subject key identifier:   E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43CBFA59A1912F8F7040875E3F84089C416DE2D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Nov 2023 02:53:03 +0000
Certificate not after:    Tue 26 Nov 2024 02:58:03 +0000
Subordinate resources:    AS: 28658
                          IP: 131.221.208.0/22
                          IP: 170.78.164.0/22
                          IP: 170.244.152.0/22
                          IP: 177.107.224.0/19
                          IP: 186.237.32.0/20
                          IP: 187.33.96.0/20
                          IP: 187.63.0.0/20
                          IP: 187.94.112.0/20
                          IP: 189.1.48.0/20
                          IP: 189.39.240.0/20
                          IP: 189.84.240.0/20
                          IP: 2804:5bc::/32
                          IP: 2804:1e78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cb:fa:59:a1:91:2f:8f:70:40:87:5e:3f:84:08:9c:41:6d:e2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 28 02:53:03 2023 GMT
            Not After : Nov 26 02:58:03 2024 GMT
        Subject: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:48:75:52:9e:30:05:82:ca:c5:fd:18:f1:
                    3b:06:5c:07:48:d6:e2:28:ea:9b:7e:af:54:d9:cf:
                    f2:86:2d:1a:05:91:22:b3:06:1e:b1:a8:dd:1d:0d:
                    64:40:a7:8b:7e:7d:e3:aa:6e:8d:f8:e7:db:89:77:
                    74:95:68:8b:33:73:ee:b9:10:13:f7:20:fe:2a:98:
                    d5:ef:83:97:e3:fc:1d:25:a4:e5:58:41:32:77:64:
                    b0:54:5d:eb:50:56:54:55:bf:c3:16:57:cb:50:b1:
                    62:e0:c5:5e:5c:51:0e:3b:52:b1:60:2c:c3:10:70:
                    4c:21:2c:25:b1:01:af:e0:1c:a4:1f:dd:c5:b3:b0:
                    42:ff:3b:bc:c5:a5:38:a7:31:eb:f9:00:3a:3e:de:
                    c5:11:cc:30:d1:90:02:07:aa:e8:d4:b9:07:dd:af:
                    66:a5:9b:40:b9:0a:19:ad:2f:26:d3:41:c0:12:aa:
                    bb:77:a3:3d:27:ef:4e:d2:f5:9a:7f:20:99:36:09:
                    9d:26:ea:ca:f7:f2:44:80:15:ee:1a:14:e1:f2:67:
                    10:ea:f7:89:a4:20:d2:14:a1:af:07:7f:cc:97:8d:
                    d5:50:7f:b1:83:7c:dd:3e:e5:c0:f0:4a:a5:59:df:
                    d4:fc:4c:ed:e4:e7:b7:78:5d:60:52:d2:6b:35:37:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.208.0/22
                  170.78.164.0/22
                  170.244.152.0/22
                  177.107.224.0/19
                  186.237.32.0/20
                  187.33.96.0/20
                  187.63.0.0/20
                  187.94.112.0/20
                  189.1.48.0/20
                  189.39.240.0/20
                  189.84.240.0/20
                IPv6:
                  2804:5bc::/32
                  2804:1e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28658

    Signature Algorithm: sha256WithRSAEncryption
         11:85:71:a6:64:bf:fc:42:b8:69:d9:ec:d3:13:91:85:ad:bd:
         a5:4c:0b:a6:7d:01:ce:e1:0b:ab:23:7d:02:08:f9:68:c4:55:
         f0:8c:3e:69:80:93:d9:d3:e1:80:2c:bc:7c:51:f3:cc:aa:7b:
         e2:6d:ef:15:cc:25:4b:6f:ce:a8:c0:d4:73:ca:d0:c4:da:49:
         34:b8:6e:51:16:67:9f:ab:ff:6d:e4:e5:3d:92:bd:67:8d:41:
         75:b5:52:65:47:d9:41:43:a1:b6:f5:d6:25:df:97:e7:31:ae:
         6c:3a:69:ab:53:79:56:9f:91:e3:3a:84:39:19:00:67:02:b1:
         03:3c:7e:a1:75:b5:bd:ec:58:ce:38:e1:54:a1:d1:87:2a:74:
         f5:6b:56:f4:98:fd:96:ef:37:6d:64:72:8c:c4:ea:6c:c4:ed:
         11:79:5f:e4:92:68:03:a3:13:75:bf:ef:c4:a5:8d:6d:28:66:
         f7:a2:bc:8e:55:21:91:cb:61:5c:0d:ad:bb:62:21:34:50:57:
         2d:d6:da:d2:de:ae:17:d1:d7:f4:ba:82:d2:04:02:90:6e:5f:
         37:78:e8:4e:b9:bf:2e:5e:b4:c9:a2:82:d3:30:fe:11:74:47:
         f6:14:f5:ef:fd:df:71:a7:6c:9f:29:6c:a1:08:c5:d2:6d:98:
         10:73:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org