Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2DF87CFBD066EDF503448BBD489B276B8FFE720.cer
File:                     E2DF87CFBD066EDF503448BBD489B276B8FFE720.cer (raw, json)
Hash identifier:          Xb+dNRaYtOh+uvxWdSXIpoLMeFUdyqkNyn4TWgaGaYs=
Subject key identifier:   E2:DF:87:CF:BD:06:6E:DF:50:34:48:BB:D4:89:B2:76:B8:FF:E7:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       228DAEA09C77C0E43691A6F192AB35BA129C9A63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/E2DF87CFBD066EDF503448BBD489B276B8FFE720.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Nov 2022 20:10:12 +0000
Certificate not after:    Fri 03 Nov 2023 20:15:12 +0000
Subordinate resources:    AS: 269537
                          IP: 45.188.168.0/22
                          IP: 2804:6624::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8d:ae:a0:9c:77:c0:e4:36:91:a6:f1:92:ab:35:ba:12:9c:9a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  4 20:10:12 2022 GMT
            Not After : Nov  3 20:15:12 2023 GMT
        Subject: CN=E2DF87CFBD066EDF503448BBD489B276B8FFE720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:90:e8:bb:f8:91:b4:57:15:db:a5:94:4f:
                    83:34:0a:2b:26:7c:2d:f9:a8:af:e3:d0:d3:f5:c2:
                    4a:a2:56:9a:2b:79:e2:86:9f:d8:ca:3a:10:a3:88:
                    f9:64:12:60:1a:2d:5c:06:b5:8a:16:c3:cb:87:33:
                    49:e4:51:94:8c:c8:d4:be:19:a1:a9:01:f2:ca:55:
                    f7:62:55:bd:06:18:19:07:9f:e0:ba:b3:3a:57:5f:
                    e1:b6:c2:2e:e9:f7:79:a4:be:1f:2b:8e:e0:f6:1e:
                    96:bd:79:d1:40:d6:8e:6a:92:e5:2c:44:1f:af:55:
                    d6:ee:cc:74:80:43:e7:88:a7:2c:f0:cd:25:59:83:
                    52:43:3c:16:29:4f:d1:ae:f1:4d:af:af:b3:0a:ae:
                    0d:d5:38:da:76:f8:ec:ca:8a:c9:87:fb:c6:f6:bf:
                    13:e0:87:34:0e:0c:72:5c:c2:29:4a:03:79:bb:23:
                    83:66:3e:7d:b1:f0:5c:bb:9a:e4:74:52:f9:59:bb:
                    fe:8b:0b:7b:cc:af:e2:36:8f:e6:98:b4:9c:cf:6f:
                    19:c5:d2:6b:74:9d:a2:1a:12:00:8e:14:e1:e0:a0:
                    0d:d2:ad:13:73:b7:51:a1:ea:72:af:23:bc:47:04:
                    6f:d1:d2:64:f6:83:01:b9:c9:b7:7e:37:24:13:bf:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:DF:87:CF:BD:06:6E:DF:50:34:48:BB:D4:89:B2:76:B8:FF:E7:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/E2DF87CFBD066EDF503448BBD489B276B8FFE720.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.168.0/22
                IPv6:
                  2804:6624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269537

    Signature Algorithm: sha256WithRSAEncryption
         57:67:1c:65:df:00:8b:e9:17:87:b1:26:63:7a:d2:16:47:d6:
         76:71:dc:fb:c1:92:6f:6f:2e:09:b9:41:df:6e:31:c1:b4:19:
         67:81:48:f5:39:39:39:42:3f:c0:3f:bd:dc:1b:53:b9:a7:45:
         77:52:bb:bc:96:c4:43:98:01:81:aa:53:7d:2a:92:7f:bc:a3:
         d8:f7:ec:86:5a:c7:e1:e7:3b:36:0f:7a:ba:f6:cf:d3:93:ed:
         dc:c3:77:bc:8b:ad:e7:d4:93:57:2e:e5:92:2f:b6:a3:60:cf:
         e1:6f:03:00:5b:e8:39:d9:d3:77:da:6d:db:85:88:22:89:83:
         ce:a0:bf:a5:94:00:70:42:44:60:b6:ce:a0:5d:4c:24:93:c0:
         f2:f3:53:37:7c:fa:69:a2:d7:5a:6e:12:e7:d8:e2:19:7e:1d:
         97:f4:36:3b:10:fe:ae:85:07:de:55:df:88:e7:81:f0:12:ca:
         c7:d6:6c:ce:7b:34:fa:87:bc:07:28:dc:92:1d:eb:e4:f5:4c:
         28:42:a2:d8:3c:81:02:7a:80:58:d4:82:7c:ea:d4:d8:78:0c:
         c5:24:18:1f:f8:47:52:7e:90:d4:74:57:02:98:91:e1:da:7a:
         fe:d4:a6:2d:93:ce:b5:70:2a:a4:7c:05:4a:6e:e6:d3:48:fb:
         46:2f:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org