Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
File:                     E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer (raw, json)
Hash identifier:          ZYBexOo2tzXqCFE8e8aJwnGO10fV0s6U4VvOrLPff5Q=
Subject key identifier:   E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3ADE23BD3FA7978C0E0D9C88E5D978207BF91B34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 19:55:10 +0000
Certificate not after:    Mon 21 Oct 2024 20:00:10 +0000
Subordinate resources:    AS: 52580
                          IP: 45.178.216.0/22
                          IP: 179.191.160.0/19
                          IP: 186.195.64.0/20
                          IP: 2804:cf8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:de:23:bd:3f:a7:97:8c:0e:0d:9c:88:e5:d9:78:20:7b:f9:1b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 19:55:10 2023 GMT
            Not After : Oct 21 20:00:10 2024 GMT
        Subject: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:bd:e4:26:e2:38:9f:2a:44:1b:7d:fc:22:
                    15:07:22:d9:8f:f2:fc:5d:fb:72:d0:f0:65:c2:75:
                    b2:ac:57:ac:77:56:e9:10:25:49:63:e7:fc:f3:27:
                    30:07:42:cb:dc:33:da:2c:4e:ed:81:60:66:db:07:
                    67:4e:a3:31:78:cf:87:f8:d6:4b:b8:7e:82:ea:49:
                    af:37:e0:95:b5:11:53:99:df:c5:47:3d:24:23:bc:
                    1e:fd:b0:46:54:7b:53:b7:84:49:6e:f9:b9:45:07:
                    bc:2a:b5:45:b1:b8:15:d8:73:da:2f:5b:ad:46:58:
                    e3:bc:c5:a2:53:ad:ea:11:cc:be:69:4d:f5:db:2b:
                    dc:7c:54:86:1b:68:7d:87:4e:13:d2:c8:c5:34:a8:
                    31:5b:1f:29:a1:fe:71:94:30:c6:db:71:99:38:d8:
                    85:83:ad:44:a1:88:66:95:32:e9:67:ad:d5:41:6a:
                    cd:a8:b3:4d:23:35:c6:a9:24:ee:5b:ba:eb:8c:5e:
                    4b:da:dd:64:a3:e6:41:71:d0:91:c0:e2:74:ca:46:
                    18:69:9e:d5:06:47:c6:52:81:77:1d:f6:30:09:42:
                    4b:e1:0c:56:38:56:cc:dd:82:75:53:f2:ca:2b:81:
                    99:3c:cc:72:00:6c:11:d3:49:17:ab:6b:b0:f8:ee:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.216.0/22
                  179.191.160.0/19
                  186.195.64.0/20
                IPv6:
                  2804:cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52580

    Signature Algorithm: sha256WithRSAEncryption
         32:95:0f:1e:b0:5f:3c:2e:27:9f:48:6f:ea:40:a7:23:46:7c:
         30:a7:87:d0:2e:11:d8:76:58:74:2b:05:17:35:74:09:86:ac:
         9b:fe:16:69:12:1d:d1:78:0a:7c:d7:f6:87:ac:90:84:9e:a7:
         ef:2a:4c:7a:19:b8:74:65:b2:98:95:1f:a9:09:08:dd:5e:4f:
         cc:7d:99:99:c0:dd:09:f8:61:8a:f0:6e:6f:4c:75:ad:98:23:
         a8:ae:a2:b9:d2:bd:4b:6e:1a:16:b3:ea:00:a6:a2:32:9d:8f:
         fe:86:61:68:28:85:1b:1a:58:13:25:f4:8f:a9:9d:ba:8c:d5:
         17:ae:6d:e7:2c:b5:17:9f:8a:d3:c0:c4:fb:0c:ce:66:9b:15:
         c1:f0:9a:c6:53:e9:bd:36:d9:29:c3:df:af:07:2a:2d:33:42:
         19:25:e3:6f:7c:dc:e7:59:e3:da:cc:9b:13:58:a7:59:20:55:
         0a:22:9f:6d:e9:bc:79:6b:32:c4:ed:9e:24:87:9b:96:93:13:
         65:69:ad:d5:de:b9:7b:69:68:1c:f4:33:da:7e:50:8f:93:06:
         d7:e2:95:7d:2a:e9:22:14:9f:33:03:4e:6a:f8:66:b5:01:49:
         19:fb:a9:16:06:32:c0:97:22:7d:d0:cd:2a:64:fa:d4:58:8d:
         2e:3d:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org