Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
File:                     E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer (raw, json)
Hash identifier:          9gvyBaLZqjsF/ruD+AW33Pg6eADP1dUmc9TJpIdJTIU=
Subject key identifier:   E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D9412A37C36D0F2E341D39F906C50FF351849C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 12:37:12 +0000
Certificate not after:    Tue 27 Feb 2024 12:42:12 +0000
Subordinate resources:    AS: 28270
                          IP: 131.221.68.0/22
                          IP: 138.117.124.0/22
                          IP: 143.255.112.0/22
                          IP: 170.0.204.0/22
                          IP: 170.245.100.0/22
                          IP: 177.66.64.0/21
                          IP: 177.75.192.0/19
                          IP: 177.130.192.0/19
                          IP: 179.191.128.0/19
                          IP: 187.18.128.0/17
                          IP: 187.108.96.0/20
                          IP: 187.110.208.0/20
                          IP: 189.45.64.0/18
                          IP: 189.50.144.0/20
                          IP: 200.94.240.0/22
                          IP: 2804:880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:94:12:a3:7c:36:d0:f2:e3:41:d3:9f:90:6c:50:ff:35:18:49:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 12:37:12 2023 GMT
            Not After : Feb 27 12:42:12 2024 GMT
        Subject: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:30:74:49:83:2d:73:70:8e:6e:6e:08:dd:
                    eb:ab:86:80:ee:19:bc:f0:fe:70:16:ca:61:ad:a0:
                    d8:30:f3:27:7b:88:47:42:38:1a:2e:71:75:b0:a4:
                    52:a7:15:98:11:40:36:2b:70:97:bc:b1:7b:a1:2a:
                    6f:50:f7:ab:4e:c2:22:0a:77:77:14:05:41:d5:d6:
                    af:d2:48:77:45:61:2f:b6:2f:54:9c:1f:92:35:cb:
                    f8:9d:c5:f6:fc:c9:bb:89:6f:4a:b8:e0:ad:8b:53:
                    54:72:b1:e3:44:8c:c2:29:59:b6:dd:54:9d:b6:e3:
                    69:f3:46:73:9b:f1:09:4d:d6:c9:e2:c3:5c:68:51:
                    ed:b8:a0:05:fb:c7:07:fe:6c:41:48:a3:61:a8:4b:
                    30:be:f0:6c:a6:ec:57:03:dc:60:9a:b8:ba:3f:94:
                    da:fa:61:df:cd:0a:7a:95:bc:c2:63:95:76:e2:db:
                    39:c2:c2:ca:6e:0b:ea:bd:36:7b:d0:4b:c4:9c:b1:
                    6f:3a:f0:88:f2:34:08:3e:86:2e:3c:fe:86:c1:c3:
                    10:2d:14:e4:41:e0:22:42:eb:42:a9:77:8c:d3:9b:
                    2a:a9:df:b9:2a:9a:46:68:f9:ee:29:2c:79:3c:ef:
                    2b:45:ea:14:7b:0a:1b:87:d6:16:61:af:2b:6e:ad:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22
                  138.117.124.0/22
                  143.255.112.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  177.66.64.0/21
                  177.75.192.0/19
                  177.130.192.0/19
                  179.191.128.0/19
                  187.18.128.0/17
                  187.108.96.0/20
                  187.110.208.0/20
                  189.45.64.0/18
                  189.50.144.0/20
                  200.94.240.0/22
                IPv6:
                  2804:880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28270

    Signature Algorithm: sha256WithRSAEncryption
         6b:8a:b2:c1:ac:89:18:96:0d:9d:56:fc:36:08:6b:09:52:ac:
         65:9a:db:43:a0:4b:b5:bf:69:dd:57:ec:03:7e:46:91:10:94:
         52:41:c1:01:75:9a:88:cc:3e:49:d0:79:09:66:6c:31:57:7b:
         ad:dd:62:bd:3c:ad:31:bb:5d:f4:70:2a:a2:94:ab:c0:90:3b:
         ac:24:a0:99:c3:49:f9:b7:bd:49:a5:8e:9f:8c:90:34:9c:de:
         3c:8c:62:75:bb:41:e7:c4:51:0c:8f:8c:42:2a:20:27:f5:d9:
         d4:4d:a4:ec:6f:00:2b:00:1b:f2:98:f9:4e:ca:7d:92:18:fb:
         13:06:2c:5d:98:f3:8d:2f:9a:5f:82:73:97:b3:92:a1:bc:87:
         41:da:04:fc:52:40:29:46:0a:d3:82:bd:3b:87:61:e6:33:7e:
         c1:21:71:00:cf:8a:a6:ef:18:b0:ee:bc:ba:9a:a4:47:1f:de:
         a7:2f:d1:88:17:f7:0c:6b:42:21:39:c6:9f:ee:a1:e5:bf:3e:
         8d:09:f4:79:54:32:38:c4:2d:fc:d8:29:cf:27:1e:07:ae:85:
         43:77:1d:a8:92:38:e4:26:de:21:5f:88:72:80:6d:75:f2:05:
         88:55:43:fd:47:9f:9a:c7:37:16:c9:8d:3a:f0:b2:68:3d:1d:
         4b:35:93:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org