Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer
File:                     E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer (raw, json)
Hash identifier:          Ntg6pJdZHvkIcy2TUclkKzoEnmgYPKaWjfxfjstC5rI=
Subject key identifier:   E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       348B3219767381FA0862ECF00771B03457BFFCF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jul 2023 19:08:18 +0000
Certificate not after:    Mon 08 Jul 2024 19:13:18 +0000
Subordinate resources:    AS: 266928
                          IP: 45.225.32.0/22
                          IP: 2804:4578::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8b:32:19:76:73:81:fa:08:62:ec:f0:07:71:b0:34:57:bf:fc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 10 19:08:18 2023 GMT
            Not After : Jul  8 19:13:18 2024 GMT
        Subject: CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:31:b8:a5:8c:bb:36:4f:fb:30:c0:6f:1b:
                    e0:bc:c1:9d:00:22:26:b3:5d:2c:58:23:1b:79:46:
                    75:41:e7:11:1c:15:58:dc:c4:53:80:67:d0:0d:33:
                    f2:5d:b8:ad:f5:03:99:6b:39:9a:0a:c7:62:09:0a:
                    a2:a8:8b:94:2b:17:74:54:7b:4a:5b:82:59:11:e9:
                    a0:49:71:17:65:83:40:7a:c2:5e:86:7f:18:4b:5b:
                    e4:0e:7a:f8:fd:f9:7c:86:68:c6:16:f2:03:8b:db:
                    e8:e7:8a:07:b5:87:9b:fc:53:b9:3e:1e:f3:18:16:
                    4e:1a:06:97:80:0b:f6:ee:bc:2b:7d:81:60:9d:0a:
                    7a:ea:a4:d3:35:99:74:f0:e0:17:60:d0:ff:74:c1:
                    d2:af:f7:b0:4d:11:73:fe:9c:e2:35:53:4a:40:83:
                    2c:72:f6:c5:6f:50:33:a4:48:4c:63:50:74:08:c1:
                    3f:1a:ee:ff:34:17:11:f2:eb:1a:34:fa:cf:88:fd:
                    c9:a0:1f:07:ea:3a:65:9e:70:ce:da:76:11:2c:9e:
                    5e:ac:f3:f8:d4:e1:f7:11:df:f5:ef:70:70:7a:18:
                    68:78:8f:3e:c1:fc:4b:3d:8b:75:9c:0e:e2:3e:49:
                    95:55:64:71:92:d1:0f:9c:e7:e2:77:10:07:e5:ef:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.32.0/22
                IPv6:
                  2804:4578::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266928

    Signature Algorithm: sha256WithRSAEncryption
         13:98:47:58:4b:57:67:2a:88:e9:47:29:45:f1:eb:fd:3d:11:
         a1:db:37:ff:57:86:1a:48:15:7f:db:81:61:89:f1:ca:25:ed:
         cb:49:89:d2:a6:4e:ce:14:7a:b8:50:c6:f3:fd:3f:47:bf:39:
         9d:81:e2:73:f2:d5:6c:12:7e:9d:03:c3:80:fc:18:8f:9a:ae:
         b3:6e:60:e1:98:74:95:1f:83:23:04:23:a8:fe:f8:45:83:07:
         3e:37:72:ae:6a:e7:ed:a5:03:d1:43:d5:fc:ce:8d:f7:1d:7e:
         10:8b:1f:69:02:5c:a1:98:73:18:89:b1:b9:ea:ea:63:7e:81:
         80:7d:8e:10:9b:77:7f:a0:b5:92:da:40:a1:f2:4e:54:3e:db:
         4e:94:06:00:0e:54:e1:6d:0d:ed:cc:f2:12:83:bb:2f:37:02:
         ed:5b:a1:19:f4:2c:c3:17:68:60:c0:44:98:9c:76:67:fe:ec:
         b9:16:b5:c2:a8:3a:d6:1d:56:13:cd:37:23:24:8c:9a:48:53:
         df:2d:5c:29:07:0a:0a:e1:8d:13:31:6a:06:30:88:76:3d:9a:
         1f:6e:57:10:8d:37:cc:95:07:c0:3d:c5:53:42:40:83:c7:a2:
         ca:38:f5:54:a1:3d:7a:59:af:03:36:42:e7:4b:08:5b:8e:94:
         80:d8:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org