Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.cer
File:                     E35DBE2041EBF34AAB0D87561D88726CB15142C5.cer (raw, json)
Hash identifier:          +ENfKJwp9OpCd0Ad5SeAW7v9nsl45BSoDrwTdW8wrTc=
Subject key identifier:   E3:5D:BE:20:41:EB:F3:4A:AB:0D:87:56:1D:88:72:6C:B1:51:42:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41DE511EA14DE06EFE98D5779FE97F14E3EC6FE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 13:03:01 +0000
Certificate not after:    Thu 18 Apr 2024 13:08:01 +0000
Subordinate resources:    AS: 265301
                          IP: 168.121.76.0/22
                          IP: 2804:2dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:de:51:1e:a1:4d:e0:6e:fe:98:d5:77:9f:e9:7f:14:e3:ec:6f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 13:03:01 2023 GMT
            Not After : Apr 18 13:08:01 2024 GMT
        Subject: CN=E35DBE2041EBF34AAB0D87561D88726CB15142C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:b3:75:aa:23:75:04:e0:54:0c:2f:13:88:
                    50:65:db:3e:fd:35:7f:be:b7:6a:1d:83:7d:1f:40:
                    13:ac:02:1a:8d:7f:da:20:a7:ec:ea:69:2c:34:49:
                    3f:cb:57:d4:7c:b5:d6:0e:0c:84:d0:73:e3:78:1c:
                    a1:3b:70:1a:78:d7:2a:ad:9d:b1:9d:68:d6:e1:0c:
                    d7:ce:3b:d0:2d:09:97:f0:d0:83:8c:20:e1:5b:e0:
                    f3:77:37:74:71:2d:77:c7:bd:2f:13:10:93:04:cc:
                    3f:3f:de:d7:a4:94:d7:bd:ef:f0:60:4f:bc:b5:0a:
                    e2:5c:50:99:ce:ef:82:6d:55:44:93:94:b1:53:75:
                    e4:38:9a:c6:21:74:b0:36:d8:d1:94:f1:e3:65:46:
                    f1:8b:e0:4f:1d:aa:79:34:5d:b8:5e:1e:41:45:23:
                    45:67:47:8b:cd:44:b5:4d:d1:0e:8f:8b:8c:9a:59:
                    8b:22:21:1f:64:d3:b0:da:19:b0:f4:ef:d2:17:8a:
                    46:09:78:4d:17:d3:3e:d5:8e:d9:7d:88:1a:76:e4:
                    ca:0d:11:05:be:7c:be:82:9b:57:32:db:6b:36:e4:
                    dc:9c:06:5a:a9:b2:23:9a:c3:08:18:27:2c:a7:f5:
                    8e:80:ba:95:95:eb:08:3e:48:d8:89:ef:ae:b5:44:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:5D:BE:20:41:EB:F3:4A:AB:0D:87:56:1D:88:72:6C:B1:51:42:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/E35DBE2041EBF34AAB0D87561D88726CB15142C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.76.0/22
                IPv6:
                  2804:2dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265301

    Signature Algorithm: sha256WithRSAEncryption
         7c:ff:64:19:7d:8c:b8:bd:9d:cc:2b:bc:63:d4:0f:08:60:4d:
         8c:d4:25:4b:fc:71:07:1e:1e:76:b3:3c:ab:71:e2:57:48:a6:
         d0:3d:f3:b0:90:bb:8d:92:55:e0:11:a8:2d:51:5a:ff:a8:96:
         64:bf:4b:34:86:38:e7:19:71:f6:31:15:50:81:34:2d:b8:d6:
         1d:b6:14:39:74:88:20:2f:47:e5:5a:fd:50:32:36:fe:af:6c:
         9d:82:9f:22:66:ee:45:df:45:53:ed:43:ce:26:64:54:4b:47:
         37:f2:20:c0:b7:9b:fb:36:53:0f:4d:de:ae:f6:7b:55:8e:a8:
         48:9e:46:9a:e2:60:c7:81:fa:5a:29:26:ab:46:69:3d:3e:fd:
         27:84:2e:a0:f0:8d:8b:cb:c4:67:db:e7:04:42:d2:e0:20:aa:
         d7:05:79:a2:a7:97:b5:37:b3:15:4f:e0:ad:9e:b4:e8:59:8c:
         7c:7b:b7:0b:b3:2a:4b:f1:bf:ac:21:96:35:61:d0:e4:8a:24:
         78:4b:14:bf:23:4c:c5:50:f1:15:e9:59:dd:96:a6:d7:02:a4:
         92:8f:1f:3f:19:58:13:ed:98:7b:c6:81:09:5d:c1:2b:c5:c7:
         85:97:71:6a:d1:2b:7d:8c:59:96:e4:6b:40:6c:78:bd:ab:1f:
         02:a3:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org