Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E35DF19FAEDD18F4222B9574FB65C82CA0076170.cer
File:                     E35DF19FAEDD18F4222B9574FB65C82CA0076170.cer (raw, json)
Hash identifier:          ACUKmorhsnkKfpz+RZHLm11KYYudPrlgr48fBiE0Qng=
Subject key identifier:   E3:5D:F1:9F:AE:DD:18:F4:22:2B:95:74:FB:65:C8:2C:A0:07:61:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34DD040367B6693851F98E55425EC33955F1FA37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/E35DF19FAEDD18F4222B9574FB65C82CA0076170.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jun 2022 12:44:08 +0000
Certificate not after:    Tue 06 Jun 2023 12:49:08 +0000
Subordinate resources:    AS: 10704
                          IP: 200.234.128.0/18
                          IP: 200.239.192.0/18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:dd:04:03:67:b6:69:38:51:f9:8e:55:42:5e:c3:39:55:f1:fa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  7 12:44:08 2022 GMT
            Not After : Jun  6 12:49:08 2023 GMT
        Subject: CN=E35DF19FAEDD18F4222B9574FB65C82CA0076170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:d7:c6:c7:7d:5c:3f:4a:2e:73:93:0c:6b:
                    02:13:1e:f4:4b:9d:69:52:84:d3:2d:0e:26:6e:d3:
                    f5:52:f7:51:db:95:dc:d1:60:09:6d:6f:74:b5:07:
                    a4:cd:94:de:ec:04:25:70:81:07:c5:72:d0:29:ba:
                    25:37:b6:37:5e:de:6b:b9:15:9e:9f:43:5c:b2:84:
                    53:73:7f:a7:4e:e5:67:8e:bd:28:f6:46:22:11:99:
                    dc:a1:a3:04:fe:ce:84:e8:f8:7a:49:2a:69:76:d8:
                    26:32:e0:eb:8b:2a:45:0c:0e:77:cf:03:38:63:9e:
                    34:bc:c6:7a:ca:76:a2:39:77:b2:6d:61:76:95:b7:
                    69:78:06:ad:4e:62:ac:76:95:5e:28:17:cc:50:61:
                    f6:19:3d:17:74:e1:e3:b6:18:6b:52:e2:c7:72:0c:
                    98:46:38:37:88:07:cc:72:0b:f8:75:f2:9b:c3:6b:
                    76:6a:9b:8e:13:29:38:bb:8e:ee:b5:ad:78:c8:d2:
                    86:b7:25:c2:d7:80:e0:bc:44:63:4a:7a:f3:41:cc:
                    99:4e:d1:38:f4:fe:56:b2:ab:7f:eb:17:13:e9:28:
                    74:1b:11:c3:d6:73:cd:2d:67:8c:76:b5:60:b7:9e:
                    9d:d3:2b:59:bc:02:f1:43:08:1a:b9:b8:70:76:23:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:5D:F1:9F:AE:DD:18:F4:22:2B:95:74:FB:65:C8:2C:A0:07:61:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/E35DF19FAEDD18F4222B9574FB65C82CA0076170.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.234.128.0/18
                  200.239.192.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10704

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:49:2c:6c:97:ec:82:c7:d1:36:a1:fc:bd:c9:3f:1c:ad:
         1a:7d:2b:d6:5c:6b:f8:17:22:14:67:57:d3:a3:92:9b:58:af:
         6f:8e:65:89:29:d6:00:01:f7:a0:99:9c:47:a0:58:c8:f0:2b:
         a0:fb:8f:44:ce:d6:4b:97:f2:89:79:c8:e3:15:62:6e:1b:b4:
         48:bf:f6:59:78:a2:9b:49:f8:f7:c4:b8:ba:7a:92:7a:20:0c:
         70:8b:53:f6:e4:ba:0c:db:55:30:6e:82:7c:30:33:33:e1:64:
         0b:87:ea:4a:af:ec:90:3c:b6:70:64:f2:60:2e:c0:71:7c:f0:
         84:cd:5f:aa:8b:4a:bb:fe:74:25:82:20:b4:68:88:3f:e3:d8:
         29:d0:52:10:ca:4e:74:8a:5c:ee:87:a4:86:04:66:e9:b4:0e:
         95:5e:3f:90:25:74:e0:64:f2:ca:65:8e:08:ae:3e:69:f4:85:
         cd:39:9a:e0:90:6e:04:fb:2d:36:9c:69:ac:f3:04:b8:21:e0:
         97:ba:d4:36:be:f8:97:99:48:cf:66:48:ec:f0:5e:e5:af:db:
         ac:e1:5a:05:ee:76:77:3f:a2:fd:e7:da:c8:88:74:27:04:35:
         57:a8:df:05:a5:0b:0d:51:86:05:af:51:49:0b:da:5b:ce:3d:
         6c:d6:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org