Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E43DAE50E870044B45AFB091C5977EC3BE5DC6D0.cer
File:                     E43DAE50E870044B45AFB091C5977EC3BE5DC6D0.cer (raw, json)
Hash identifier:          zmfZHUuZyjhAoBi57PzHkI7iOXvlqYf77LxZkJWzT20=
Subject key identifier:   E4:3D:AE:50:E8:70:04:4B:45:AF:B0:91:C5:97:7E:C3:BE:5D:C6:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C4BF4EC0C4988D1B81E11281C766E65480713C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/E43DAE50E870044B45AFB091C5977EC3BE5DC6D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jun 2022 18:19:23 +0000
Certificate not after:    Fri 16 Jun 2023 18:24:23 +0000
Subordinate resources:    AS: 263671
                          IP: 143.208.140.0/22
                          IP: 191.241.128.0/21
                          IP: 2804:1154::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4b:f4:ec:0c:49:88:d1:b8:1e:11:28:1c:76:6e:65:48:07:13:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 17 18:19:23 2022 GMT
            Not After : Jun 16 18:24:23 2023 GMT
        Subject: CN=E43DAE50E870044B45AFB091C5977EC3BE5DC6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:17:b3:3d:99:21:9f:cf:70:a4:4c:35:25:
                    1b:ba:29:ca:28:26:7b:14:56:48:17:40:b9:57:31:
                    57:6b:06:a8:10:51:73:ff:31:e6:f9:1a:60:0d:3f:
                    b1:d7:72:cb:37:0a:ef:48:8d:52:97:ed:8a:bf:b6:
                    5a:23:b1:5d:6d:a0:06:b3:af:89:2d:49:ed:cc:61:
                    09:a8:65:a9:c9:d2:b4:8c:b5:da:55:b9:6e:6b:e5:
                    d9:7d:6a:10:aa:d0:5d:d1:b1:8d:e1:ef:54:8b:4f:
                    a6:ad:c6:1b:23:a9:31:81:5e:a3:86:10:77:68:61:
                    57:c0:9b:ee:e6:8b:75:86:9d:b1:03:ec:0f:98:3c:
                    a3:ba:d5:90:2a:eb:b3:69:2f:bb:ec:ce:6f:9c:a0:
                    95:54:07:f9:ee:6e:66:89:08:00:c8:a5:7d:6f:cb:
                    43:2e:60:79:f8:ad:b5:56:8a:9c:0e:25:85:ad:bb:
                    80:ac:a0:17:8d:cf:a2:05:f1:f4:50:36:02:f5:b0:
                    1b:ce:a6:df:65:a5:51:8b:3c:1a:e3:aa:7a:eb:ef:
                    e9:4d:32:88:56:62:93:20:73:25:17:9c:9e:80:27:
                    5c:b0:59:f8:a4:04:7c:49:49:84:42:6e:d9:d3:e6:
                    0a:9e:bb:97:90:24:71:de:2b:4d:64:93:2f:5f:63:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:3D:AE:50:E8:70:04:4B:45:AF:B0:91:C5:97:7E:C3:BE:5D:C6:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/E43DAE50E870044B45AFB091C5977EC3BE5DC6D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.140.0/22
                  191.241.128.0/21
                IPv6:
                  2804:1154::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263671

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:b9:e9:b5:c8:1a:a8:e8:b7:bc:62:59:f5:ce:13:a7:fe:
         78:5a:18:c2:56:2e:28:57:2c:80:2c:55:9e:1f:6c:6c:ee:61:
         5e:58:98:6c:0e:3d:c7:34:73:8f:ab:29:d2:b2:20:4d:9d:43:
         d6:10:90:73:41:44:98:a3:0b:30:ea:d1:1c:d4:b3:f6:40:5b:
         53:6a:e5:77:8b:11:95:87:49:89:d3:71:19:ec:e9:87:5c:95:
         78:87:aa:37:73:cb:c8:fa:70:45:49:52:6e:f9:df:db:08:ff:
         a9:18:e8:8c:87:b8:19:05:c7:1c:16:d4:6f:6d:30:e9:77:d3:
         c7:7e:bc:53:b6:21:c9:8a:00:e5:7d:6a:15:33:97:f0:5b:55:
         2d:b9:16:7e:06:1c:b8:ed:69:f4:7a:78:f2:7b:01:cb:c4:fa:
         0c:85:16:2f:08:aa:92:c0:53:a4:6a:c8:ff:60:60:03:8b:3e:
         28:2e:5e:55:31:19:12:7a:7b:88:71:2f:26:e5:5e:bf:69:09:
         c2:45:25:2e:70:59:df:22:4c:4d:50:7c:eb:3f:56:56:60:c3:
         f7:fa:40:c0:15:8d:34:4e:77:14:76:d4:e5:0d:85:79:c2:14:
         8e:d1:2e:fb:9f:9b:9e:02:59:82:58:1c:46:47:ea:2b:c1:46:
         3d:1d:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org