Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E43FD017602A495594D333F8A9BF37138B3A9627.cer
File:                     E43FD017602A495594D333F8A9BF37138B3A9627.cer (raw, json)
Hash identifier:          51qfTAVLRbtIILKQR6MPAM7M0Bi8P4X2eDOsbHDr3c0=
Subject key identifier:   E4:3F:D0:17:60:2A:49:55:94:D3:33:F8:A9:BF:37:13:8B:3A:96:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       322F65252479205CEDB4CA6DF761579702D48D92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/E43FD017602A495594D333F8A9BF37138B3A9627.mft
caRepository:             rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 17:27:29 +0000
Certificate not after:    Thu 18 Jul 2024 17:32:29 +0000
Subordinate resources:    AS: 270717
                          IP: 200.6.84.0/22
                          IP: 2804:7048::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2f:65:25:24:79:20:5c:ed:b4:ca:6d:f7:61:57:97:02:d4:8d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 17:27:29 2023 GMT
            Not After : Jul 18 17:32:29 2024 GMT
        Subject: CN=E43FD017602A495594D333F8A9BF37138B3A9627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:7f:4e:87:68:18:55:07:cd:11:fa:1e:49:
                    51:2a:36:ea:99:a9:6d:16:b4:37:93:fc:9c:bb:c2:
                    a0:86:ee:4f:48:8b:fd:5b:5c:f3:dc:1d:35:0f:d2:
                    29:a8:77:39:35:e2:93:45:21:6a:fe:d6:19:d7:87:
                    d0:46:12:f7:d2:2d:4c:c9:fc:6d:70:1b:b5:a5:a2:
                    d2:60:ee:13:03:ef:43:12:cf:23:26:ad:c0:06:dc:
                    df:42:1f:12:a0:06:03:8a:db:a3:45:28:61:b7:c4:
                    22:19:b4:b6:0b:a7:a9:27:1a:a8:1b:f4:4d:5d:0c:
                    53:f6:4f:e4:02:7d:6f:a5:44:55:25:0b:9c:d7:05:
                    ea:a4:59:5e:87:a5:3a:2a:3c:a3:8d:b9:ab:3c:9a:
                    07:41:c9:ac:46:b3:e8:37:d7:5d:00:b0:54:0e:3d:
                    16:8d:79:12:a1:55:18:4a:fa:69:94:0c:36:75:5a:
                    2d:36:c1:1a:56:83:7d:14:7b:9b:d9:17:14:ff:47:
                    1a:68:bd:20:a5:a4:bc:93:aa:6e:9e:d2:82:15:d0:
                    77:0e:33:23:d5:ea:54:b6:53:49:22:74:a4:9d:4b:
                    f2:0a:ba:72:8d:8c:a2:e4:bd:ad:50:87:05:17:f6:
                    b3:d4:0d:40:25:93:d2:99:e0:7b:70:de:40:a3:d7:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:3F:D0:17:60:2A:49:55:94:D3:33:F8:A9:BF:37:13:8B:3A:96:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/E43FD017602A495594D333F8A9BF37138B3A9627.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.84.0/22
                IPv6:
                  2804:7048::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270717

    Signature Algorithm: sha256WithRSAEncryption
         04:c5:a6:7d:fa:af:6e:06:80:43:17:cf:e2:8c:37:4a:38:04:
         cf:1f:f3:e5:fb:ed:91:79:1a:0a:f5:91:a8:98:8a:51:dc:06:
         31:8d:71:c0:12:f6:cc:33:82:b5:94:ac:1b:1f:ce:83:de:57:
         f8:e7:c2:53:82:e5:15:ed:e3:51:d6:0c:bf:f1:ad:30:f2:e4:
         e4:9c:6c:ae:44:67:51:c9:99:6c:a5:0d:b0:f7:87:9a:b2:46:
         f0:b0:76:27:51:53:75:ba:d7:de:2c:f2:90:b2:c6:b0:1a:5d:
         7a:eb:b8:0b:8f:02:58:fc:22:a3:cf:a6:6f:04:c3:f0:30:42:
         bb:3d:01:9c:09:5e:3b:a5:39:b9:b7:3e:e2:ff:03:69:90:fd:
         25:d0:74:b6:74:7e:9b:2e:fa:4b:2a:a5:3b:10:3f:98:62:e9:
         83:c1:48:e9:50:52:9a:7a:b1:51:a0:55:88:47:a7:47:28:ca:
         22:30:a8:2e:7d:5c:70:9b:38:79:40:55:73:be:a1:9a:d3:fa:
         b9:04:cb:7d:13:86:61:15:94:32:7f:bf:31:54:20:0a:d4:61:
         48:d1:ef:ea:04:db:6c:37:b3:91:95:65:b7:0c:53:44:25:07:
         26:cb:d3:1c:82:91:7b:84:0b:d9:6d:86:47:b5:a2:f6:90:31:
         2b:c7:05:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org