Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
File:                     E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer (raw, json)
Hash identifier:          2ApF2IlpyWCg0paPSU1xeqHOnK8g1EIWaryHtB6cU8k=
Subject key identifier:   E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FD62634A1E2F8A8BACD10184A787B03EA52504D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 18:02:31 +0000
Certificate not after:    Mon 29 Jan 2024 18:07:31 +0000
Subordinate resources:    AS: 270256
                          IP: 200.108.172.0/22
                          IP: 2804:6938::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d6:26:34:a1:e2:f8:a8:ba:cd:10:18:4a:78:7b:03:ea:52:50:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 18:02:31 2023 GMT
            Not After : Jan 29 18:07:31 2024 GMT
        Subject: CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:a6:44:1f:57:4b:34:58:fc:bf:e0:36:d8:
                    89:64:9c:5c:90:a5:84:96:d1:20:83:56:23:29:c9:
                    31:41:1d:3f:02:04:e7:92:07:29:3f:2e:6f:42:29:
                    04:c3:02:7c:f7:a6:6c:12:e7:76:5b:fc:81:20:15:
                    97:b2:15:96:ce:90:f2:44:c1:e1:6c:96:a3:bb:43:
                    4d:38:23:72:17:c3:11:9b:c7:ee:75:b4:96:50:4a:
                    68:c0:6e:91:1b:51:a0:40:69:88:d5:58:5b:4f:20:
                    37:58:1a:2e:06:33:0f:5a:e9:3b:e2:58:ae:28:e8:
                    0e:58:29:95:c7:d0:26:37:6b:6c:ea:72:a8:71:d9:
                    ba:57:57:4d:69:00:f9:ee:fd:e3:ea:73:15:18:1d:
                    65:73:d2:b3:20:3a:db:6e:f7:e7:0a:0f:29:a5:83:
                    8f:f2:03:9c:4c:1f:8d:2f:3c:e0:47:e7:eb:88:6c:
                    58:ad:8e:08:ad:b0:82:f3:14:aa:79:62:5e:07:9b:
                    6e:64:4e:e2:67:e2:fa:4d:99:b4:23:aa:7c:c9:d7:
                    b6:24:87:89:cb:3a:50:b3:b3:32:9d:90:79:e2:a8:
                    52:1b:db:44:c6:fd:c9:bb:f1:07:15:c5:c5:c2:a4:
                    fb:c8:db:e8:47:42:6e:05:c6:94:d1:a2:7e:6d:2f:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.172.0/22
                IPv6:
                  2804:6938::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270256

    Signature Algorithm: sha256WithRSAEncryption
         0f:01:a5:ad:d0:35:62:36:78:6c:57:06:de:e8:58:83:bb:02:
         81:0b:18:0e:6f:6a:e7:56:44:2e:2a:f9:2a:d4:27:22:9c:43:
         80:a6:93:b0:8f:ff:73:4e:b6:95:07:1b:90:09:df:99:02:e9:
         f9:75:dd:b2:69:57:09:30:78:52:58:31:bf:ad:57:3d:c4:6f:
         01:e7:86:56:cd:bf:c8:f6:9e:1e:38:34:46:15:c1:13:d9:f4:
         bb:35:04:f7:dd:ca:cf:70:e7:31:7a:ff:70:e3:ad:bc:f8:f9:
         7f:b1:9f:ae:bf:f2:fd:77:39:e0:86:d6:b5:d8:70:bb:1a:6f:
         33:19:04:c7:94:be:d7:de:ee:c8:1c:ed:c6:28:cb:96:ae:10:
         f3:51:8e:67:6a:ff:dc:a6:a7:e5:eb:e0:85:b2:14:51:7f:a2:
         67:38:f4:c6:a1:95:7e:6a:4b:90:93:32:a7:13:4c:38:c1:b7:
         95:f5:0a:14:c2:e0:65:85:62:3f:ae:aa:70:02:d0:41:e7:3e:
         68:b0:2c:fc:fe:01:28:c6:d2:a9:37:49:14:a9:ff:b3:2d:11:
         d9:51:56:ff:6b:e0:18:4a:44:a7:fb:9b:56:ba:d7:9e:84:68:
         0b:d5:4b:c6:4c:c5:f4:41:04:35:71:9b:00:47:19:aa:96:89:
         a5:4b:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org