Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E5230C323F33B0B85E28F4FF3DC810A6D1C5A089.cer
File:                     E5230C323F33B0B85E28F4FF3DC810A6D1C5A089.cer (raw, json)
Hash identifier:          wQaPCbMxW0GfFMLlfiXpIC/CtJp46ZVSZtFPyFEF7/g=
Subject key identifier:   E5:23:0C:32:3F:33:B0:B8:5E:28:F4:FF:3D:C8:10:A6:D1:C5:A0:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       174F8FBA23A850103C29629BAC9518AF3A2DE4BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/E5230C323F33B0B85E28F4FF3DC810A6D1C5A089.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Feb 2023 20:06:58 +0000
Certificate not after:    Wed 31 Jan 2024 20:11:58 +0000
Subordinate resources:    AS: 263421
                          IP: 168.121.156.0/22
                          IP: 168.195.220.0/22
                          IP: 179.191.240.0/20
                          IP: 2804:1600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4f:8f:ba:23:a8:50:10:3c:29:62:9b:ac:95:18:af:3a:2d:e4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 20:06:58 2023 GMT
            Not After : Jan 31 20:11:58 2024 GMT
        Subject: CN=E5230C323F33B0B85E28F4FF3DC810A6D1C5A089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:c7:ca:82:7d:36:13:47:94:c2:c9:29:33:
                    33:92:19:b6:60:e4:bd:4b:49:a3:76:93:23:0a:5b:
                    de:ee:2d:a6:88:c4:52:49:ac:3b:34:17:6a:ac:4f:
                    d2:af:b7:ab:ec:e1:79:8b:7e:a8:cc:75:7f:7e:8d:
                    d2:70:da:6f:f9:fc:c6:ea:94:bf:60:ec:f3:4e:bf:
                    c8:28:29:85:16:a9:fc:46:53:b0:05:de:79:f2:2b:
                    bf:0e:15:7d:7a:02:c7:7f:9a:da:7e:e5:c6:35:55:
                    47:d0:d2:32:d5:2c:8b:a3:dc:95:28:79:ed:b1:d5:
                    84:7d:13:ff:ca:e7:f2:7e:26:27:39:fa:a2:74:d6:
                    c0:eb:ad:9e:1b:8c:c8:76:48:f2:8a:c5:6c:72:aa:
                    3e:eb:fe:39:aa:41:9a:f7:46:7a:0a:c9:23:bc:c0:
                    fb:4d:d4:78:f7:f8:18:0d:8b:df:a5:4c:4c:41:9e:
                    af:21:a2:6e:d2:e0:ce:2d:c7:38:1a:ad:a0:e9:98:
                    dc:dc:ff:16:77:bb:b7:9a:44:f1:0c:e0:db:e7:a5:
                    ed:b5:8a:d3:03:97:4e:56:8d:3e:27:67:a5:87:80:
                    6b:9f:3a:97:05:72:33:1c:c3:b1:63:30:37:64:18:
                    d6:8f:c6:91:28:b7:27:bd:fb:c6:12:8b:2e:a7:6a:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:23:0C:32:3F:33:B0:B8:5E:28:F4:FF:3D:C8:10:A6:D1:C5:A0:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/E5230C323F33B0B85E28F4FF3DC810A6D1C5A089.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.156.0/22
                  168.195.220.0/22
                  179.191.240.0/20
                IPv6:
                  2804:1600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263421

    Signature Algorithm: sha256WithRSAEncryption
         3f:a5:7f:b3:50:a9:b3:d9:47:0d:60:75:58:be:e8:66:77:9b:
         fb:c2:7f:57:65:4b:bd:fc:a8:71:58:b9:61:f4:5a:66:b1:37:
         41:fb:03:7f:47:cc:0f:6b:77:fd:b5:21:3f:a7:59:54:1a:2f:
         09:d5:7e:96:7e:5e:df:86:e2:6c:e3:3c:51:6b:10:3d:5d:6e:
         55:f5:bd:bd:0b:85:d7:d1:0d:d9:71:a5:6b:0f:ef:31:a0:ee:
         37:3c:39:80:7f:c9:e5:bb:76:6b:f6:98:41:a9:9a:2d:d9:31:
         0d:0c:f5:c0:01:49:14:6f:fa:64:97:42:c0:bf:88:4c:a1:d3:
         d7:b7:0c:c0:1c:f3:a4:96:9a:fa:62:64:4d:fe:17:2c:cc:0f:
         1e:be:9d:44:c4:d4:54:4d:bb:a7:94:de:5b:33:53:49:08:34:
         61:cb:58:3d:c8:2d:c4:ea:ec:9d:1a:a0:a9:27:72:ac:8e:6a:
         0d:79:6c:8e:8f:99:54:14:64:13:8f:44:2c:3c:3a:83:82:6f:
         ec:df:41:62:c5:8c:62:43:36:e9:4e:1c:36:66:7a:7b:14:9a:
         be:f6:6d:6f:d5:69:3f:7b:69:4c:1f:5b:0f:2a:b0:28:55:5a:
         27:1f:14:ee:c6:c2:40:2b:f1:92:c4:c8:a7:2b:90:32:b1:86:
         2c:d2:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org