Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E52CBBAB4B5C39C74360973466EE6E0629449393.cer
File:                     E52CBBAB4B5C39C74360973466EE6E0629449393.cer (raw, json)
Hash identifier:          j3nBoZiS7pYCPYJcSeZCuukUSmHjw5UyC/GPkQUouP8=
Subject key identifier:   E5:2C:BB:AB:4B:5C:39:C7:43:60:97:34:66:EE:6E:06:29:44:93:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       108127BCE0B3CA78C1E1ECC140EF3FA2409AFDD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/E52CBBAB4B5C39C74360973466EE6E0629449393.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 08:48:10 +0000
Certificate not after:    Thu 18 Jul 2024 08:53:10 +0000
Subordinate resources:    AS: 269098
                          IP: 45.165.116.0/22
                          IP: 45.178.180.0/22
                          IP: 2804:5f6c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:81:27:bc:e0:b3:ca:78:c1:e1:ec:c1:40:ef:3f:a2:40:9a:fd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 08:48:10 2023 GMT
            Not After : Jul 18 08:53:10 2024 GMT
        Subject: CN=E52CBBAB4B5C39C74360973466EE6E0629449393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:b6:ff:98:5f:d5:dd:8d:21:af:89:e2:6d:
                    70:06:1d:a5:74:be:ef:ea:2d:29:db:04:e4:78:87:
                    79:ec:87:9b:f6:8a:0a:4e:da:66:47:fa:23:ef:d3:
                    cc:0f:ac:5f:1a:3f:40:21:42:38:f6:2c:b9:f0:cf:
                    63:9a:81:e9:bf:2a:47:10:5c:23:91:4f:49:1e:7a:
                    3a:30:84:70:e1:ac:19:9e:f6:00:2a:60:93:bf:f0:
                    00:f6:44:e8:23:3c:13:60:26:de:99:92:15:0d:92:
                    c7:8a:c3:dc:d7:04:7c:88:7b:50:a8:13:52:90:9c:
                    99:97:7b:b7:be:b5:63:8a:27:eb:2f:7b:13:a7:ee:
                    f2:db:d0:95:6c:f6:70:c9:2d:17:9b:fe:a5:de:c8:
                    7d:5c:cd:a2:f5:58:87:9d:dd:02:1d:26:46:93:3a:
                    21:36:c3:a6:df:7e:ac:0c:94:21:00:57:fb:9f:01:
                    37:b7:7b:10:a5:41:71:82:e0:7a:c9:76:b1:53:5d:
                    55:ae:32:ea:34:e2:f4:ed:1d:8a:f9:ab:6b:ec:04:
                    cc:8c:6f:0e:01:2b:0c:21:2c:41:98:a6:a7:9d:79:
                    17:62:1b:4f:7b:c8:f7:0e:71:c0:ff:3f:a6:b4:ed:
                    59:20:df:c9:d7:54:38:e6:d9:fa:b4:e5:ae:52:f7:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:2C:BB:AB:4B:5C:39:C7:43:60:97:34:66:EE:6E:06:29:44:93:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/E52CBBAB4B5C39C74360973466EE6E0629449393.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.116.0/22
                  45.178.180.0/22
                IPv6:
                  2804:5f6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269098

    Signature Algorithm: sha256WithRSAEncryption
         95:00:9d:04:9a:da:b0:0b:99:c3:e3:d8:9a:05:39:af:0f:2e:
         54:73:bf:01:63:04:9f:5d:f2:5c:fe:d8:36:4f:32:15:31:0d:
         c4:52:1f:ba:47:0d:62:92:cb:43:46:62:34:66:82:90:f2:7e:
         7b:14:f9:3b:ff:bf:53:6b:3a:3f:96:86:4f:d2:02:52:77:76:
         84:1a:36:34:ce:14:0e:7f:be:0f:e3:85:b4:a4:fc:14:84:e5:
         a7:43:ea:f0:20:85:a6:a6:ff:df:06:f5:38:57:b3:38:0b:f5:
         03:4c:be:18:d6:96:00:83:34:69:2e:6f:db:13:1c:76:29:02:
         81:47:04:18:5e:03:07:62:42:e6:00:1c:cf:06:be:4a:0d:d3:
         79:5d:8a:a5:1c:29:da:f6:07:4b:a2:ee:0b:ef:ff:38:4a:ee:
         25:66:41:66:10:7d:cc:49:8d:26:0d:ec:19:e9:d1:af:9a:57:
         b8:e2:88:c8:93:ae:c9:86:39:aa:10:d0:57:bc:4e:ee:78:47:
         bc:e6:1c:87:a3:3e:f4:d5:5f:96:4b:40:f1:f2:3d:99:19:66:
         b8:17:2a:a8:f9:85:a7:50:d7:58:89:2a:a9:71:eb:3a:91:d1:
         12:c6:f6:1c:ac:e3:ae:1a:d6:a4:8b:c9:df:fd:24:3d:9d:d3:
         77:0a:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org