Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.cer
File:                     E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.cer (raw, json)
Hash identifier:          gARGzkxXZL6zNCBAejbDLQ7jamUwmKH70AnMtaY1xjY=
Subject key identifier:   E5:67:0D:DE:4A:17:4A:43:C6:A5:D5:CC:4A:EE:E3:DD:71:51:23:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58D12C2769E4BAE31E4AD5C46936D94A494E6C82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 18:06:50 +0000
Certificate not after:    Tue 07 Jan 2025 18:11:50 +0000
Subordinate resources:    AS: 267348
                          IP: 45.233.188.0/22
                          IP: 2804:4c14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d1:2c:27:69:e4:ba:e3:1e:4a:d5:c4:69:36:d9:4a:49:4e:6c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 18:06:50 2024 GMT
            Not After : Jan  7 18:11:50 2025 GMT
        Subject: CN=E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:e2:d1:a5:41:28:9d:ce:37:98:b5:62:00:
                    9c:53:af:dc:f3:e3:3e:73:87:36:d9:aa:7f:8e:46:
                    78:25:92:b2:d7:1e:f5:03:cc:b3:e4:14:de:35:c1:
                    17:8d:83:a0:b9:25:b2:e8:f2:37:43:42:d4:c5:c6:
                    ac:f8:16:c2:9f:52:4d:87:9e:f2:29:70:03:db:b1:
                    81:ce:09:92:fb:e9:61:2e:43:df:f1:b8:fd:b3:5f:
                    86:2a:16:fc:6c:e5:d3:01:05:fa:7d:53:ec:17:29:
                    28:80:00:db:34:22:55:18:54:75:b9:82:9a:e0:fe:
                    db:2c:a6:21:18:8d:1b:33:85:93:3f:a2:d9:50:de:
                    ae:fd:b8:96:de:66:0b:25:1e:5f:ff:be:e9:cc:b3:
                    cc:58:a0:b8:98:05:a0:c7:e6:b6:e6:ba:44:f2:41:
                    2c:76:ce:56:0a:e2:d4:ad:b0:61:95:2b:16:d9:90:
                    19:5d:4b:3b:73:66:e9:e6:9c:f4:08:e3:d9:f5:f1:
                    38:ca:e5:4e:9e:48:5d:0c:b3:35:a4:42:f4:f8:75:
                    2b:fc:7b:25:13:fa:48:11:48:ee:96:59:15:c2:b5:
                    a2:62:7f:b0:fa:13:97:a4:f9:f3:26:52:20:29:b5:
                    a8:06:16:86:56:ee:78:6d:8d:bf:73:e8:10:95:98:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:67:0D:DE:4A:17:4A:43:C6:A5:D5:CC:4A:EE:E3:DD:71:51:23:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/E5670DDE4A174A43C6A5D5CC4AEEE3DD71512377.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.188.0/22
                IPv6:
                  2804:4c14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267348

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:b4:16:d6:59:1f:0c:ae:13:95:31:80:2e:d0:6c:d7:4c:
         17:73:27:65:a8:f8:9b:02:dc:c8:d1:b4:8c:89:d4:ec:81:c0:
         88:27:17:13:8e:af:dc:b4:ab:fa:b0:2a:8b:3b:fa:9d:f9:2e:
         4b:4b:bd:78:38:c2:42:0b:ed:3b:45:56:9c:ef:29:3e:2b:9f:
         5a:40:d3:e9:06:93:aa:77:62:d1:27:9c:d6:46:b8:6f:c4:f4:
         cb:29:c6:ad:53:55:6f:72:f7:fd:ab:d8:a8:26:bd:e5:a9:90:
         1a:24:6b:d2:c6:18:54:52:9d:bc:c1:31:a2:69:f6:b5:5b:67:
         32:c6:9d:83:b7:bd:0b:86:6e:55:4e:9f:39:c6:4d:de:c1:97:
         d9:3c:4c:1f:9a:f0:26:64:be:9f:bd:37:5d:ae:11:c4:0c:08:
         d5:2e:57:7c:15:47:a0:90:e4:74:d3:e6:3e:e9:8d:34:68:1e:
         73:b8:3e:82:24:fe:70:7b:62:82:2a:14:9e:89:fb:00:d2:18:
         d8:05:8c:83:2c:4b:2d:cf:ce:d4:e1:92:57:b1:10:eb:db:21:
         f5:09:a9:a8:e5:2a:7a:72:9f:ef:05:98:fa:87:1e:57:97:24:
         86:e8:61:2e:2c:ba:ba:44:2d:36:b5:40:57:8a:c8:1a:ae:ef:
         22:d0:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org