Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6130CB9EB651F49B8809E86208AF6DA2B9287FB.cer
File:                     E6130CB9EB651F49B8809E86208AF6DA2B9287FB.cer (raw, json)
Hash identifier:          R2LpVEdmj3CE0Wlwdt+OR+XR9oPAHxLnlBkIGuln43Q=
Subject key identifier:   E6:13:0C:B9:EB:65:1F:49:B8:80:9E:86:20:8A:F6:DA:2B:92:87:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5620E00786051310544471CBF6E00377705164E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/E6130CB9EB651F49B8809E86208AF6DA2B9287FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 16:50:14 +0000
Certificate not after:    Thu 06 Mar 2025 16:55:14 +0000
Subordinate resources:    AS: 265224
                          IP: 167.250.216.0/22
                          IP: 170.239.40.0/22
                          IP: 2804:2c84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:20:e0:07:86:05:13:10:54:44:71:cb:f6:e0:03:77:70:51:64:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 16:50:14 2024 GMT
            Not After : Mar  6 16:55:14 2025 GMT
        Subject: CN=E6130CB9EB651F49B8809E86208AF6DA2B9287FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:60:7b:f1:52:9b:26:31:dd:bf:f9:b9:97:
                    5e:89:53:dc:08:d0:c3:ef:e4:fa:6a:eb:38:52:f9:
                    a8:55:97:f6:60:a6:d2:01:bc:57:e7:c3:b7:e6:fe:
                    25:e6:ee:4c:0b:5d:9b:fa:66:fc:05:71:71:a7:9b:
                    9a:61:1c:0a:5b:7f:da:94:5a:96:7d:c3:08:04:12:
                    d2:4e:76:94:2e:fd:8a:37:63:08:47:4a:93:c3:af:
                    ce:13:26:77:25:6b:b5:2e:41:18:ab:ed:82:d5:2e:
                    4f:96:04:01:be:0b:ad:a8:1a:e7:be:72:bc:88:f9:
                    67:54:ea:3a:09:94:4d:2d:49:b1:c6:8b:48:9b:95:
                    37:c4:17:c3:0f:e4:53:21:6a:b4:b2:25:34:1f:ca:
                    56:29:d9:dc:78:81:1d:4d:96:cf:b3:ef:5a:ac:0a:
                    14:43:c0:0d:dd:86:cc:c3:87:47:e0:d3:b9:ad:b1:
                    6c:fa:b4:02:eb:d0:ae:e6:d9:ea:7b:3e:17:4a:71:
                    d8:93:1b:43:05:3a:b6:04:6b:91:83:fe:8a:f7:1b:
                    eb:4b:0c:1b:19:e3:35:bf:c9:51:a0:c6:2d:4f:fd:
                    80:13:7e:d1:32:3c:8f:e9:ab:c0:b7:8a:70:57:d8:
                    c3:9e:26:7c:cd:ff:b1:0d:c3:e4:31:93:aa:b1:f7:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:13:0C:B9:EB:65:1F:49:B8:80:9E:86:20:8A:F6:DA:2B:92:87:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/E6130CB9EB651F49B8809E86208AF6DA2B9287FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.216.0/22
                  170.239.40.0/22
                IPv6:
                  2804:2c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265224

    Signature Algorithm: sha256WithRSAEncryption
         63:93:49:92:ec:38:41:9e:de:dc:c9:a4:ea:52:ea:3f:e2:d6:
         8a:fc:ef:15:d2:75:9c:34:72:ad:b2:7e:99:52:dc:69:21:86:
         4b:13:89:6d:9d:c6:2d:5d:52:b2:f7:f6:16:62:dd:04:02:af:
         f2:a9:64:32:cb:5d:a8:58:73:da:db:48:04:dd:63:5c:9c:db:
         00:29:66:52:e1:37:9b:5d:0a:37:60:89:20:5b:19:82:e6:77:
         fe:7c:28:2d:69:61:5a:82:1b:cb:ad:e3:be:32:a6:93:a0:c1:
         93:82:20:c4:77:9d:9d:23:fb:81:92:7e:0f:1a:df:91:dc:08:
         8e:74:2d:c1:fc:df:ca:d6:3b:35:79:2f:a4:9d:fd:4e:b0:47:
         64:3b:e2:f4:d5:9c:2f:82:fd:18:9c:db:56:44:db:08:25:c5:
         f0:96:95:92:d4:99:cd:50:90:d6:b7:2e:50:d5:39:66:f4:1d:
         94:da:c2:a5:e4:cd:52:de:a0:58:90:5b:00:6d:44:c7:17:a5:
         98:c9:34:90:d4:3c:81:1e:0c:17:1a:64:67:79:7d:d4:ca:a4:
         cd:40:ac:c7:a6:18:f1:a2:f1:ef:ff:1c:d4:b2:c2:a0:93:82:
         d0:62:74:f5:eb:77:76:90:74:47:2e:ae:b7:29:10:6b:d0:77:
         b8:92:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org