Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6184D8BB1C557C4F12D98B42E67FE52E30443A1.cer
File:                     E6184D8BB1C557C4F12D98B42E67FE52E30443A1.cer (raw, json)
Hash identifier:          72gcF4lop4oGghqnVtwWa83vEhQdZaYr7UrxSvL5cp8=
Subject key identifier:   E6:18:4D:8B:B1:C5:57:C4:F1:2D:98:B4:2E:67:FE:52:E3:04:43:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D3F92591602079E49CE07DCF61B3D83C5576432
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/E6184D8BB1C557C4F12D98B42E67FE52E30443A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 21:55:11 +0000
Certificate not after:    Wed 20 Mar 2024 22:00:11 +0000
Subordinate resources:    AS: 262363
                          IP: 177.126.240.0/20
                          IP: 2804:84c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3f:92:59:16:02:07:9e:49:ce:07:dc:f6:1b:3d:83:c5:57:64:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 21:55:11 2023 GMT
            Not After : Mar 20 22:00:11 2024 GMT
        Subject: CN=E6184D8BB1C557C4F12D98B42E67FE52E30443A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:c3:ae:a2:db:b9:4e:2f:f4:2b:c0:96:71:
                    55:7c:67:d3:56:be:73:59:b8:1c:c3:89:75:c7:d2:
                    42:fb:a3:99:bc:f5:47:66:69:fd:99:fa:3f:af:8b:
                    cd:f1:75:54:29:96:78:20:dd:27:a3:ed:8a:e9:cc:
                    b7:5a:af:cc:09:e6:b0:b0:ee:df:48:a5:48:b4:45:
                    47:7e:f4:1c:85:30:05:95:78:ba:d8:6a:ef:dd:86:
                    77:9f:16:3f:de:a9:17:3a:87:d0:34:84:38:f3:62:
                    36:cd:bc:23:bd:e0:d3:c7:ae:16:f3:29:29:b6:c0:
                    08:18:6b:0c:9b:2a:4b:b6:c7:f7:1c:ca:18:86:31:
                    2e:46:23:b2:e6:6e:56:a6:96:6b:ec:bb:cf:f8:61:
                    2d:33:63:68:a6:71:97:df:69:0d:e9:49:20:77:31:
                    8d:1e:b3:36:13:30:29:4b:ff:16:d7:a1:7b:87:dd:
                    a9:aa:74:eb:4a:c1:ce:ec:75:11:5f:0b:65:6c:71:
                    49:f9:61:6d:93:e9:5d:07:a5:35:35:65:e1:81:e0:
                    15:9e:02:00:40:ac:17:2a:a4:c0:c6:cc:fc:f4:b2:
                    34:39:1d:2c:cd:c5:3c:a7:02:f7:ac:7f:1e:de:41:
                    c8:29:f9:70:c5:47:5c:e6:f9:be:e0:db:bf:55:e8:
                    ab:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:18:4D:8B:B1:C5:57:C4:F1:2D:98:B4:2E:67:FE:52:E3:04:43:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/E6184D8BB1C557C4F12D98B42E67FE52E30443A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.240.0/20
                IPv6:
                  2804:84c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262363

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:28:c5:03:58:4a:1c:33:7b:b3:a3:c9:a0:d1:8f:5d:29:
         ba:a0:69:6f:c5:49:a0:75:0c:61:12:7c:04:c8:0e:ca:46:55:
         7f:2f:06:61:dc:7d:c0:bb:23:79:57:ba:b0:69:1e:07:c6:ba:
         8c:fb:46:c6:61:28:e3:f4:9e:35:61:4c:b4:05:e9:e9:d5:52:
         ed:a8:0b:f4:ec:c4:33:cf:84:0e:dc:a3:d0:7a:ef:fe:32:c6:
         63:a3:00:c5:55:ca:a2:87:29:fa:b0:5f:b3:47:9d:49:d3:27:
         48:15:07:36:d6:c1:45:ed:90:67:19:f8:86:22:f4:99:b7:75:
         1d:94:ed:a9:77:44:a3:ac:92:c3:aa:f2:ab:46:b3:8c:18:b7:
         ec:0e:66:5f:98:c0:94:ea:8b:b5:5c:4a:c4:2a:43:28:1b:c3:
         99:5a:a2:03:e8:57:08:fb:19:24:e4:81:8c:bc:27:c3:89:05:
         57:ab:27:10:27:83:54:1c:22:d6:03:73:6d:72:e9:2c:51:ed:
         e7:ad:02:7b:dc:e5:6e:fe:2b:57:94:00:62:c6:20:7b:66:ad:
         86:6d:b2:e6:42:2a:ee:ec:93:ce:b0:e2:cc:79:68:83:67:14:
         dd:92:e8:74:3b:da:4e:fe:47:e6:00:f3:25:a6:fc:23:53:cc:
         5c:57:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org