Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6390BBAAFAC21FCFD5624E34B352562B6BFCA8C.cer
File:                     E6390BBAAFAC21FCFD5624E34B352562B6BFCA8C.cer (raw, json)
Hash identifier:          BLuXG+4ssflNm3wzgYKfcmmCrbiYLQPy0Tci6cpO8/Y=
Subject key identifier:   E6:39:0B:BA:AF:AC:21:FC:FD:56:24:E3:4B:35:25:62:B6:BF:CA:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49F6F59C2010EECB79B16AB05D808C0283002048
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/E6390BBAAFAC21FCFD5624E34B352562B6BFCA8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 18:09:44 +0000
Certificate not after:    Thu 14 Mar 2024 18:14:44 +0000
Subordinate resources:    AS: 266584
                          IP: 45.7.116.0/22
                          IP: 2804:3e44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f6:f5:9c:20:10:ee:cb:79:b1:6a:b0:5d:80:8c:02:83:00:20:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 18:09:44 2023 GMT
            Not After : Mar 14 18:14:44 2024 GMT
        Subject: CN=E6390BBAAFAC21FCFD5624E34B352562B6BFCA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:25:c8:47:f2:be:9e:46:88:0a:9e:10:51:
                    71:df:d5:5a:48:14:25:83:d4:b4:6f:42:ac:ab:1d:
                    db:94:f3:d8:3b:40:36:a4:59:a5:ca:d3:d9:a8:0b:
                    10:b0:f3:81:8c:07:ff:2e:2d:96:74:6f:38:7e:2f:
                    47:5b:1e:2b:0c:4c:f5:2f:42:18:cd:58:0c:71:56:
                    ef:7b:96:9c:66:58:8a:49:85:d6:f6:f0:c9:6b:d9:
                    17:af:06:fa:04:1c:1c:c4:65:57:41:7c:65:74:70:
                    4f:8e:5f:ae:60:16:fb:24:d5:67:c2:5d:8c:f0:20:
                    25:f8:3f:6f:18:b8:61:c9:c1:84:38:82:e6:a2:17:
                    aa:a4:bf:14:29:a0:f4:6f:d0:d7:25:89:c1:0c:3e:
                    2e:fb:3e:e8:e2:17:af:3c:3b:cc:a6:67:6a:5a:38:
                    5b:b7:8d:c0:15:f5:0f:57:63:5f:e1:a0:a9:a1:ff:
                    32:77:a6:91:39:25:bf:48:d9:0a:b2:06:b4:bf:92:
                    96:72:36:d0:bb:ef:69:43:7c:a0:d1:72:1f:3d:96:
                    1f:50:03:91:07:ac:e3:c6:3a:90:d1:66:d3:e2:75:
                    36:3b:1d:0e:7c:60:db:29:4d:eb:b1:e8:58:c0:b2:
                    af:b9:30:2c:4f:49:ff:ca:43:fc:eb:41:b9:f6:19:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:39:0B:BA:AF:AC:21:FC:FD:56:24:E3:4B:35:25:62:B6:BF:CA:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/E6390BBAAFAC21FCFD5624E34B352562B6BFCA8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22
                IPv6:
                  2804:3e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266584

    Signature Algorithm: sha256WithRSAEncryption
         49:da:bb:bf:0f:8e:40:15:e6:9b:e9:4e:ee:8b:9c:8d:c2:49:
         25:e6:f2:00:e5:d3:93:79:c5:f9:7f:d0:52:ff:b5:45:09:81:
         91:00:9f:75:5f:89:69:e4:b7:4b:f7:83:e5:77:79:89:36:e3:
         f1:75:c9:b3:2a:7e:9e:64:33:77:ce:aa:fa:a8:4a:8e:fd:9d:
         a5:0b:cf:aa:5a:17:e0:ef:de:f8:6a:68:68:a0:d0:23:4c:24:
         a5:c5:9d:1b:4f:5c:34:f6:37:cf:90:a2:d5:c3:b4:1e:1b:2a:
         4c:3d:a0:4b:44:35:29:e3:09:5f:83:6d:23:bd:f6:f0:45:6f:
         2d:e0:d3:9d:91:85:36:46:a3:72:6b:1b:d5:26:88:a8:31:93:
         4d:44:6d:b0:bb:c0:c2:16:9b:3d:a5:68:c0:f4:c6:61:d6:a9:
         57:54:59:47:55:e6:31:8c:0d:60:30:dc:70:6a:b2:1f:f5:10:
         41:da:0c:85:c6:98:be:a3:f4:0e:18:36:62:aa:11:69:b6:31:
         fb:91:bf:e3:f0:4c:a7:0a:a5:dd:39:ac:29:94:fd:2e:28:d0:
         6a:e5:1d:e4:49:43:f8:71:d3:a6:52:5c:e7:74:d4:3f:0e:18:
         04:91:ef:00:93:63:74:3e:bd:e8:2c:e9:61:2c:39:ff:ea:f1:
         60:40:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org