Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6923ECFD545CF5B7BC0A2FFEE946F17B7CB747F.cer
File:                     E6923ECFD545CF5B7BC0A2FFEE946F17B7CB747F.cer (raw, json)
Hash identifier:          iZSokM0hVUK/MkME4DyM+T2THkyGVko/cuaPc6RUB1g=
Subject key identifier:   E6:92:3E:CF:D5:45:CF:5B:7B:C0:A2:FF:EE:94:6F:17:B7:CB:74:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BF628219458028EFEF05DBBFEF08BCE14AAF6E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/E6923ECFD545CF5B7BC0A2FFEE946F17B7CB747F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Nov 2022 19:03:52 +0000
Certificate not after:    Fri 24 Nov 2023 19:08:52 +0000
Subordinate resources:    AS: 28146
                          AS: 28224
                          AS: 262688
                          IP: 45.71.224.0/22
                          IP: 45.227.192.0/22
                          IP: 45.238.108.0/22
                          IP: 45.238.164.0/22
                          IP: 131.100.96.0/22
                          IP: 138.186.116.0/22
                          IP: 138.204.72.0/22
                          IP: 143.208.12.0/22
                          IP: 143.255.100.0/22
                          IP: 168.0.4.0/22
                          IP: 170.0.168.0/22
                          IP: 170.84.56.0/22
                          IP: 170.233.40.0/22
                          IP: 170.245.216.0/22
                          IP: 170.247.192.0/22
                          IP: 177.73.188.0/22
                          IP: 177.75.128.0/19
                          IP: 177.86.0.0/21
                          IP: 177.125.32.0/21
                          IP: 177.126.192.0/20
                          IP: 177.154.96.0/20
                          IP: 177.234.132.0/22
                          IP: 179.127.128.0/20
                          IP: 179.127.224.0/20
                          IP: 179.191.36.0/22
                          IP: 186.236.0.0 -- 186.236.47.255
                          IP: 186.250.88.0/22
                          IP: 187.45.96.0/19
                          IP: 187.87.208.0/20
                          IP: 189.126.48.0/20
                          IP: 191.36.132.0/22
                          IP: 200.229.176.0/20
                          IP: 2804:310::/32
                          IP: 2804:108c::/32
                          IP: 2804:1bd8::/32
                          IP: 2804:26e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f6:28:21:94:58:02:8e:fe:f0:5d:bb:fe:f0:8b:ce:14:aa:f6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 25 19:03:52 2022 GMT
            Not After : Nov 24 19:08:52 2023 GMT
        Subject: CN=E6923ECFD545CF5B7BC0A2FFEE946F17B7CB747F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b0:54:a6:8e:12:cf:f1:29:fe:88:4e:df:22:
                    e9:58:b5:82:c3:a2:9e:9e:2b:d8:88:ce:15:e0:4b:
                    98:d0:95:4a:bd:92:f8:79:23:a2:3d:e5:1c:88:9b:
                    36:91:5f:8e:b0:07:5a:e9:5d:4e:2c:1a:34:6c:6b:
                    4f:eb:d3:dc:45:64:83:f4:d8:80:0c:1f:eb:b3:97:
                    cf:51:b1:e0:fe:67:63:6c:59:8e:92:38:e3:1e:60:
                    8f:22:a8:d6:b6:55:a6:6f:1d:a2:8c:58:ee:9b:ce:
                    72:b1:d1:81:f1:be:d9:28:6a:b6:46:50:cf:b7:85:
                    23:ca:0c:96:18:17:7b:44:9f:49:8f:8f:37:c2:36:
                    9c:f8:af:1a:ab:c9:1d:9e:84:05:59:84:00:5a:05:
                    4a:37:a5:4c:55:ed:94:87:97:f0:3f:e3:13:59:30:
                    36:72:d9:9f:d0:03:0e:d1:8c:31:b0:4d:1c:7f:50:
                    b0:84:1e:27:27:1f:ba:c0:f9:92:c1:ec:80:d1:dd:
                    48:5a:5b:7a:bf:57:1b:b9:a2:a1:7d:ef:dd:ee:4c:
                    38:04:ff:a2:a0:88:45:13:92:ca:88:10:8e:7c:3b:
                    c1:c0:0a:bd:64:ff:c0:9b:61:1d:f3:06:44:3e:d9:
                    a1:7f:5a:d1:4f:ff:38:bc:8c:e3:7d:68:c3:26:3c:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:92:3E:CF:D5:45:CF:5B:7B:C0:A2:FF:EE:94:6F:17:B7:CB:74:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/E6923ECFD545CF5B7BC0A2FFEE946F17B7CB747F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.224.0/22
                  45.227.192.0/22
                  45.238.108.0/22
                  45.238.164.0/22
                  131.100.96.0/22
                  138.186.116.0/22
                  138.204.72.0/22
                  143.208.12.0/22
                  143.255.100.0/22
                  168.0.4.0/22
                  170.0.168.0/22
                  170.84.56.0/22
                  170.233.40.0/22
                  170.245.216.0/22
                  170.247.192.0/22
                  177.73.188.0/22
                  177.75.128.0/19
                  177.86.0.0/21
                  177.125.32.0/21
                  177.126.192.0/20
                  177.154.96.0/20
                  177.234.132.0/22
                  179.127.128.0/20
                  179.127.224.0/20
                  179.191.36.0/22
                  186.236.0.0-186.236.47.255
                  186.250.88.0/22
                  187.45.96.0/19
                  187.87.208.0/20
                  189.126.48.0/20
                  191.36.132.0/22
                  200.229.176.0/20
                IPv6:
                  2804:310::/32
                  2804:108c::/32
                  2804:1bd8::/32
                  2804:26e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28146
                  28224
                  262688

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:36:98:2e:40:56:6d:02:7e:9c:2d:33:bc:07:8d:1c:70:
         5e:53:ee:b5:b3:8e:88:f1:36:3d:b0:30:35:c6:84:11:7a:2d:
         f2:0e:b3:76:2c:f7:e9:15:63:44:e7:fd:55:b4:a7:dc:f7:d5:
         09:2e:64:d6:48:db:db:bb:8c:9c:56:0a:71:c8:62:ed:33:3f:
         18:23:d5:95:10:63:89:6a:65:97:b4:4b:47:ab:b0:4c:f4:c5:
         48:1d:85:05:7c:01:e6:9c:8b:c4:e0:05:44:ae:3d:50:e4:f3:
         cc:8e:8e:6b:6b:b7:01:35:ac:a6:e3:0e:12:8f:2e:28:c0:1c:
         bc:a4:9c:6a:b6:05:c8:e0:ce:04:aa:c6:c3:9f:31:47:bf:e3:
         cf:5d:50:5e:5d:08:e1:1b:ed:4e:da:5f:ec:b9:bd:29:bb:30:
         5b:25:8e:fe:93:0f:ff:ca:9e:a6:d5:8b:be:8c:48:7b:99:b6:
         ef:c5:09:36:43:a4:3e:50:20:d3:86:42:d5:5b:d6:31:9b:8f:
         f4:a2:17:99:16:bd:48:54:5d:0d:3c:51:c2:ae:75:65:1e:e6:
         51:4f:3b:e8:29:df:a5:8c:ae:14:3b:c5:7f:34:dc:24:76:75:
         b5:39:84:63:f3:d1:6f:3a:d8:60:00:01:4e:27:dd:17:4e:dd:
         d2:44:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org