Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6A9D5FFE22EFC7AE7708B61A784F2FDC2B77A59.cer
File:                     E6A9D5FFE22EFC7AE7708B61A784F2FDC2B77A59.cer (raw, json)
Hash identifier:          mu71fu+qaOgF/0xGcZWrQKEGpomB6JrVsrHHEjjCVRs=
Subject key identifier:   E6:A9:D5:FF:E2:2E:FC:7A:E7:70:8B:61:A7:84:F2:FD:C2:B7:7A:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D506DEECFAE8D41C9ED52B12A45AAE3BD7C6B60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/E6A9D5FFE22EFC7AE7708B61A784F2FDC2B77A59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 30 Apr 2023 18:51:34 +0000
Certificate not after:    Sun 28 Apr 2024 18:56:34 +0000
Subordinate resources:    AS: 269517
                          IP: 45.188.72.0/22
                          IP: 2804:65d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:50:6d:ee:cf:ae:8d:41:c9:ed:52:b1:2a:45:aa:e3:bd:7c:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 30 18:51:34 2023 GMT
            Not After : Apr 28 18:56:34 2024 GMT
        Subject: CN=E6A9D5FFE22EFC7AE7708B61A784F2FDC2B77A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:c4:71:9c:59:1f:c5:fd:38:7c:65:ed:a6:
                    c9:dd:ed:78:11:4d:d3:dd:20:d0:d7:c4:d2:bf:d7:
                    2b:e4:b1:65:82:ad:7d:cf:e4:8f:08:31:ca:ec:85:
                    ab:23:29:f3:5e:aa:58:ef:34:78:49:5e:73:c6:a8:
                    a8:4c:2a:26:16:d4:07:96:78:fd:99:65:52:14:a8:
                    3e:c9:f1:8b:c7:cd:8d:ea:9a:db:2d:47:67:40:2f:
                    29:16:bf:0e:52:93:7a:84:2a:97:69:be:c0:02:0b:
                    ab:bb:3c:05:e8:04:80:1c:2d:2f:98:a9:fe:a7:0f:
                    20:5b:8e:f5:38:61:50:eb:84:19:96:b1:8a:a9:c7:
                    b7:ff:9c:e1:ae:88:f0:69:01:61:59:d0:96:d6:08:
                    80:db:63:f1:5e:3c:6e:3e:e8:0b:bb:08:67:c0:9e:
                    c5:05:6a:13:6b:a5:b0:90:de:7f:3a:fd:2a:0d:73:
                    49:65:43:42:e0:9f:19:0c:26:04:ae:11:41:0a:02:
                    fe:33:66:43:4a:d7:dd:7c:fe:a1:15:73:93:f6:b1:
                    f2:49:15:4c:0d:13:48:e8:cd:cb:a9:81:cc:46:85:
                    fb:c1:05:49:9b:9d:f8:0a:89:5d:51:8d:54:04:3a:
                    1c:4f:be:02:3f:1e:29:99:86:38:09:19:ad:31:a2:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:A9:D5:FF:E2:2E:FC:7A:E7:70:8B:61:A7:84:F2:FD:C2:B7:7A:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/E6A9D5FFE22EFC7AE7708B61A784F2FDC2B77A59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/22
                IPv6:
                  2804:65d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269517

    Signature Algorithm: sha256WithRSAEncryption
         60:2b:d9:5f:fc:45:bf:79:13:6b:d7:35:fe:61:e6:d7:e1:f4:
         cd:39:f0:c5:00:54:de:a4:30:28:1f:ab:df:e7:dc:9b:d4:43:
         1b:d7:1a:97:88:b7:1e:96:6d:8c:60:0c:a0:47:c5:d3:e4:6d:
         16:41:a1:aa:92:cf:b6:81:09:cc:4b:ff:a5:89:6d:8f:f8:54:
         ba:3a:43:c2:1f:be:72:9a:61:ea:fe:65:8b:df:34:77:b4:52:
         f4:50:ed:df:94:0b:b1:9f:b7:fe:4b:5b:27:1f:2d:fb:19:fd:
         0a:e4:35:38:ff:ff:6b:5f:83:8e:36:d9:3e:ec:ed:37:3e:3b:
         a4:ed:6a:c6:29:aa:2f:84:39:c9:96:b7:f4:f1:4c:2b:99:62:
         d4:69:0b:43:b5:9e:58:8b:7b:ff:3a:e9:1c:9c:91:45:be:58:
         83:91:9f:36:2e:ab:b4:eb:06:b0:87:a8:9a:73:63:62:58:73:
         06:bc:09:c1:93:ce:e0:0a:1d:3b:b4:b4:94:7c:94:db:2a:12:
         0d:56:80:bb:d1:e6:a3:2c:e3:a4:50:c9:29:4a:3e:0a:72:82:
         f0:dc:c4:da:d6:8e:dd:e7:f1:44:b1:99:db:cc:21:a1:ad:58:
         09:78:1a:ee:63:be:87:35:f4:6e:8a:93:40:59:6b:0a:aa:44:
         29:8b:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org