Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6E20F39149B8A982191C8965AE44694A186B567.cer
File:                     E6E20F39149B8A982191C8965AE44694A186B567.cer (raw, json)
Hash identifier:          OyTUu+fDiNbnaag89/znVLKSsPC9gOjf1mvoZNx9x7I=
Subject key identifier:   E6:E2:0F:39:14:9B:8A:98:21:91:C8:96:5A:E4:46:94:A1:86:B5:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       144661B2DCC6ED9729F212FDB2C1A87752AFE6A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/0/E6E20F39149B8A982191C8965AE44694A186B567.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 20:40:43 +0000
Certificate not after:    Mon 27 May 2024 20:45:43 +0000
Subordinate resources:    AS: 263649
                          IP: 131.0.96.0/22
                          IP: 138.94.76.0/22
                          IP: 143.137.236.0/22
                          IP: 170.82.148.0/22
                          IP: 170.150.84.0/22
                          IP: 177.74.144.0/22
                          IP: 2804:10c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:46:61:b2:dc:c6:ed:97:29:f2:12:fd:b2:c1:a8:77:52:af:e6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 20:40:43 2023 GMT
            Not After : May 27 20:45:43 2024 GMT
        Subject: CN=E6E20F39149B8A982191C8965AE44694A186B567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:59:7a:cb:72:19:dd:71:b9:45:c0:12:d9:5b:
                    2a:ee:78:b9:32:31:1d:dc:b5:91:c0:bc:29:a1:29:
                    8b:39:b2:c7:9e:ce:86:c9:6d:7e:74:42:df:d1:d5:
                    67:b5:79:2f:6f:e9:7d:7f:cb:ec:a9:b9:0e:d0:da:
                    9a:3d:d8:85:45:ae:70:e5:86:d4:8b:41:fd:f8:9b:
                    3a:91:7a:df:ee:5a:89:1e:da:c3:b7:73:65:9e:90:
                    25:61:3a:72:9d:2b:9b:2f:c7:21:b4:8b:73:2b:8a:
                    6f:b8:bc:01:8b:0d:78:83:b1:b5:e1:b9:1a:7a:40:
                    9d:c9:74:76:58:d3:dd:1e:64:fd:c5:48:e6:9d:35:
                    de:32:01:d2:b2:f3:06:0c:2f:85:80:af:db:38:e3:
                    aa:ef:b5:eb:44:de:c6:9c:f8:28:57:6b:51:e5:0d:
                    e9:29:40:1a:ea:7d:84:1a:5e:9d:33:4e:0e:b4:2d:
                    8d:f3:ef:3c:27:2c:3b:2d:cd:c8:36:8f:8f:c6:12:
                    03:2e:65:57:34:f7:a1:ae:77:b7:ba:d0:51:3f:71:
                    7b:b9:16:cc:46:e7:9b:d5:b5:a2:04:e2:91:03:83:
                    4d:77:e1:1e:e8:54:f1:3a:24:9c:2d:34:d2:d7:bd:
                    6f:a5:91:30:ba:32:b8:5b:74:fb:43:fd:e9:81:66:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:E2:0F:39:14:9B:8A:98:21:91:C8:96:5A:E4:46:94:A1:86:B5:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/0/E6E20F39149B8A982191C8965AE44694A186B567.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.96.0/22
                  138.94.76.0/22
                  143.137.236.0/22
                  170.82.148.0/22
                  170.150.84.0/22
                  177.74.144.0/22
                IPv6:
                  2804:10c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263649

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:76:26:69:66:5d:6c:3c:9b:77:fe:27:e8:58:6d:2f:4a:
         32:61:ab:a9:93:1f:bf:cf:45:61:90:05:e7:46:56:18:d7:40:
         4b:d1:5f:59:ab:39:ec:60:30:5b:92:08:1b:01:2a:74:3c:5a:
         e9:e1:9e:1a:95:9a:23:94:03:2d:eb:37:9a:71:2c:7e:8b:d9:
         34:91:72:6d:d0:d5:48:44:fd:f8:9b:49:31:c7:a0:9e:eb:5a:
         be:26:11:cb:6d:e5:68:5e:aa:9b:61:d8:2e:68:c3:f6:ee:cb:
         18:b1:e9:bc:9b:d4:58:54:6a:e9:1e:16:ca:f1:80:17:ba:a5:
         8e:10:6a:5b:9c:7b:0e:32:bf:83:e7:43:d4:62:13:b9:8b:20:
         f5:2d:35:8f:26:94:b6:93:dd:b1:0c:49:25:01:1f:0e:32:33:
         3d:af:15:a8:a8:6a:39:66:a1:7e:b2:81:52:45:1f:1c:77:25:
         a3:49:2a:db:ee:e4:a4:c0:73:2f:47:5e:61:b2:1e:cb:b9:d9:
         5e:52:ef:6c:48:32:6c:a7:8e:21:b3:14:52:09:4f:80:e5:66:
         95:33:4a:f5:a1:19:c2:0c:3d:e3:2d:60:31:90:9b:ef:e6:a5:
         42:b1:d4:4c:91:24:e9:c0:e0:c3:50:a4:b5:f7:b6:b3:4d:eb:
         fc:a3:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:45 2024 by rpki-client on console-ams.rpki-client.org