Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6FE20D51E3680DA60CD1A0D3231AC6B139F4269.cer
File:                     E6FE20D51E3680DA60CD1A0D3231AC6B139F4269.cer (raw, json)
Hash identifier:          yQND32vTFi571oTR+qWSCLaGpEEtlUX2xTJdQxUnHNM=
Subject key identifier:   E6:FE:20:D5:1E:36:80:DA:60:CD:1A:0D:32:31:AC:6B:13:9F:42:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E25221A3C8D7F28A1096537D70658D17325CC0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/0/E6FE20D51E3680DA60CD1A0D3231AC6B139F4269.mft
caRepository:             rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:20 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:20 +0000
Subordinate resources:    AS: 264212
                          IP: 138.99.160.0/22
                          IP: 187.0.224.0/20
                          IP: 2804:2448::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:25:22:1a:3c:8d:7f:28:a1:09:65:37:d7:06:58:d1:73:25:cc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:20 2023 GMT
            Not After : Sep 16 17:53:20 2024 GMT
        Subject: CN=E6FE20D51E3680DA60CD1A0D3231AC6B139F4269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:51:89:e9:82:84:dd:e1:4d:7c:0e:87:f9:0b:
                    15:47:07:9e:2b:6b:01:6e:bd:4b:91:4c:d6:50:50:
                    41:06:ea:37:86:ef:d6:40:3f:b1:83:84:0f:7d:1e:
                    66:27:cd:95:c7:69:5d:6d:14:76:99:d4:d5:8e:3f:
                    71:1c:71:c8:32:80:eb:3b:bf:37:9a:2a:da:2a:2f:
                    2c:53:73:95:2e:c6:d2:cf:2a:34:0d:4d:1b:b5:4b:
                    b2:8e:58:6e:2d:a3:6b:7d:84:87:bf:3e:8f:18:80:
                    fc:14:55:a1:d3:62:88:8c:cb:5e:af:0d:96:70:63:
                    5d:a6:04:f9:97:2e:9b:cf:52:28:64:22:3e:87:34:
                    45:7c:97:8a:05:a1:dd:67:9d:d8:b0:75:94:78:cb:
                    1b:ae:7a:38:a6:cd:f3:b3:d9:e3:53:4d:4a:de:a1:
                    44:60:26:48:e3:cc:18:17:bd:ba:11:b4:64:ec:c6:
                    d6:d6:cc:61:8e:21:9e:f7:95:4c:86:e0:2a:1e:ed:
                    aa:af:f9:80:e8:a4:2e:e0:7a:65:3c:98:bc:67:60:
                    35:2f:5e:8a:f2:97:d0:1c:f9:28:a0:29:ea:a2:f3:
                    e0:f9:ca:d2:1f:9c:5b:64:9b:0f:f4:4f:72:0a:a9:
                    de:3d:d3:0b:9d:b1:8b:13:2a:8f:3f:82:71:a2:3f:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:FE:20:D5:1E:36:80:DA:60:CD:1A:0D:32:31:AC:6B:13:9F:42:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/0/E6FE20D51E3680DA60CD1A0D3231AC6B139F4269.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.160.0/22
                  187.0.224.0/20
                IPv6:
                  2804:2448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264212

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:22:7f:0d:28:da:40:dc:ce:c0:6e:68:e5:85:cc:e2:20:
         b5:3b:ad:c3:bc:46:07:3f:d9:70:5d:b1:2f:db:15:b2:67:80:
         d2:f5:ff:79:d0:54:5a:06:1e:47:b5:c8:2e:c4:40:93:f8:63:
         45:bc:7d:5a:ce:7f:6a:fb:7e:ff:f8:49:48:48:69:1e:19:4c:
         e1:99:56:55:93:db:d2:91:65:cc:94:0c:19:3a:b7:3e:85:cf:
         bb:29:01:c3:79:a4:8b:ad:c8:e6:4f:4b:1b:e0:5d:e9:1c:bc:
         7c:3b:31:fb:d0:2c:50:39:7d:ba:02:38:4c:e7:7c:09:c0:74:
         52:53:1e:b9:52:d2:6b:b6:c5:f9:0e:bd:38:be:0f:6c:0a:44:
         1e:8f:53:3a:61:e0:b5:8d:23:85:38:24:de:ea:68:20:15:95:
         a7:4a:3d:6b:2a:81:4a:1a:cc:8d:52:25:57:e3:e6:2c:cd:00:
         b9:d9:96:dc:d5:ca:32:f1:0f:1c:f6:52:4b:3a:f9:e3:8e:6e:
         dd:1a:c6:64:3e:c4:ce:e2:a6:50:d8:b9:52:a3:58:bd:0e:d7:
         e2:a8:b6:27:aa:ee:a9:f8:0a:39:19:b1:a3:0e:3b:16:3f:5d:
         84:f0:bb:02:90:d8:fa:dc:a3:49:c1:ce:e1:93:e5:aa:40:3d:
         72:2c:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org