Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer
File:                     E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer (raw, json)
Hash identifier:          UnT/6LNgUjgRkGNmXLolxCk/pQy/LlOy4ladvzln8eA=
Subject key identifier:   E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C9F2590455C32C2C0F1D068ED2E125E59508C22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 20:14:59 +0000
Certificate not after:    Tue 05 Nov 2024 20:19:59 +0000
Subordinate resources:    AS: 268632
                          IP: 45.164.156.0/22
                          IP: 2804:5428::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9f:25:90:45:5c:32:c2:c0:f1:d0:68:ed:2e:12:5e:59:50:8c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 20:14:59 2023 GMT
            Not After : Nov  5 20:19:59 2024 GMT
        Subject: CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:3a:9b:89:09:32:26:2b:e4:9f:a0:6d:fd:
                    c7:58:2f:50:1b:6e:b9:e4:b1:23:8d:f7:4b:e8:1f:
                    4c:8f:8e:0b:08:b4:45:f7:21:68:c8:83:c9:0a:d8:
                    08:69:58:7a:43:b1:5f:e8:73:35:c6:1b:1c:d0:66:
                    3e:34:22:db:40:41:fe:a6:1d:a6:bd:78:ef:30:65:
                    50:0f:84:e6:ab:30:c2:36:30:68:13:1d:89:56:41:
                    2b:a8:ac:8a:b8:c6:68:92:5a:09:b6:88:5d:7d:d9:
                    b2:54:74:7a:37:f2:ba:26:cc:9c:f8:d8:07:ac:27:
                    ae:69:71:bc:91:b1:b0:4c:2d:b2:3d:95:63:24:c0:
                    cd:2d:c8:f0:23:9a:ae:7b:0e:d4:74:13:79:95:ef:
                    ba:e1:8f:67:82:48:ce:48:3c:d5:36:c1:85:93:5b:
                    0d:76:1c:37:4b:7a:6b:00:fd:fc:34:34:34:b4:fc:
                    70:ee:67:fe:95:2a:28:4f:33:c4:6c:bf:d6:d4:eb:
                    6a:3a:fe:25:8f:d1:21:3c:24:ec:64:bf:e6:99:29:
                    9b:53:22:f3:12:6b:19:9b:bd:50:90:60:83:b1:68:
                    7f:92:50:d4:4e:05:13:81:f3:78:76:a8:da:d1:0b:
                    cd:36:9c:4a:ec:ec:96:bd:4b:50:28:cf:3f:a6:38:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.156.0/22
                IPv6:
                  2804:5428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268632

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:4f:e4:e0:4f:f2:35:df:e7:19:69:6e:f1:c0:43:c2:95:
         eb:c4:4f:48:a1:45:eb:f7:cd:47:70:e6:d0:ae:04:56:e1:ca:
         3f:72:11:20:45:4f:33:1a:c6:fe:42:fc:43:88:34:a2:9a:e7:
         3b:e5:75:eb:05:0c:d5:b8:75:31:11:db:74:bc:b6:6a:42:ec:
         95:13:f9:0b:60:8d:4b:1f:23:12:5c:1e:8b:60:56:f0:1c:16:
         f4:ab:b1:77:00:87:a0:2a:6f:0a:a4:90:05:0e:c3:0e:10:e2:
         03:29:3e:e8:a1:57:1a:2f:ed:9e:69:74:0b:de:7e:e0:2c:38:
         58:11:05:7e:43:18:ac:f4:72:cf:35:fd:68:4c:09:bb:de:ac:
         40:27:1c:ad:59:6d:8c:1e:90:87:94:a4:b3:fe:c1:c9:05:89:
         b7:f1:1d:67:fb:24:34:56:04:65:cf:e9:79:d4:00:74:52:41:
         c4:bf:21:d6:cf:f3:44:43:5b:ac:bf:ce:5d:43:35:e9:9f:12:
         ea:67:cb:1e:af:c6:59:05:01:e8:33:b7:fc:1e:be:66:a8:83:
         f4:cb:62:51:c4:7c:90:b3:38:9f:fc:43:4d:66:6d:d7:af:19:
         85:3e:02:dc:5a:61:ec:aa:3d:25:41:e5:10:3c:48:71:d4:28:
         16:7f:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org