Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC.cer
File:                     E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC.cer (raw, json)
Hash identifier:          yZ24+VlGx3NnNZZ/OTABjhPzO0u9wdQHVX09V6LQ6Qo=
Subject key identifier:   E7:B7:37:CB:43:B5:BA:EB:80:28:EE:93:AF:3C:DC:2D:3A:BB:0E:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59166D7C0E075509D63DEBB72ECB1496EAD59939
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ESzYZKiQf4F16rPX3DiUugBQqzrtxFouZoNGGY9qSGLu/0/E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ESzYZKiQf4F16rPX3DiUugBQqzrtxFouZoNGGY9qSGLu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Feb 2024 14:48:49 +0000
Certificate not after:    Sat 15 Feb 2025 14:53:49 +0000
Subordinate resources:    AS: 268988
                          IP: 45.176.100.0/22
                          IP: 2804:5db8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:16:6d:7c:0e:07:55:09:d6:3d:eb:b7:2e:cb:14:96:ea:d5:99:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 17 14:48:49 2024 GMT
            Not After : Feb 15 14:53:49 2025 GMT
        Subject: CN=E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:56:ea:6d:73:e7:b0:ca:3e:3c:c8:a6:06:
                    70:3f:43:46:7d:a0:50:0e:58:8b:4e:fd:a6:09:50:
                    09:92:11:f1:f2:4c:0d:58:d3:9e:41:03:76:58:e9:
                    be:b9:4f:e3:61:c7:38:95:03:f7:c0:7c:0a:ca:49:
                    80:0e:aa:82:bd:be:31:78:d7:95:00:62:5d:57:88:
                    08:09:db:1b:47:dd:80:7c:96:3b:dc:c1:b2:e3:40:
                    0c:17:0a:85:85:b4:c8:0f:a8:02:e7:b8:4a:82:d0:
                    f1:56:8d:73:95:b6:e5:a6:8c:00:f8:d9:d6:19:21:
                    84:76:8d:21:05:a3:e1:f2:1a:7b:ea:84:0d:1c:0a:
                    e4:52:72:cc:5b:04:f0:a6:55:c8:54:da:f8:b4:36:
                    25:14:f3:75:85:c3:ea:7c:7e:c8:40:c9:00:15:e1:
                    91:f3:07:9b:b0:a8:a7:74:f0:8e:9f:63:ef:ca:da:
                    95:d3:66:44:a7:68:81:cd:97:d5:36:84:6a:51:dd:
                    7a:82:48:07:15:65:d9:67:96:04:3d:e7:9e:1d:2e:
                    a9:af:2c:9d:93:75:19:2c:18:cd:04:5a:50:f4:c2:
                    dd:6f:65:e0:30:9e:e3:ca:ac:f4:ce:82:2e:e5:20:
                    c7:73:f4:54:fb:5c:cc:51:b9:ce:f5:c6:e0:02:9c:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:B7:37:CB:43:B5:BA:EB:80:28:EE:93:AF:3C:DC:2D:3A:BB:0E:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ESzYZKiQf4F16rPX3DiUugBQqzrtxFouZoNGGY9qSGLu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ESzYZKiQf4F16rPX3DiUugBQqzrtxFouZoNGGY9qSGLu/0/E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.100.0/22
                IPv6:
                  2804:5db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268988

    Signature Algorithm: sha256WithRSAEncryption
         48:78:ec:11:e7:89:f0:2e:3f:c2:8c:e5:cb:f1:b5:56:69:a9:
         6b:dc:47:e0:d6:3d:09:73:ba:79:7a:c0:c7:5c:4f:41:97:6d:
         4e:91:f8:9e:b2:15:14:2f:4b:14:02:48:90:53:4f:bf:12:dd:
         39:2c:5e:b0:98:7a:3c:3f:33:c8:df:88:5c:ba:72:9e:f2:89:
         c6:cd:98:5e:bf:1b:7b:76:3e:ed:46:03:6f:2e:83:8c:bc:e3:
         20:bb:e4:37:0e:21:c9:15:4c:2a:03:2d:d6:b2:a1:2b:70:74:
         b8:a8:77:ed:3a:72:bd:5e:a8:f6:28:9e:d6:e6:6c:32:64:9e:
         f3:e3:2f:6c:29:fe:41:90:a6:4b:06:87:4a:51:a9:99:98:dc:
         1e:e0:a1:4a:bd:bd:1d:0d:5a:77:f7:a1:c4:92:30:5d:12:03:
         cc:86:18:8e:03:2a:d7:c0:26:2d:5c:76:a1:4a:ba:07:43:e9:
         d5:41:a6:95:0a:56:c6:52:30:72:f8:2f:7f:d4:55:85:d5:fd:
         c0:f9:ed:b5:22:2f:2a:1a:a9:d7:1f:df:8d:59:c5:42:29:0b:
         9d:d9:bb:93:16:c2:e9:8f:2f:cd:eb:c1:1f:a3:7b:0a:b8:6a:
         7e:a1:59:54:b7:9d:78:64:4e:2b:ab:38:ff:d9:73:7e:d5:0e:
         dc:34:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org