Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E85BBD2D6DDDAD6310B2B99937024FBFE3488C0C.cer
File:                     E85BBD2D6DDDAD6310B2B99937024FBFE3488C0C.cer (raw, json)
Hash identifier:          ok+Qfcer8LZ9H+S5mpJlw3/2pb0bqRq9M8uZH0umiiw=
Subject key identifier:   E8:5B:BD:2D:6D:DD:AD:63:10:B2:B9:99:37:02:4F:BF:E3:48:8C:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A445DFFC845F49BD995594863DCD97337FC0F92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/1/E85BBD2D6DDDAD6310B2B99937024FBFE3488C0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Dec 2022 12:33:51 +0000
Certificate not after:    Thu 30 Nov 2023 12:38:51 +0000
Subordinate resources:    AS: 267219
                          IP: 45.231.212.0/23
                          IP: 2804:4a1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:44:5d:ff:c8:45:f4:9b:d9:95:59:48:63:dc:d9:73:37:fc:0f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 12:33:51 2022 GMT
            Not After : Nov 30 12:38:51 2023 GMT
        Subject: CN=E85BBD2D6DDDAD6310B2B99937024FBFE3488C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:b9:17:b1:54:d4:f4:92:dc:71:4c:42:99:
                    aa:38:1a:04:c4:23:f6:73:d5:14:f7:8a:d0:b1:ce:
                    88:80:b1:ad:80:90:e0:52:be:17:b0:03:3a:13:82:
                    e6:0b:80:03:f7:c9:4d:08:01:5c:7e:c4:9e:ae:47:
                    b1:df:c5:e7:0a:11:d1:30:87:77:d0:7e:d2:72:c0:
                    9e:6b:ed:27:6d:93:93:73:5f:80:af:dd:67:91:0d:
                    7b:78:cb:79:11:10:6d:bb:e8:5a:2d:5b:56:cf:98:
                    1e:da:a4:d0:7a:6a:1c:33:48:6c:95:95:d3:d8:95:
                    fe:31:f4:92:4e:05:2d:cd:a6:1c:22:31:88:a3:77:
                    77:31:b4:2f:01:af:3e:49:c1:78:42:8c:9a:9f:2c:
                    c3:6e:4c:9a:aa:7d:d6:0a:99:c8:87:d8:2a:2f:99:
                    07:53:1f:ac:19:a8:3f:be:b0:41:75:fc:e2:b4:ca:
                    8b:8d:72:da:92:70:0b:2e:4e:8b:60:92:6b:dc:d9:
                    41:9d:9f:f2:ed:31:87:d4:d7:f1:4b:ff:b7:83:c1:
                    2b:22:5f:eb:e0:ce:c0:db:fc:b7:e6:52:e0:4d:1a:
                    f7:47:9b:5b:ad:ac:43:9e:44:17:b9:c7:ec:d6:64:
                    7c:30:dd:79:b5:c7:60:25:bb:09:28:69:3f:4b:d3:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:5B:BD:2D:6D:DD:AD:63:10:B2:B9:99:37:02:4F:BF:E3:48:8C:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/1/E85BBD2D6DDDAD6310B2B99937024FBFE3488C0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.212.0/23
                IPv6:
                  2804:4a1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267219

    Signature Algorithm: sha256WithRSAEncryption
         72:dc:d0:21:d0:dc:40:a4:14:41:43:34:da:73:2c:08:1d:c6:
         9c:53:84:8d:33:18:9c:71:23:88:d1:5f:e3:1c:6f:8a:fd:1a:
         d2:7a:cf:f1:5e:3d:0b:49:15:88:e5:78:12:8a:79:7d:42:b7:
         ec:97:e5:91:56:6f:44:86:2f:ed:1a:ad:51:6e:b5:5d:2c:fa:
         be:03:97:55:76:31:43:31:5a:87:f2:4f:90:34:b5:3c:cb:bc:
         4a:bd:71:d6:e6:c8:fe:69:57:31:ec:31:2c:1c:b8:5d:0d:e8:
         8b:fe:98:77:da:fd:3f:6a:b2:8a:25:48:43:13:ec:66:95:43:
         2f:cd:3a:6b:13:a1:b3:4c:96:a8:e4:60:c4:fe:85:13:b7:13:
         b2:6e:53:ad:be:76:4d:e6:d4:a4:e6:eb:cc:36:61:e9:18:fb:
         ee:10:93:0f:b1:de:15:b5:56:a6:6c:10:fd:8f:b8:e9:ce:c1:
         9c:22:c3:75:c4:b3:7d:a0:8c:78:76:24:7f:b9:01:7a:6c:e7:
         b1:71:2e:a1:25:0a:f1:dc:ad:4f:14:75:b1:14:9a:34:48:2c:
         ee:43:ec:ba:86:31:06:36:5e:c1:8c:11:b4:39:62:71:78:ee:
         33:9d:00:25:0d:cc:3c:0b:77:6a:9f:53:46:9f:c9:51:cf:51:
         5f:99:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org