Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E8D23BEEA96905773CECCD627FF715A569B77A07.cer
File:                     E8D23BEEA96905773CECCD627FF715A569B77A07.cer (raw, json)
Hash identifier:          WqmvYXJlnAuFtgadGcHGvuKFZiaX9gqXB4h0D8PpjvQ=
Subject key identifier:   E8:D2:3B:EE:A9:69:05:77:3C:EC:CD:62:7F:F7:15:A5:69:B7:7A:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       340B5B517B2A9D7A78EF2AE5AD8560AA12B715FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/E8D23BEEA96905773CECCD627FF715A569B77A07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 12:07:07 +0000
Certificate not after:    Tue 31 Dec 2024 12:12:07 +0000
Subordinate resources:    AS: 268929
                          IP: 45.176.40.0/22
                          IP: 2804:5cc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0b:5b:51:7b:2a:9d:7a:78:ef:2a:e5:ad:85:60:aa:12:b7:15:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 12:07:07 2024 GMT
            Not After : Dec 31 12:12:07 2024 GMT
        Subject: CN=E8D23BEEA96905773CECCD627FF715A569B77A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:b1:7e:8e:c3:69:39:95:3c:63:72:23:9e:
                    39:b6:82:db:bb:80:67:85:68:8e:e7:10:c6:0a:3d:
                    67:d2:e7:c1:33:53:1b:06:0a:bb:fa:9d:43:9c:0d:
                    97:99:0c:3c:b2:1b:1f:0b:8c:9d:9e:ee:f2:28:d5:
                    c8:35:07:53:32:77:81:b3:69:95:70:f3:2a:6d:13:
                    ea:9f:8e:2a:bc:51:b6:58:05:cf:5c:73:6b:74:68:
                    09:a2:22:0f:51:0c:99:82:22:6b:76:d2:d2:b9:ee:
                    17:3e:3c:db:3a:33:0e:c8:ce:a3:63:69:f6:28:b9:
                    73:dd:c2:c4:0c:53:be:0a:43:b0:e2:07:e5:6a:e4:
                    d8:4c:d0:4b:5f:f8:bd:04:00:ba:2a:cd:9d:91:da:
                    86:2e:54:f1:31:f9:19:90:07:3d:ca:de:7d:7d:3f:
                    e6:6c:0c:3a:b1:56:8e:ec:bc:46:1e:10:74:f5:f1:
                    34:74:c4:a1:63:38:26:20:af:1d:7b:da:09:73:d2:
                    57:39:75:67:e7:83:5e:07:3a:99:c7:2a:ac:a5:2b:
                    69:8c:1b:9a:d0:19:3d:0c:ea:2b:f8:89:22:26:0b:
                    b3:e0:fe:c2:33:ee:1e:be:c4:47:db:68:b2:8a:05:
                    5b:cd:7f:8f:1e:83:10:86:ce:be:b9:f1:79:1d:4b:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:D2:3B:EE:A9:69:05:77:3C:EC:CD:62:7F:F7:15:A5:69:B7:7A:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/E8D23BEEA96905773CECCD627FF715A569B77A07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.40.0/22
                IPv6:
                  2804:5cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268929

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:cd:e0:42:4d:39:1e:dd:ac:11:ae:51:6f:ac:44:12:66:
         c3:14:f7:29:f3:29:5a:82:76:5f:b5:7b:91:a4:24:06:32:72:
         f0:74:76:d7:03:a2:5d:4a:0b:ca:09:bf:41:f6:8d:4e:59:18:
         0d:f3:ea:84:21:d6:06:35:b0:3c:08:f9:9e:15:2d:c7:51:47:
         1c:ee:02:ff:6e:f7:a9:96:76:cc:7c:3a:7e:bb:48:7c:f4:87:
         e7:02:7f:b3:92:f0:d9:d3:64:2b:b9:4c:f0:60:6d:ee:e6:e3:
         d0:6c:81:07:02:1c:43:66:83:19:57:d3:21:33:31:57:46:3d:
         fb:c8:71:6b:9a:2e:ac:f0:77:06:2c:97:7e:8d:7a:03:4d:55:
         48:37:33:00:b7:b2:27:87:94:cd:a1:6b:b9:30:e9:e0:bc:9d:
         86:4a:4d:d2:d5:70:59:ad:9d:34:37:6b:d2:22:50:ef:56:13:
         f9:92:0b:2c:85:a9:d4:97:ee:00:b1:b8:e2:10:1c:1e:c0:e1:
         36:5f:34:eb:7f:a1:26:04:8a:cb:53:a8:88:d1:03:b0:7f:2c:
         f5:9b:e2:ad:23:18:6d:e4:5a:12:d4:9f:12:1d:c6:17:59:f6:
         0f:6a:95:83:7f:e7:bb:7e:e2:6e:22:6b:16:70:76:8c:cf:e1:
         63:4c:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org