Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E92C09E555847545CA45DFD7053F8861CCC0046A.cer
File:                     E92C09E555847545CA45DFD7053F8861CCC0046A.cer (raw, json)
Hash identifier:          hlZkl2hdnmzcLC9PLzpFXyBiOq1XGJYo2MlsHPG5GqY=
Subject key identifier:   E9:2C:09:E5:55:84:75:45:CA:45:DF:D7:05:3F:88:61:CC:C0:04:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A50399F106A2FA4D5D9AC69510C5A1CB2ECC4D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/E92C09E555847545CA45DFD7053F8861CCC0046A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 17:23:51 +0000
Certificate not after:    Mon 10 Feb 2025 17:28:51 +0000
Subordinate resources:    AS: 262979
                          IP: 131.255.208.0/22
                          IP: 138.186.232.0/22
                          IP: 168.197.64.0/22
                          IP: 186.226.48.0/21
                          IP: 2804:9a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:50:39:9f:10:6a:2f:a4:d5:d9:ac:69:51:0c:5a:1c:b2:ec:c4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 17:23:51 2024 GMT
            Not After : Feb 10 17:28:51 2025 GMT
        Subject: CN=E92C09E555847545CA45DFD7053F8861CCC0046A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:a9:8e:6c:6a:62:fb:31:3f:13:b9:50:07:
                    5c:82:74:e3:a3:10:c9:b8:36:a3:1f:33:06:51:87:
                    db:16:1d:17:2f:f2:aa:c6:37:54:7c:aa:4c:3d:5a:
                    7e:d9:03:af:ae:59:f9:01:60:bd:30:7a:20:1f:a8:
                    2e:b4:34:14:d7:79:61:7d:34:cd:74:c8:4b:54:02:
                    c8:5e:6d:52:b8:d2:f1:b4:6b:ce:0b:35:b6:6d:b9:
                    1d:c8:1b:65:a8:50:8c:fd:d4:8e:73:c3:f0:de:c0:
                    16:f9:53:da:f0:00:6c:51:83:d6:e3:2a:6c:50:4d:
                    34:c5:0b:cd:86:df:6e:c7:60:71:e0:3c:c9:62:3b:
                    25:65:38:df:1f:51:a6:dd:67:b5:f7:fa:e2:90:2b:
                    35:ee:cf:a1:6d:3d:b0:3f:ce:c9:28:0e:52:f4:60:
                    bf:41:f5:16:de:a0:b8:a6:37:8d:5d:fa:0c:7f:f5:
                    70:9d:e4:04:ab:22:83:76:12:7a:a8:ce:60:71:4e:
                    5e:0e:f0:1c:8d:ce:1e:a6:bf:9c:b7:92:b8:87:df:
                    e4:a9:63:28:e9:f7:01:fb:5e:c5:44:c4:16:62:b3:
                    b2:56:fd:c2:75:64:9f:58:9b:74:ab:2f:fd:3a:a5:
                    65:99:e7:c9:c2:95:77:04:91:53:69:0c:5d:54:2f:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:2C:09:E5:55:84:75:45:CA:45:DF:D7:05:3F:88:61:CC:C0:04:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/E92C09E555847545CA45DFD7053F8861CCC0046A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.208.0/22
                  138.186.232.0/22
                  168.197.64.0/22
                  186.226.48.0/21
                IPv6:
                  2804:9a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262979

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:e7:d7:ea:50:08:26:57:82:c1:d9:07:31:71:0f:8c:c1:
         db:ac:2f:e4:ad:6d:5f:e6:37:2d:f7:fd:1b:76:ef:60:38:7f:
         a8:42:7d:a2:25:e5:3f:e2:3e:51:ad:e2:fc:31:1d:f2:8a:22:
         d1:73:11:07:5c:9d:dd:9c:5e:cc:1c:99:cd:56:e0:60:d0:f5:
         62:e6:0f:b0:38:1c:2b:e7:aa:74:72:e7:ed:1b:40:fd:34:d6:
         71:69:5d:ad:33:b0:e7:2b:50:6a:ca:6c:10:b3:2f:c4:bd:21:
         37:ad:3d:51:fa:cc:d9:e2:33:e7:00:ec:1e:83:4a:97:b1:77:
         15:a4:95:ee:0c:1c:77:e6:06:a6:c3:10:be:7b:6f:51:ea:99:
         83:67:d0:84:c6:91:3b:a1:fa:1b:d4:a9:a6:dd:f1:42:5b:93:
         4f:15:a2:94:d9:78:cc:41:d8:bc:00:32:66:ea:6e:da:e9:71:
         5d:c0:ec:7c:5e:cc:c3:c6:26:9b:c8:59:b8:0f:42:c1:88:f1:
         26:0b:14:c3:66:44:b0:95:28:b5:43:d4:31:7c:b4:9e:c0:cd:
         80:45:57:88:61:4c:e6:ef:4b:bc:89:bb:93:f3:d5:2b:62:35:
         6c:ab:80:06:68:ad:e0:27:e4:49:0e:b0:26:83:dd:5d:5a:b4:
         b6:7d:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:45 2024 by rpki-client on console-ams.rpki-client.org