Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer
File:                     E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer (raw, json)
Hash identifier:          XQ0woMC2vNLyzkSVJyc5hPzE8P3k2F2JqTD7B25m4Ak=
Subject key identifier:   E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0314179097BFACFCDA49E8FE71530CE3BBE728C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 20:51:32 +0000
Certificate not after:    Fri 20 Sep 2024 20:56:32 +0000
Subordinate resources:    AS: 268913
                          IP: 45.175.228.0/22
                          IP: 2804:5c84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:14:17:90:97:bf:ac:fc:da:49:e8:fe:71:53:0c:e3:bb:e7:28:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 20:51:32 2023 GMT
            Not After : Sep 20 20:56:32 2024 GMT
        Subject: CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:47:f5:9e:04:5d:14:04:5f:8c:88:e4:91:
                    68:89:22:aa:3e:32:ff:2e:c1:1e:51:c1:d7:af:9c:
                    1d:69:bd:5f:cc:7c:79:44:05:f4:4e:f9:28:9a:36:
                    f5:5f:da:81:e8:02:0e:47:58:55:b3:2e:1f:b8:a4:
                    e2:b0:cb:ef:60:6a:00:a6:5c:0f:1c:84:8d:ba:21:
                    ed:34:8b:71:a0:6f:11:ec:b1:65:db:37:a9:c3:67:
                    52:ef:29:a1:16:12:72:10:35:f3:13:dd:f8:a8:1b:
                    3a:ce:32:d9:f6:8f:cf:9d:cc:6b:6d:a7:04:e1:9d:
                    0f:55:68:34:bb:1c:af:60:f7:27:11:55:03:b1:2a:
                    a1:ff:1f:fa:3d:02:87:08:9e:f1:3e:f5:62:b6:b3:
                    ad:2d:84:57:aa:25:6e:27:a9:42:91:54:ab:fe:8f:
                    48:17:37:87:a1:0d:8a:6f:c3:6b:6a:00:04:20:0d:
                    df:b8:1b:d3:0f:f9:b9:6b:11:32:90:cf:89:47:79:
                    de:03:17:b2:c4:0c:76:4e:16:b8:d4:8a:df:a4:23:
                    c5:fe:c6:c3:2e:68:c2:f4:06:ab:34:20:3b:47:ee:
                    fe:c2:8f:6c:b2:07:7b:67:5e:bb:cf:3c:0b:33:3b:
                    97:1e:f0:3f:f5:3f:29:63:97:bd:cf:8b:48:f6:bb:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.228.0/22
                IPv6:
                  2804:5c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268913

    Signature Algorithm: sha256WithRSAEncryption
         06:ac:0b:57:6e:40:d6:ed:ad:fc:37:96:28:10:d9:57:a4:c2:
         ab:c9:9c:45:f3:58:26:0c:b1:42:ab:f8:65:66:3b:3a:53:df:
         69:66:e3:49:3d:68:cb:bf:66:1e:c3:0e:99:88:7a:4f:31:34:
         99:7d:3d:72:e9:e1:d9:6b:da:e6:93:ed:9f:4e:79:10:bc:78:
         3b:fd:2d:a1:e1:1a:15:9a:eb:1e:c7:d3:af:9e:07:dd:99:df:
         9a:61:a2:92:47:63:5d:45:95:06:78:17:aa:45:b8:41:78:82:
         84:64:5a:af:eb:94:7c:a0:af:1c:86:99:5c:d7:21:b6:a6:b6:
         57:fa:27:d9:f7:7b:73:5e:b7:83:b3:6b:9a:c9:96:cd:59:47:
         29:37:d4:38:c1:70:f9:ac:46:ea:97:f6:47:39:0b:c3:07:44:
         89:5a:74:4a:4d:6c:1c:de:b7:52:df:ae:f6:fa:fb:b8:23:af:
         3a:64:74:7f:2a:70:d2:b6:51:0f:f1:5e:7b:52:78:e0:b9:2f:
         db:ac:6a:d3:c0:95:07:bf:2d:9e:1c:2a:2e:8b:a1:05:fe:68:
         f9:d3:c5:a8:57:ed:3d:9f:6f:2f:b8:be:2a:cc:5b:03:fa:72:
         bc:8a:7e:58:5b:d1:63:53:42:58:fd:c2:73:7a:e8:7e:a2:9a:
         27:a9:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org