Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.cer
File:                     E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.cer (raw, json)
Hash identifier:          QdhIzFLQn3/9+vtbXl985t4w1cZcyc6vBbTEuqOlUNw=
Subject key identifier:   E9:CF:EC:E0:D0:D2:F4:78:E7:4F:51:A1:BA:EA:88:E2:F2:4B:36:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       742217884FA3F62CD2684CABEE30C3B3C04DEF9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 11:50:15 +0000
Certificate not after:    Thu 30 May 2024 11:55:15 +0000
Subordinate resources:    AS: 272758
                          IP: 2804:883c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:22:17:88:4f:a3:f6:2c:d2:68:4c:ab:ee:30:c3:b3:c0:4d:ef:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 11:50:15 2023 GMT
            Not After : May 30 11:55:15 2024 GMT
        Subject: CN=E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:4c:28:68:c4:92:77:8d:55:28:7f:89:b1:
                    89:60:6c:26:3e:30:ac:03:13:0e:72:70:43:f7:a5:
                    ce:20:5b:00:7c:c1:28:66:73:80:1f:d9:56:df:cd:
                    e8:3c:2c:10:4f:8c:5b:1a:cd:7c:75:6e:8a:3c:02:
                    8a:17:fc:3d:e1:59:10:d6:f4:1e:24:16:52:93:f6:
                    49:60:d1:2e:1e:28:69:88:fd:ef:1d:ea:0f:46:05:
                    32:38:ee:26:ef:14:56:63:a6:f5:7e:9c:a2:58:16:
                    56:ee:9b:06:ce:84:0c:56:14:c1:c9:d6:e6:54:18:
                    c5:7f:28:7b:94:22:94:70:47:e1:e3:1f:34:1b:6e:
                    e3:5f:6f:f1:a6:40:35:66:09:20:ac:9d:84:34:0c:
                    78:59:d2:ee:aa:75:49:1c:1a:fe:3d:ae:49:9b:70:
                    d9:2b:9f:ae:64:d5:c7:bb:e4:aa:49:d6:b5:5f:fd:
                    1a:ab:ce:b4:b4:56:1d:61:58:9a:1a:ca:08:d1:b7:
                    da:5c:15:83:f2:52:23:50:bb:99:78:3d:9d:ae:f9:
                    0c:6a:9a:d4:23:82:f5:c2:bd:48:d6:e0:ff:c1:92:
                    29:c5:30:49:e1:c3:b1:16:dd:23:a1:34:4e:2a:d2:
                    87:ea:dd:54:ee:91:3c:1a:b0:c1:a8:b8:85:b4:82:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:CF:EC:E0:D0:D2:F4:78:E7:4F:51:A1:BA:EA:88:E2:F2:4B:36:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:883c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272758

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:e6:7c:1b:32:fe:f2:5e:51:26:34:d0:fe:34:56:da:d4:
         7a:bb:6c:b7:da:6e:51:4e:02:03:a3:27:ed:54:c4:80:65:ea:
         56:fa:c3:8b:7b:31:aa:40:6b:0d:ff:25:8b:2a:f8:af:50:bd:
         93:0c:99:61:de:f7:ac:25:e8:0b:f5:17:2f:17:b7:ba:77:2e:
         e4:3f:33:27:e0:c4:9a:a2:b8:c7:c7:6b:b6:58:3a:60:3c:b2:
         c5:17:0a:af:19:f6:f6:63:57:f3:e1:f2:86:3e:92:cf:9c:41:
         b5:87:f5:82:87:41:b9:41:9d:ea:65:b0:4a:1c:89:ac:7a:83:
         ed:17:27:f4:4d:e5:0c:bb:27:c0:0f:18:82:38:ed:4a:90:f3:
         08:1d:42:f8:b1:fd:21:55:42:92:be:1e:e5:14:89:de:5b:08:
         c4:69:db:e8:d9:bf:0e:8f:e6:64:5d:56:0c:af:70:31:68:96:
         25:57:05:98:2d:cc:4c:b4:4c:87:c5:27:50:dc:65:3a:f9:33:
         95:0b:5e:cc:55:9f:50:25:36:ad:a7:57:30:50:c8:89:61:1e:
         38:17:2c:84:47:d3:cc:b4:ee:40:0d:0b:bf:19:d5:5d:05:3b:
         a2:68:f9:05:86:6b:96:3b:70:c6:2c:10:96:f8:bf:df:1e:87:
         d2:dc:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org