Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.cer
File:                     E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.cer (raw, json)
Hash identifier:          kZeZSDdmbcWsmD3AZ5HhvrZN+AO9UPMP4Qn9hk26qio=
Subject key identifier:   E9:EA:EC:4D:89:AA:64:07:33:62:88:01:7C:2F:CC:BF:BF:BB:CB:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EED0F47BDA0583DB7E06BE4971D93582D6136DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jul 2023 14:05:47 +0000
Certificate not after:    Mon 08 Jul 2024 14:10:47 +0000
Subordinate resources:    AS: 263356
                          IP: 191.37.72.0/21
                          IP: 2804:14e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ed:0f:47:bd:a0:58:3d:b7:e0:6b:e4:97:1d:93:58:2d:61:36:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 10 14:05:47 2023 GMT
            Not After : Jul  8 14:10:47 2024 GMT
        Subject: CN=E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:ca:f4:79:1c:52:e7:c4:3c:f4:03:c8:be:
                    4b:f6:84:a0:da:4e:fe:d8:14:ca:df:da:92:26:30:
                    7f:7d:90:69:42:e5:12:24:86:bb:77:a9:e4:49:2c:
                    fa:ba:14:07:c0:5a:4f:84:b4:78:85:53:96:1e:68:
                    ea:7d:90:41:55:29:d9:1e:c0:5b:e2:08:73:3a:a4:
                    57:9d:d1:93:91:bf:23:14:95:38:ae:ec:d0:dc:a2:
                    ee:70:23:94:8e:73:51:cd:de:7d:ae:c2:38:4b:08:
                    e7:bb:14:0d:08:c9:e9:b8:c9:9c:49:9b:90:a3:77:
                    8a:38:69:58:6a:82:c4:4d:79:fb:5c:bc:e4:2d:39:
                    01:b1:00:27:2c:0a:e7:41:01:e3:b8:e1:cd:cd:dd:
                    0b:04:e4:5b:c5:79:f3:06:70:f0:de:92:23:1c:a8:
                    66:e6:92:f3:f2:fc:d7:01:a5:bc:5e:1f:4e:3f:d0:
                    81:72:fc:75:40:6a:52:47:6f:c0:72:82:41:40:6d:
                    e0:90:0d:24:dd:6e:c7:de:0d:55:6e:a6:a1:d8:fa:
                    fa:99:bf:bb:a1:37:3a:ed:7c:2f:bf:87:62:6b:c5:
                    74:b2:e5:19:ee:df:74:42:90:e1:f1:93:1b:e3:a5:
                    5d:32:11:be:9b:65:0b:45:b6:b8:72:74:7c:f6:16:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:EA:EC:4D:89:AA:64:07:33:62:88:01:7C:2F:CC:BF:BF:BB:CB:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FnbNUbnKno4bxE7nsVgb2wzncDHBDNC51kQfAuWKXuSu/0/E9EAEC4D89AA6407336288017C2FCCBFBFBBCBC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.72.0/21
                IPv6:
                  2804:14e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263356

    Signature Algorithm: sha256WithRSAEncryption
         b7:c9:32:60:a4:66:88:71:03:7c:9b:01:dd:c4:10:87:ba:b3:
         7c:32:d2:de:8f:07:08:df:84:2c:26:97:1f:e3:ea:ca:b1:91:
         0c:ce:f5:9f:a3:91:86:3a:35:4d:37:22:a6:ab:14:77:f5:58:
         d8:c4:04:ce:d5:68:f7:7f:d4:5b:7a:ac:a7:73:d6:71:00:c0:
         a5:69:b1:00:63:3e:c3:e4:ec:a6:f0:e1:e7:ef:66:11:48:90:
         58:c5:89:3a:5f:77:52:a1:0a:b6:91:2f:3e:d1:37:0e:78:c5:
         67:4f:0c:ab:94:47:08:f5:a5:4b:fa:9a:a2:de:39:7a:11:7d:
         83:85:e8:ad:72:ad:0e:f0:51:1e:8d:1c:65:6a:80:a2:0d:73:
         59:92:62:05:b1:f8:34:53:62:4f:fc:2a:2c:9d:72:ad:09:0e:
         b8:1a:1a:51:ee:1e:75:d4:ec:98:4e:a2:0e:de:bd:70:20:8d:
         d5:46:de:d7:c8:a6:f4:e7:d8:da:ed:a7:b3:6b:f3:36:66:79:
         3d:98:77:3b:35:91:e2:7d:af:e2:b4:5f:be:aa:0f:d6:b1:13:
         21:59:9b:b5:55:50:e7:fc:59:5c:05:96:18:13:2b:d6:93:8d:
         38:d4:3e:13:7f:97:f0:5e:93:2e:55:1d:27:ed:3b:df:1b:8c:
         97:81:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org