Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
File:                     EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer (raw, json)
Hash identifier:          r7cNmlARfOg6akqRpdXsD3XtUMzQyg9wlK5cVU7Jg50=
Subject key identifier:   EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5872BF09E5F203A0D37BCC9BD7FC48B6B91CC689
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 19:06:35 +0000
Certificate not after:    Mon 14 Oct 2024 19:11:35 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 168.194.248.0/22
                          IP: 2804:6368::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:72:bf:09:e5:f2:03:a0:d3:7b:cc:9b:d7:fc:48:b6:b9:1c:c6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 19:06:35 2023 GMT
            Not After : Oct 14 19:11:35 2024 GMT
        Subject: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:a0:c2:1d:c4:0e:07:a7:a3:6f:51:7c:19:
                    8d:06:86:06:40:6c:83:c2:6e:94:1a:b1:7c:fa:89:
                    a7:af:24:e7:a5:c8:d8:55:c6:ed:20:04:64:c6:11:
                    eb:02:45:12:8c:cb:f1:22:b2:3e:ba:cf:83:56:b2:
                    35:ce:5f:4a:5c:25:89:47:63:41:2d:64:05:d8:e3:
                    4d:a9:9b:8e:37:59:f5:fc:46:52:5e:e2:47:5f:35:
                    3b:8f:af:81:12:6e:cb:5b:2b:72:1c:61:3e:4a:cb:
                    81:7d:64:98:f8:5e:de:12:52:aa:a2:4c:81:f0:0c:
                    cb:57:a1:c0:8f:9e:db:e3:c3:f0:92:cf:09:4a:26:
                    90:07:99:15:da:9c:e6:58:5d:fa:dd:99:88:97:93:
                    73:eb:3e:44:9e:b1:53:8b:f0:66:d8:94:c0:2b:c1:
                    85:11:45:3a:de:32:85:84:db:33:bc:35:f5:3b:f9:
                    b5:5f:60:d9:65:6d:4d:e6:2a:f8:d9:57:5e:c2:70:
                    b0:b2:f0:18:46:9e:29:89:6e:06:41:56:10:69:82:
                    1a:da:79:74:07:d5:38:31:bb:b5:ec:6a:89:a5:93:
                    f6:dc:d2:98:e1:f7:52:25:f6:fc:7d:a1:79:ad:f8:
                    5e:1f:54:f9:99:a5:db:3d:76:f5:67:d0:be:6f:55:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                  168.194.248.0/22
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         67:7a:4d:18:71:18:5f:4e:46:1e:13:f7:70:dc:e7:f0:bd:85:
         ac:95:5d:46:d0:41:97:e6:a6:1b:97:8b:82:5b:af:ce:c4:63:
         ca:f7:4c:66:c7:66:9c:08:bb:61:ac:53:57:23:73:ba:ca:7d:
         40:06:d9:d0:47:dd:e1:64:3f:80:35:d0:fb:65:fb:e8:bb:e1:
         67:22:3b:73:72:f0:1c:df:b1:f5:b8:b2:80:38:c5:73:5f:30:
         1f:eb:7b:bf:42:c8:bf:a5:81:2a:ce:f4:06:44:6b:93:5f:40:
         f6:ca:e5:4e:8a:d9:b9:66:f2:1d:cb:9f:fe:86:25:88:1f:f3:
         d4:90:92:12:ad:9f:27:c4:a0:5a:5b:c4:8e:43:31:dc:e0:03:
         45:88:75:d1:9c:a7:ec:83:9e:cf:71:2a:db:93:46:3a:5c:be:
         d9:5d:aa:57:71:62:84:d7:66:17:02:4d:2c:2c:63:4b:15:01:
         ec:06:8e:ef:7e:b9:b4:5e:2c:c5:fc:91:7d:51:eb:ec:8b:be:
         30:76:ea:b1:2c:01:bb:37:68:9e:f9:31:4f:5c:a8:1f:87:90:
         25:15:6f:d6:e0:97:36:c1:e5:3f:8c:a4:b9:19:21:4e:bf:1d:
         07:28:2c:ac:06:30:65:90:68:d8:d4:3f:75:46:a5:48:1e:84:
         f5:2a:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org