Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EA4F392E9FAEEA3FC8CED2E9C373C22030A8FCAD.cer
File:                     EA4F392E9FAEEA3FC8CED2E9C373C22030A8FCAD.cer (raw, json)
Hash identifier:          9ZXoTYoIfM2Td2NXeTklg8d1M+onclScDo7oL79efvE=
Subject key identifier:   EA:4F:39:2E:9F:AE:EA:3F:C8:CE:D2:E9:C3:73:C2:20:30:A8:FC:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70D6FC4BA8B0ED7585EB774D7CC24F387880D9F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/EA4F392E9FAEEA3FC8CED2E9C373C22030A8FCAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Feb 2022 13:50:03 +0000
Certificate not after:    Tue 21 Feb 2023 13:55:03 +0000
Subordinate resources:    AS: 268557
                          IP: 45.163.192.0/22
                          IP: 2804:5304::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d6:fc:4b:a8:b0:ed:75:85:eb:77:4d:7c:c2:4f:38:78:80:d9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 13:50:03 2022 GMT
            Not After : Feb 21 13:55:03 2023 GMT
        Subject: CN=EA4F392E9FAEEA3FC8CED2E9C373C22030A8FCAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:52:71:31:87:d6:9b:62:e6:2d:86:75:b7:f5:
                    7b:cf:e6:52:42:c3:e6:d5:78:9f:f6:a5:be:79:4e:
                    56:18:3f:57:d3:7b:7c:5d:2a:eb:c6:8c:92:98:02:
                    ba:73:a7:e0:fd:bf:84:8b:a9:34:58:64:ea:8d:ee:
                    03:db:d4:e2:f1:9d:01:44:2a:4a:fd:8b:03:2c:34:
                    ad:39:65:9a:d0:a5:c8:3d:fb:89:f2:5a:ed:5e:c0:
                    7a:1a:5a:d8:26:f4:11:4f:01:a8:85:75:f1:73:6b:
                    0d:41:6b:b1:6e:68:5c:4f:50:fe:18:73:ca:6e:81:
                    51:6e:96:84:a5:95:4f:5f:df:32:e0:53:f0:c0:23:
                    f8:7b:73:48:49:7c:a4:f7:7a:24:bc:2b:8c:71:f1:
                    67:8f:63:de:36:83:3b:62:9b:93:c8:c7:e5:27:8c:
                    d8:72:1a:65:aa:d9:8d:7e:58:24:42:b5:2c:eb:61:
                    69:b7:0f:37:42:40:45:a0:30:88:a2:1e:9a:9e:9c:
                    ce:04:bc:9f:1c:85:b8:0c:2a:9a:68:6c:cc:d3:9f:
                    f5:65:4e:04:7b:8f:37:5c:bf:f9:80:00:f3:f7:71:
                    b5:3a:43:5f:ee:8b:fd:5e:22:4b:db:1a:3f:a7:2f:
                    d9:de:6f:04:4b:7d:0e:db:1c:14:4f:77:a4:e1:4f:
                    a3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:4F:39:2E:9F:AE:EA:3F:C8:CE:D2:E9:C3:73:C2:20:30:A8:FC:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/EA4F392E9FAEEA3FC8CED2E9C373C22030A8FCAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.192.0/22
                IPv6:
                  2804:5304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268557

    Signature Algorithm: sha256WithRSAEncryption
         01:c2:0c:22:5b:fd:b1:5b:56:a2:ed:22:99:a3:11:16:d6:45:
         f1:eb:ae:43:e4:75:81:b8:50:12:41:fb:74:f8:8a:78:29:bd:
         fb:fc:5d:8a:d4:3d:a6:f4:a1:d9:c7:18:5f:fa:00:68:c1:66:
         13:1d:88:e5:87:fa:c4:1a:65:ad:3e:99:cd:81:f0:aa:4d:81:
         cb:98:a7:b7:43:54:69:68:6f:b2:1b:d3:71:46:6f:50:3b:3e:
         10:9f:94:49:8b:1d:2e:9a:64:53:1c:53:b1:b3:78:2f:99:15:
         53:d0:7d:0c:c3:44:a8:22:07:ca:00:e8:17:08:55:98:3e:26:
         b7:cf:08:6b:9f:c9:4f:96:bd:8c:e0:51:f3:73:28:9a:93:c7:
         34:34:e0:97:ba:4c:b7:0c:12:35:03:96:0e:b1:91:d6:ab:bd:
         be:ae:35:46:96:6a:9c:81:77:a5:80:8b:47:a0:df:15:a4:c2:
         37:83:5a:9d:c5:71:06:2b:32:42:8e:04:3c:18:fc:aa:15:04:
         88:b9:57:7c:a9:c6:21:62:de:69:07:10:dd:1a:77:8c:68:2d:
         54:9b:a2:38:95:4e:8f:f8:f4:6b:35:8b:16:a2:0e:b8:1c:9e:
         dd:ae:bd:23:2e:45:88:7f:ec:85:9a:86:3d:9c:06:96:a5:61:
         d6:85:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org