Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EABB382D2F133BD8EC34AFC130385C52FE5060A8.cer
File:                     EABB382D2F133BD8EC34AFC130385C52FE5060A8.cer (raw, json)
Hash identifier:          rk7cg982lkIZGz7KMYX7M84aqrqECd8iCvRNuS7JjYc=
Subject key identifier:   EA:BB:38:2D:2F:13:3B:D8:EC:34:AF:C1:30:38:5C:52:FE:50:60:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       585E1128632AE4B2327DC5766A35ACADD5D45EDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/EABB382D2F133BD8EC34AFC130385C52FE5060A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Jan 2023 20:17:33 +0000
Certificate not after:    Sat 27 Jan 2024 20:22:33 +0000
Subordinate resources:    AS: 271492
                          IP: 181.224.76.0/22
                          IP: 2804:7c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5e:11:28:63:2a:e4:b2:32:7d:c5:76:6a:35:ac:ad:d5:d4:5e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 28 20:17:33 2023 GMT
            Not After : Jan 27 20:22:33 2024 GMT
        Subject: CN=EABB382D2F133BD8EC34AFC130385C52FE5060A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:75:9d:65:f2:ea:4c:31:45:92:e4:1d:0f:d6:
                    3b:d3:63:0a:63:c0:da:56:00:15:a8:96:f5:90:bf:
                    d0:05:2b:11:65:57:b9:21:6a:56:80:3e:5c:9d:c3:
                    d7:dc:6e:a1:7e:bd:b4:a5:dc:0a:8e:1d:33:f2:fb:
                    09:67:70:70:a3:e5:d9:82:2f:0e:75:aa:62:65:7a:
                    2d:3b:44:c3:ef:a6:2e:7b:47:93:3d:a1:e4:16:82:
                    fe:d5:3d:00:93:9b:47:e3:d3:32:14:0c:1a:25:dc:
                    18:0a:b3:aa:1f:80:6e:44:45:26:56:31:96:37:c0:
                    1b:fd:da:0f:be:30:fe:e4:48:51:df:8a:b6:44:1b:
                    0b:dc:df:b5:2d:51:a0:d3:27:50:ee:36:56:2a:32:
                    40:c5:18:e1:b9:7b:62:a4:01:88:f6:b6:0b:16:1f:
                    74:84:54:ae:8d:8e:80:6c:5b:80:c7:1e:08:7f:70:
                    e1:93:27:de:fc:87:61:d5:74:a5:0a:60:a1:ff:0d:
                    44:21:56:cd:7e:49:d6:9d:5b:08:79:b4:de:c2:ef:
                    41:db:c3:5b:8f:16:d1:47:ce:dc:a2:fe:26:7e:83:
                    55:b7:84:c0:a4:05:db:3f:97:11:b2:a3:96:20:1c:
                    16:b1:e8:6c:ab:bc:16:9a:99:2f:7c:8c:54:62:1a:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:BB:38:2D:2F:13:3B:D8:EC:34:AF:C1:30:38:5C:52:FE:50:60:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/EABB382D2F133BD8EC34AFC130385C52FE5060A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/22
                IPv6:
                  2804:7c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271492

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:2c:1d:79:df:2a:b0:4a:c8:3b:ac:2a:b1:81:79:af:b1:
         b9:5b:0c:4f:99:bd:13:75:a1:1c:52:7e:61:50:25:df:6b:13:
         d2:cb:06:4d:78:a3:a9:04:25:ff:96:af:93:e0:d7:08:76:27:
         b8:43:31:bb:ab:d4:05:45:9a:cc:54:01:de:bf:f2:53:06:50:
         26:f6:ca:e7:ce:82:80:b8:55:54:a1:01:80:ee:9b:62:6b:66:
         66:ac:9d:2c:55:35:8a:c7:9c:bf:d8:28:f8:1d:79:59:61:3a:
         16:46:2e:9d:1f:77:fc:29:44:de:12:d8:f7:c5:6f:b8:1c:66:
         92:b4:1c:c8:1b:8c:87:5c:78:e2:cb:9e:87:ee:ac:c6:30:d5:
         3c:6b:55:85:23:78:c6:b5:c1:02:2e:11:33:55:73:95:28:d2:
         d0:90:cd:51:09:ac:d0:49:2b:9b:dd:f3:7f:a1:bb:6e:cb:74:
         0e:81:b1:f8:19:e4:1b:72:c5:2a:e8:81:7e:2a:b8:62:a4:ad:
         b6:24:2a:ce:af:d0:2a:3f:5b:82:fb:e5:b2:66:99:4e:2f:52:
         c3:ce:b1:0e:fd:51:ad:ea:56:a6:6d:8c:d2:a4:27:ca:cb:30:
         b1:9c:01:c3:c0:40:86:a1:4c:0e:34:35:6d:77:87:17:84:40:
         61:cc:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org