Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.cer
File:                     EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.cer (raw, json)
Hash identifier:          haf6U+lAxiMWdSETjmvFDNMZe/iNx3vXagtQnGFUSd0=
Subject key identifier:   EA:D7:D3:53:8E:D3:01:22:68:FA:CB:5E:A4:CA:C9:AB:92:EC:52:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       202A48F36BDAF0C7ADDE86C34D8E08DEA3E56936
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 03:46:02 +0000
Certificate not after:    Thu 01 Aug 2024 03:51:02 +0000
Subordinate resources:    AS: 262880
                          IP: 168.197.52.0/22
                          IP: 168.227.28.0/22
                          IP: 177.10.232.0/21
                          IP: 2804:2ee8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2a:48:f3:6b:da:f0:c7:ad:de:86:c3:4d:8e:08:de:a3:e5:69:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 03:46:02 2023 GMT
            Not After : Aug  1 03:51:02 2024 GMT
        Subject: CN=EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:92:2e:87:95:f4:6e:bc:62:54:aa:7f:d5:
                    d4:fb:8c:b7:b9:1e:6a:f4:5f:cd:3b:1d:06:60:d8:
                    b6:1d:20:d7:0b:72:58:33:6f:69:c1:61:fb:7b:67:
                    e6:98:22:e4:56:9e:7b:b5:9b:bb:92:a1:1b:97:86:
                    97:eb:bd:7c:27:8e:c8:af:c9:5d:49:f2:13:36:49:
                    b2:0f:97:35:37:c8:af:d5:5e:cb:db:d5:8b:d8:2c:
                    2c:eb:c2:a6:82:6a:e4:fc:f2:8a:ab:4f:a1:b3:82:
                    e6:f8:91:49:74:40:d4:60:bf:ee:26:46:c9:13:a0:
                    1f:da:2c:c6:d1:47:29:27:27:23:d2:f8:fa:32:bb:
                    c0:33:40:37:af:64:2b:63:2d:f1:0a:08:bc:d0:0d:
                    33:f5:43:fb:f3:b9:f8:e2:79:e2:1f:54:31:de:c6:
                    60:2d:6a:b8:d8:e1:1d:46:f2:0f:46:11:05:0e:80:
                    ff:d6:4a:fe:5e:02:99:63:d4:f8:17:81:90:e1:87:
                    89:94:d7:4a:06:d9:7f:7b:05:89:53:dd:0a:0a:fd:
                    b1:a8:72:ef:39:bb:ff:3f:73:9a:e3:29:01:b8:39:
                    d8:e0:05:a2:3f:e3:56:d9:0a:d3:c8:5a:bb:a8:15:
                    c4:e5:31:8a:90:c3:65:61:78:0e:71:e3:ec:eb:89:
                    07:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:D7:D3:53:8E:D3:01:22:68:FA:CB:5E:A4:CA:C9:AB:92:EC:52:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/EAD7D3538ED3012268FACB5EA4CAC9AB92EC52B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.52.0/22
                  168.227.28.0/22
                  177.10.232.0/21
                IPv6:
                  2804:2ee8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262880

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:d9:5f:0d:73:3e:61:70:7b:42:6d:71:67:66:78:bf:f1:
         45:c5:46:7b:1b:87:d3:fc:8a:9b:bd:36:0c:5d:08:31:a1:1c:
         84:f6:11:cd:f3:73:37:d8:bf:af:86:21:d6:a3:07:6a:af:08:
         d7:c2:f8:d6:fe:74:7c:89:97:7e:01:69:bc:8f:a6:89:3e:03:
         c2:1d:58:29:ee:4b:ea:ac:c5:02:8c:45:ab:6f:04:6c:59:e7:
         6b:47:e7:76:ce:83:72:dd:6e:74:63:89:ec:5e:05:f4:7f:6b:
         e6:a2:d3:a5:1a:f3:14:35:63:2c:33:60:a0:7b:32:a7:3e:8f:
         2d:10:8f:a9:b3:e0:42:8e:b0:52:10:13:67:63:41:19:37:98:
         e6:26:96:12:0f:ea:2e:af:6a:12:52:ef:3f:b2:49:29:c8:77:
         c6:47:57:84:55:c4:dd:42:ab:99:95:75:69:4d:e7:fc:97:26:
         d9:f8:47:2e:b1:9b:da:35:b3:9d:58:6e:b2:56:85:0d:08:60:
         94:88:72:13:8f:69:e6:89:c2:c7:73:c7:dc:06:c4:f0:c9:0a:
         39:3e:90:7c:a4:8a:6e:c2:c2:3f:67:e8:23:07:5a:63:e5:a4:
         1e:4b:5f:2c:0c:65:68:b3:66:19:28:4e:de:e3:33:0b:d8:62:
         5a:65:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org