Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB2D89484A3D7410D3D07652953086EE0AD9E8C5.cer
File:                     EB2D89484A3D7410D3D07652953086EE0AD9E8C5.cer (raw, json)
Hash identifier:          mARzpkqMt7Bmf2JTCRVrZDxHzJ0nxZBqTzN5KqihZtA=
Subject key identifier:   EB:2D:89:48:4A:3D:74:10:D3:D0:76:52:95:30:86:EE:0A:D9:E8:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B651DC22BBB1D155ADF25C3FCCCEE9308F71C4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9hPWaRz9qwKPdd35FxxMWCcrG5MuHCLwZd34tSYecAS2/0/EB2D89484A3D7410D3D07652953086EE0AD9E8C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9hPWaRz9qwKPdd35FxxMWCcrG5MuHCLwZd34tSYecAS2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Mar 2022 18:34:10 +0000
Certificate not after:    Wed 29 Mar 2023 18:39:10 +0000
Subordinate resources:    AS: 28361
                          IP: 179.97.80.0/21
                          IP: 2804:7c34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:65:1d:c2:2b:bb:1d:15:5a:df:25:c3:fc:cc:ee:93:08:f7:1c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 18:34:10 2022 GMT
            Not After : Mar 29 18:39:10 2023 GMT
        Subject: CN=EB2D89484A3D7410D3D07652953086EE0AD9E8C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:4b:62:3c:7a:1c:0a:91:50:d1:1a:db:2d:
                    00:2f:0e:53:23:13:67:8d:81:12:57:0f:26:91:53:
                    3b:5a:e4:f0:3b:33:bf:8c:77:a8:be:af:33:e2:93:
                    5a:7e:fe:70:d4:a6:03:05:62:e5:92:98:60:4a:83:
                    87:14:17:a3:ef:97:c0:7d:18:b9:28:42:5f:35:af:
                    c5:5f:f4:a6:fb:6d:9c:a9:5c:cf:d2:01:da:88:02:
                    13:58:f0:47:ce:4a:35:80:60:b2:e3:59:33:25:6b:
                    87:41:1a:4e:6e:89:9f:00:28:b9:3f:71:93:d7:69:
                    15:63:a4:5b:44:13:fb:1b:74:47:d9:d8:f3:4c:cd:
                    ae:7a:2f:f9:37:e5:39:93:74:e5:bf:af:9b:a0:81:
                    17:d3:30:42:09:f4:eb:0b:19:a5:2a:a6:19:85:f8:
                    3f:30:f4:b4:46:70:1c:81:02:a2:f0:b2:65:22:52:
                    50:f0:cf:00:e5:fe:c3:b4:ce:53:b6:30:38:e6:8a:
                    01:45:cd:80:0c:ff:4f:58:df:27:8b:e1:89:39:73:
                    fe:c1:83:64:1d:15:8f:7d:10:5a:a1:fa:c3:85:55:
                    5d:cc:97:3a:12:4e:f7:bc:8b:7a:89:bf:0b:23:a1:
                    0e:ae:24:6c:37:42:e2:d3:d4:77:83:97:94:ff:35:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:2D:89:48:4A:3D:74:10:D3:D0:76:52:95:30:86:EE:0A:D9:E8:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9hPWaRz9qwKPdd35FxxMWCcrG5MuHCLwZd34tSYecAS2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9hPWaRz9qwKPdd35FxxMWCcrG5MuHCLwZd34tSYecAS2/0/EB2D89484A3D7410D3D07652953086EE0AD9E8C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.80.0/21
                IPv6:
                  2804:7c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28361

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:aa:00:9d:a3:b7:e6:ba:7f:e4:3c:f1:45:c1:0f:f7:57:
         39:bc:fe:3a:81:f0:ef:79:3c:3e:eb:3b:33:27:80:94:26:ab:
         1c:f5:da:e5:7a:5b:18:d4:87:eb:30:ad:27:19:7d:89:0a:66:
         66:cb:86:95:05:b6:a9:bd:1b:67:59:f6:5b:05:c7:42:a5:63:
         ef:81:5e:06:b6:1f:a3:f0:fd:63:6b:18:39:0b:3b:6c:41:17:
         c0:f7:ed:b6:91:ab:e6:57:9e:c0:6c:30:63:13:9e:b1:de:24:
         f6:21:db:bf:d1:c1:23:ea:4f:74:a2:53:ec:39:20:4a:81:80:
         ae:40:4b:a0:19:f9:cd:61:13:06:5c:c9:0d:3f:c0:f3:48:46:
         ed:1e:5e:15:3b:0a:bb:a4:fa:ec:60:13:53:4c:a0:66:d7:30:
         de:e6:3b:e1:c5:d0:32:ce:1d:07:ae:b9:f2:fc:a0:ac:b0:f3:
         cf:a2:dd:f1:74:fe:87:20:39:b2:ae:90:33:b7:ef:af:6f:ba:
         19:0e:3b:59:d4:45:32:54:9e:42:53:5f:96:47:5e:dc:85:53:
         bd:b2:c9:5c:a2:98:35:90:6a:cb:71:29:ca:1c:66:57:2c:26:
         48:7d:a8:57:1a:93:ed:60:f2:d7:8c:a9:f4:8a:72:fb:6c:00:
         7e:4f:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org