Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer
File:                     EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer (raw, json)
Hash identifier:          q0NRakgYiyhXlC7QEgY+S8POsciMz4kNiwTEQKgax2o=
Subject key identifier:   EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FB1B8C8E81C1EB1AB4D7696CAD590080CE46597
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 20:49:56 +0000
Certificate not after:    Fri 21 Feb 2025 20:54:56 +0000
Subordinate resources:    AS: 268638
                          IP: 45.164.224.0/22
                          IP: 2804:5444::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b1:b8:c8:e8:1c:1e:b1:ab:4d:76:96:ca:d5:90:08:0c:e4:65:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 20:49:56 2024 GMT
            Not After : Feb 21 20:54:56 2025 GMT
        Subject: CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:bf:96:f4:5e:e4:cd:0a:03:31:aa:86:4f:
                    c2:12:5d:bb:63:f0:06:67:1c:34:8f:14:f2:39:13:
                    06:44:86:47:87:8f:4c:97:67:72:60:e9:e7:1a:4c:
                    1e:c3:75:e3:6e:b7:f7:94:06:0a:b8:72:98:6c:bb:
                    30:cc:d5:e0:8f:7d:89:10:25:98:35:33:f9:64:e1:
                    23:ea:fb:0d:59:32:7e:11:55:40:94:b5:db:f9:5c:
                    c4:89:e2:b7:f4:fe:3e:82:ce:7e:59:94:13:80:ec:
                    23:e6:70:7a:3d:da:f1:37:61:f2:11:ad:46:e7:0d:
                    86:c8:54:90:3a:44:ff:41:fa:8d:92:f6:6f:98:c3:
                    8b:ac:4d:b9:ec:86:82:00:1b:d5:d5:c5:5e:6a:60:
                    5b:7b:ea:f7:31:f9:43:59:09:67:64:2d:16:62:7f:
                    5f:74:a9:97:a9:75:87:8e:e1:9f:94:21:c8:09:81:
                    b2:a4:1b:23:52:ed:95:57:68:b1:65:e8:ee:7d:4b:
                    89:37:98:d7:0f:a5:15:01:f3:41:e4:1a:93:f9:d0:
                    ec:aa:43:71:b5:7f:28:a9:76:13:ec:7d:41:d9:f8:
                    b0:e9:ce:bc:b0:f4:be:b5:9e:23:24:38:ed:37:7b:
                    41:39:15:43:8d:3f:9e:0a:79:c1:27:72:94:a8:ea:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.224.0/22
                IPv6:
                  2804:5444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268638

    Signature Algorithm: sha256WithRSAEncryption
         61:e7:ab:64:7c:f5:bc:4a:7d:90:d4:75:d9:53:16:86:3c:df:
         c0:28:b2:a9:1f:aa:2e:5f:6e:d2:96:37:98:0e:f7:4c:d6:2d:
         e2:e1:a9:fd:12:70:95:33:06:ba:fd:e4:b2:99:97:2b:61:46:
         9a:05:c9:89:be:a3:b3:73:56:e4:89:ef:ec:48:41:fa:f4:0b:
         e8:bd:ff:6b:e1:67:12:eb:06:4e:60:30:56:25:c3:28:e1:12:
         83:84:3e:01:ac:3c:3d:9a:65:eb:cb:f3:c0:18:f9:96:85:6e:
         aa:08:96:8b:5a:82:48:43:54:7e:60:7a:8e:32:2f:9f:b7:b6:
         48:69:f3:e9:f4:e0:55:d2:2e:19:b3:88:a5:28:26:6d:8e:32:
         19:ee:c9:db:ae:f4:a0:66:f4:c9:51:1d:27:fb:28:e3:4a:26:
         19:5a:de:10:af:f8:f5:9c:a4:c3:00:9b:f8:3b:25:eb:a1:21:
         90:16:53:de:8c:15:fd:bb:db:16:77:37:19:db:46:d0:b0:4e:
         09:cb:2c:c0:89:31:77:b5:60:5c:45:41:57:26:e3:c4:0c:47:
         42:7c:c6:ce:46:f6:51:dd:78:27:d2:32:bb:b7:fb:af:62:c4:
         a4:bb:b4:f5:d1:0a:23:88:5b:2e:a6:03:af:32:3f:88:83:d0:
         b4:a8:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org