Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB74AE14B6387B3CA84854FD9E48785797E8F327.cer
File:                     EB74AE14B6387B3CA84854FD9E48785797E8F327.cer (raw, json)
Hash identifier:          JVEvmJjg+CBoC4gM6lQNLcswstjNk7jqgMa6WZFKW/s=
Subject key identifier:   EB:74:AE:14:B6:38:7B:3C:A8:48:54:FD:9E:48:78:57:97:E8:F3:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29F8B2DF1C426FF404D3575FB7ECA2C052022FC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/EB74AE14B6387B3CA84854FD9E48785797E8F327.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 15:54:36 +0000
Certificate not after:    Tue 31 Dec 2024 15:59:36 +0000
Subordinate resources:    AS: 268034
                          IP: 45.167.172.0/22
                          IP: 2804:56f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f8:b2:df:1c:42:6f:f4:04:d3:57:5f:b7:ec:a2:c0:52:02:2f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 15:54:36 2024 GMT
            Not After : Dec 31 15:59:36 2024 GMT
        Subject: CN=EB74AE14B6387B3CA84854FD9E48785797E8F327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:06:ff:2f:fa:d2:45:a2:61:a8:19:23:0f:
                    0a:98:b7:3e:67:78:91:ee:cf:15:ab:b6:3b:aa:81:
                    2a:b8:8f:7c:f6:2b:8a:e9:44:3e:fc:5f:59:5a:a9:
                    9c:7d:b5:9d:55:9e:d2:41:3b:f5:84:b9:d2:a4:07:
                    01:07:07:ec:ef:93:74:6e:2e:56:72:ae:56:8d:1b:
                    a7:10:00:ce:80:6d:82:c4:a2:df:e6:f8:70:ea:c9:
                    b1:c9:a3:d7:91:d5:b6:f5:e6:53:c8:ab:99:ed:9e:
                    5d:90:93:83:e5:81:cd:5b:8c:4b:4f:fb:ed:81:08:
                    bb:eb:96:a6:9a:54:11:3e:f0:96:40:5d:4d:87:87:
                    46:4f:0f:23:83:82:c0:f1:4e:05:e3:6d:b3:dc:51:
                    58:24:39:b4:07:3d:da:02:12:af:94:8f:44:ee:24:
                    ce:09:d2:68:db:f4:1f:0d:e8:0c:a5:5c:d5:c6:db:
                    02:48:5d:47:37:39:a4:3c:95:57:c1:84:ac:7e:c4:
                    8d:2d:f7:ab:0d:b4:82:bb:fa:c5:2d:d3:d3:bc:23:
                    3a:85:85:aa:1e:ba:47:0e:0b:c5:35:43:fe:77:be:
                    1b:7c:a4:2f:3b:22:47:3a:35:f2:e1:51:69:b9:56:
                    86:5c:b5:d1:35:b5:38:9a:45:64:59:83:ad:a8:7c:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:74:AE:14:B6:38:7B:3C:A8:48:54:FD:9E:48:78:57:97:E8:F3:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/EB74AE14B6387B3CA84854FD9E48785797E8F327.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.172.0/22
                IPv6:
                  2804:56f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268034

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:08:6e:51:ed:eb:32:03:90:49:4a:02:16:e1:df:10:56:
         45:27:c7:0f:c8:a3:44:b6:de:ad:61:d6:f7:28:1f:f0:8f:06:
         14:a3:de:6c:96:00:b0:13:47:38:18:b6:56:d7:89:b4:b8:7e:
         f0:e1:b3:9e:ee:82:ef:9c:7f:0a:c9:b4:b0:4f:63:af:ef:f7:
         9e:9c:bb:7a:bf:78:80:87:18:38:c2:a4:09:c3:91:c0:d1:11:
         c3:bd:27:7d:6b:ae:f2:4f:b8:c8:10:49:fa:df:7d:49:9d:4f:
         82:4a:c1:f4:da:c2:0e:80:dd:79:39:71:1b:88:9c:4e:8f:79:
         25:21:b8:a1:c0:5a:47:ae:08:37:dc:fb:ec:d9:81:ba:41:07:
         6a:4e:9d:37:56:d3:4d:0b:50:a1:d7:cc:ef:5d:ac:ad:df:21:
         46:ab:b6:cb:33:33:99:90:a9:a5:5c:cb:5b:42:9f:4c:4d:b8:
         bc:45:c7:e5:12:97:2a:69:87:ef:56:80:c9:4e:8b:67:8d:32:
         f8:27:8b:e2:5c:1a:7f:e6:c3:01:4f:8a:8d:06:4b:e1:7b:83:
         44:42:6c:00:68:ed:af:cb:1f:3f:66:b4:57:b9:8b:7f:dd:1c:
         dd:d6:6b:6f:f8:fd:ed:1c:f7:30:ff:f7:ef:88:3f:0c:9b:5d:
         f2:b6:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org