Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.cer
File:                     EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.cer (raw, json)
Hash identifier:          EEQ268s9KfnQt8zE+ve6BdyG+tA8UIItPDTd2C9TbcQ=
Subject key identifier:   EB:8C:C3:0C:62:70:FF:44:79:D0:FD:E7:CA:28:E3:0A:97:4D:12:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FAAEE7C75F5943D1AF34D53BBC7DEC4F61BCB16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 16:38:44 +0000
Certificate not after:    Thu 20 Mar 2025 16:43:44 +0000
Subordinate resources:    AS: 28142
                          AS: 262430
                          IP: 177.39.136.0/22
                          IP: 186.224.64.0/20
                          IP: 187.49.80.0/20
                          IP: 2804:fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:aa:ee:7c:75:f5:94:3d:1a:f3:4d:53:bb:c7:de:c4:f6:1b:cb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 16:38:44 2024 GMT
            Not After : Mar 20 16:43:44 2025 GMT
        Subject: CN=EB8CC30C6270FF4479D0FDE7CA28E30A974D124F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:27:78:51:79:37:fb:22:e3:58:1e:01:aa:
                    5a:ca:89:0a:26:76:f8:50:53:15:67:d0:0b:2a:c6:
                    57:c5:86:ec:82:27:47:db:ed:d3:64:af:2d:b3:68:
                    a4:52:5a:a7:a6:59:62:6f:5e:29:66:d1:65:aa:ef:
                    f2:43:f1:61:e1:6f:a7:11:5a:84:60:b1:6c:36:ec:
                    9d:60:6d:12:61:60:13:56:22:38:3d:15:43:37:60:
                    7f:bb:4b:f0:63:da:ab:a4:d7:a8:c1:98:24:7e:e5:
                    77:c5:d7:93:05:42:d8:cb:1c:e4:f6:3f:b8:ff:9a:
                    39:12:6b:99:46:dd:5f:1e:2c:96:a7:23:5d:dd:e0:
                    7c:f0:27:6c:0c:b5:bf:22:2b:ae:ff:a4:8d:83:cf:
                    23:5f:c9:3f:9b:6a:e7:b3:b4:21:cf:60:9b:c0:33:
                    d4:f8:57:5b:8c:58:90:80:30:c1:2f:ea:b9:bd:7d:
                    52:99:3e:b2:00:fb:0d:31:83:38:29:2d:ad:96:4a:
                    81:24:03:83:41:57:40:14:80:3c:59:a2:20:ba:f1:
                    d9:14:f8:02:86:a2:67:96:fc:81:1c:1f:26:a7:a7:
                    56:8a:c6:15:96:bf:35:fd:19:ba:1e:cb:09:fb:a1:
                    6b:7b:9d:25:3b:79:4b:2b:34:96:02:81:88:51:89:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:8C:C3:0C:62:70:FF:44:79:D0:FD:E7:CA:28:E3:0A:97:4D:12:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.136.0/22
                  186.224.64.0/20
                  187.49.80.0/20
                IPv6:
                  2804:fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28142
                  262430

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:66:2f:3f:54:30:75:10:cd:4e:bf:2a:36:8d:c4:a2:25:
         d4:e7:25:59:d2:90:fa:62:68:e7:5b:41:ef:3a:0c:30:5a:99:
         b8:ae:4d:08:5f:a6:10:b4:b8:f0:4e:85:27:ad:6b:f3:00:58:
         4f:a6:12:1a:42:f9:f5:94:ee:3f:c6:34:7e:6f:cc:77:e3:33:
         89:c1:6f:65:ce:ea:0a:c7:dc:6a:fc:f6:fb:c4:9f:77:26:ba:
         bf:75:5c:4d:06:a7:8e:dd:88:64:b2:4a:e7:26:fc:c0:b4:16:
         1c:52:a4:ba:69:a3:36:64:d3:35:7d:ad:c6:23:39:34:b0:55:
         15:20:4b:58:82:4d:75:ec:26:2f:b3:13:3d:50:ac:38:d5:0b:
         55:66:f4:2e:9d:ae:80:27:68:93:18:6a:c2:32:54:0a:11:e7:
         ba:54:b3:c9:fc:9a:e7:ce:fa:f2:5a:4d:68:ab:f5:32:fa:1b:
         19:ce:ee:80:d4:55:2b:1c:b4:f8:8e:a5:e3:26:88:4c:b8:75:
         73:c3:e0:ed:f2:28:a7:85:cc:d5:b2:ad:1a:47:32:09:9f:1f:
         7b:a9:bd:7b:49:c1:64:5e:45:54:6d:85:a2:b3:95:01:87:b3:
         35:cf:7a:af:e5:8d:31:51:db:46:3e:ec:27:12:38:e3:f3:09:
         19:33:a6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org