Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC1EE79463AC0DE0927DAC537E3288C9AA6018F5.cer
File:                     EC1EE79463AC0DE0927DAC537E3288C9AA6018F5.cer (raw, json)
Hash identifier:          VUlf0npOQ9zMKAIVEpwCCpdY1qpU5Tw7G+uQqaomeTY=
Subject key identifier:   EC:1E:E7:94:63:AC:0D:E0:92:7D:AC:53:7E:32:88:C9:AA:60:18:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60ED1A93A1954F5D8C2E9C223C3639F0E01DF01A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/EC1EE79463AC0DE0927DAC537E3288C9AA6018F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 18:36:53 +0000
Certificate not after:    Mon 16 Dec 2024 18:41:53 +0000
Subordinate resources:    AS: 266375
                          IP: 170.80.52.0/22
                          IP: 2804:36d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ed:1a:93:a1:95:4f:5d:8c:2e:9c:22:3c:36:39:f0:e0:1d:f0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 18:36:53 2023 GMT
            Not After : Dec 16 18:41:53 2024 GMT
        Subject: CN=EC1EE79463AC0DE0927DAC537E3288C9AA6018F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:8f:1e:b9:e1:65:e4:28:c0:b7:16:e6:be:
                    a0:a6:40:d2:43:77:07:ad:dd:ef:ae:1b:5c:02:58:
                    bf:03:f8:c0:64:4f:e4:d2:71:c5:d3:eb:c2:be:07:
                    dc:f8:e0:a7:43:22:10:37:c4:cd:b0:d2:8b:2a:60:
                    09:e9:6a:91:f2:0f:e7:76:42:38:40:a2:a7:7c:15:
                    31:69:8a:eb:e3:d2:c1:30:50:df:62:4a:ac:a1:43:
                    c5:c9:b6:26:8d:43:d4:f3:a3:50:7b:36:af:35:f0:
                    2b:b2:00:bc:47:91:dc:8f:98:31:19:96:3a:cc:12:
                    6a:28:45:16:21:dc:58:e6:8b:72:f7:9a:ac:c6:86:
                    fb:62:27:83:93:48:87:84:8d:51:14:91:e2:9a:1a:
                    a7:03:bb:ae:9b:19:f9:59:d4:bc:33:aa:a0:de:bc:
                    9c:42:62:c9:f5:ef:86:0d:5b:7d:6e:15:04:f2:6d:
                    27:7a:3b:e0:2a:f6:16:f5:6e:40:19:c1:2c:0d:25:
                    80:b9:31:36:64:67:8e:f6:55:f6:58:ed:6a:98:95:
                    0f:27:e1:1f:a1:36:f0:3f:79:7c:e5:a9:e6:06:9d:
                    4d:fe:1c:e8:04:5b:33:50:d3:41:c6:a2:d1:98:33:
                    57:f1:77:a5:cd:9b:e9:d3:cc:a4:84:12:eb:36:ca:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:1E:E7:94:63:AC:0D:E0:92:7D:AC:53:7E:32:88:C9:AA:60:18:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/EC1EE79463AC0DE0927DAC537E3288C9AA6018F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/22
                IPv6:
                  2804:36d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266375

    Signature Algorithm: sha256WithRSAEncryption
         6f:f4:fc:16:7f:85:e8:fc:d9:35:a8:b4:87:1f:cc:5d:2e:80:
         0d:5c:f7:c4:5a:90:78:c3:81:7c:56:5d:ef:9c:6d:07:52:ae:
         5f:a7:71:62:9e:26:a1:c3:1f:3c:3f:f6:4c:44:a5:d3:53:5a:
         1d:6a:96:86:98:eb:5e:f9:88:56:d4:10:48:8e:1b:1d:b3:85:
         29:76:a1:1c:81:3c:cd:ef:6a:a9:22:92:f0:1b:bb:1c:47:ed:
         de:3c:86:b6:ed:2a:b6:19:2b:3b:08:a2:62:8d:0f:b9:21:3a:
         b2:0e:f7:13:36:81:38:2c:08:3d:ad:4c:1e:3f:d8:21:c8:ac:
         72:eb:d5:e6:90:b5:1d:ef:7c:9b:15:d3:af:c8:76:d9:b8:b2:
         82:e8:18:49:82:b0:78:29:28:ff:7b:1b:47:54:3e:4c:c0:c8:
         f9:3d:02:ef:66:15:66:4f:f2:12:d5:5e:61:99:18:14:82:79:
         03:31:da:11:0a:84:c4:d7:cb:89:7e:35:ff:3e:df:a4:62:da:
         d8:5d:db:bd:fc:90:aa:53:80:d7:e6:83:d6:b0:99:ab:2c:90:
         4c:5f:a3:21:a8:cd:42:a4:bc:3a:fe:90:a2:36:20:48:d9:e7:
         ee:8b:cb:22:f0:6f:27:c5:a3:8c:06:18:f2:65:76:a3:8c:f5:
         6d:55:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org