Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.cer
File:                     EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.cer (raw, json)
Hash identifier:          UXTVLdRwMYMMyvZhrzw/ltDgnBMItravNfx6l9nr8Eg=
Subject key identifier:   EC:25:BD:62:AE:2E:72:DD:FA:24:A0:80:4A:B5:C7:F7:2A:1F:F0:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F5E79679E5B9A094EEE9D7F1732AA2656CF0F1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Sep 2022 18:30:49 +0000
Certificate not after:    Thu 21 Sep 2023 18:35:49 +0000
Subordinate resources:    AS: 267668
                          IP: 45.224.72.0/22
                          IP: 2804:4508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5e:79:67:9e:5b:9a:09:4e:ee:9d:7f:17:32:aa:26:56:cf:0f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 18:30:49 2022 GMT
            Not After : Sep 21 18:35:49 2023 GMT
        Subject: CN=EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:d0:0f:94:e6:26:22:9b:8e:86:7c:c5:44:
                    ac:5f:d9:51:05:97:ff:ca:b6:da:48:75:c2:9c:81:
                    9c:77:c9:1a:81:9a:f8:2b:50:d2:b7:4f:9b:3d:c7:
                    15:c8:0d:ee:3c:23:88:6e:2f:97:3c:d1:17:3b:3b:
                    1e:af:f4:d9:7e:56:d4:41:50:a7:b9:c1:14:6f:cb:
                    c1:8f:67:36:ef:a6:94:13:4f:fe:04:60:88:5c:8d:
                    90:47:13:78:92:36:73:a4:e7:01:44:65:50:d0:df:
                    06:34:2b:3e:0d:b7:e0:9a:d9:40:fe:ab:d8:16:52:
                    d1:39:83:ae:02:58:6e:6b:23:f8:8b:66:73:2a:2b:
                    9f:31:c2:45:f1:5d:83:59:77:fb:d6:75:f4:a2:7f:
                    98:7c:88:07:a1:d3:ff:b7:0d:58:df:27:c1:f2:62:
                    86:8e:25:12:9e:19:8b:9f:e2:7e:ae:76:88:36:f0:
                    6f:08:20:f8:f7:2f:5d:4a:a2:05:77:74:39:51:6f:
                    4b:52:26:6f:6d:0f:97:33:13:c2:fd:34:fc:a5:81:
                    3e:5f:33:05:55:6b:88:6b:05:30:e6:c2:a5:76:6f:
                    9d:94:58:e0:50:83:85:6e:4a:3b:2a:23:61:db:ca:
                    3b:42:cb:23:41:2b:e4:9e:84:f7:68:41:ed:83:94:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:25:BD:62:AE:2E:72:DD:FA:24:A0:80:4A:B5:C7:F7:2A:1F:F0:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/EC25BD62AE2E72DDFA24A0804AB5C7F72A1FF0DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/22
                IPv6:
                  2804:4508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267668

    Signature Algorithm: sha256WithRSAEncryption
         82:f0:ac:c4:c0:5e:24:be:76:a5:8c:b4:18:f1:7b:e0:ab:07:
         30:6f:3c:d8:8a:c7:53:4e:9c:c0:9e:77:57:4c:ba:8b:5f:51:
         33:b3:58:c1:0e:1f:05:74:3f:34:69:ef:7d:13:63:ee:b9:64:
         5a:3a:53:62:b1:d3:c9:e4:ba:6f:16:1c:e0:53:5b:26:c8:b8:
         55:04:cf:78:1a:b4:b5:dc:8b:a3:6c:6f:f2:06:f6:25:34:f9:
         cb:98:dd:04:3a:f9:b8:09:16:ac:c3:90:13:d7:37:8f:85:cc:
         8e:eb:db:d3:8d:05:fe:5b:fa:48:f9:c2:fd:3f:91:9a:97:45:
         61:ea:78:29:3a:b0:a9:35:35:c6:a5:63:4b:06:dc:96:0c:e0:
         70:d6:fd:78:f6:bf:ed:23:61:06:e1:25:21:3b:8c:69:fe:e7:
         85:5d:df:2c:be:a7:ac:be:58:44:9e:4d:a1:a8:15:51:6c:4c:
         54:29:9e:8e:77:45:b9:7c:a1:7c:87:b9:4d:be:2d:61:9c:55:
         e4:ca:bd:4e:7c:a8:aa:7f:fa:04:dc:41:88:26:4d:02:36:a5:
         29:c2:d2:94:a2:71:ba:96:3e:59:ff:2c:f3:91:e6:5d:a2:64:
         7e:db:7e:d0:70:7a:e2:58:cb:71:b6:4c:69:75:3d:24:c0:b7:
         12:a6:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org