Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.cer
File:                     EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.cer (raw, json)
Hash identifier:          Ko3gklwvGEfJlCo9vTBoWZyEEIJZdI9wvzt4hAtLZMk=
Subject key identifier:   EC:38:9D:E0:8D:FB:27:C1:53:7B:15:EF:34:B9:BA:C0:5F:95:1E:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       569FA50C5F492CA05987D7E119290B507E164B8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Dec 2023 02:56:11 +0000
Certificate not after:    Wed 11 Dec 2024 03:01:11 +0000
Subordinate resources:    AS: 267378
                          IP: 45.234.192.0/22
                          IP: 2804:4c90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9f:a5:0c:5f:49:2c:a0:59:87:d7:e1:19:29:0b:50:7e:16:4b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 13 02:56:11 2023 GMT
            Not After : Dec 11 03:01:11 2024 GMT
        Subject: CN=EC389DE08DFB27C1537B15EF34B9BAC05F951EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:96:d5:02:9b:a1:83:95:07:c9:a8:aa:2e:
                    44:d4:1e:94:bb:a4:58:65:0c:a0:7f:51:f7:4b:f1:
                    6d:06:e4:b2:27:ee:e8:d2:82:8d:12:6b:78:03:8e:
                    94:ef:b4:d1:29:5c:6f:51:1f:ea:b1:5d:7c:e4:c8:
                    29:a4:dd:c6:51:a5:71:11:0f:e6:6f:dd:34:ae:50:
                    9d:00:92:9a:de:40:83:cf:15:52:a8:7a:1a:25:6e:
                    02:e7:03:08:26:87:12:58:4a:49:0a:79:41:26:90:
                    b9:20:ff:87:ce:97:25:40:21:5a:26:e0:01:5d:92:
                    5b:41:85:c1:31:c1:f0:03:be:87:1e:76:71:07:3e:
                    57:e9:b9:97:40:56:b2:d5:bc:fa:33:89:31:80:52:
                    59:49:e3:0c:49:f3:f7:ac:4a:53:23:ad:55:84:e8:
                    a4:10:31:62:19:34:36:27:f4:d7:d7:76:fe:f7:41:
                    83:be:70:01:e0:ff:ac:ac:15:d5:d8:65:dd:8e:f7:
                    6c:d2:be:a0:61:5c:80:4b:c5:4b:64:3b:27:43:a0:
                    a1:03:d7:50:14:56:ae:6c:a6:b8:bf:fc:fc:7f:7c:
                    a3:f2:9a:d8:c9:b0:57:a8:46:2c:8a:1a:1a:09:4c:
                    d4:81:f5:97:29:cf:ca:50:bc:ba:01:3c:11:3b:a3:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:38:9D:E0:8D:FB:27:C1:53:7B:15:EF:34:B9:BA:C0:5F:95:1E:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.192.0/22
                IPv6:
                  2804:4c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267378

    Signature Algorithm: sha256WithRSAEncryption
         75:12:60:2c:1e:41:80:70:5b:c0:5b:ef:22:06:6b:82:a6:5d:
         a8:28:a9:25:b7:39:05:68:41:43:9c:e4:e2:92:58:4d:93:7d:
         bd:91:3b:c4:18:60:98:e4:f9:6f:24:04:ba:6b:5d:97:da:68:
         57:64:38:b8:64:94:33:b7:c9:dd:1c:0d:ec:04:2d:c1:45:95:
         21:16:52:07:cf:13:47:b2:12:23:8b:0b:01:b9:45:06:94:41:
         86:43:23:e7:bc:b9:96:c8:a9:6c:34:f9:31:a3:0c:f7:97:ba:
         14:bc:bc:9b:3a:91:c2:bf:bc:2c:0e:0e:18:52:3e:66:c7:5d:
         6b:f2:25:de:bc:c0:6b:61:d8:42:5d:86:03:54:5c:c7:d6:65:
         a2:b5:97:79:59:77:41:e8:39:16:14:72:32:76:03:52:dc:51:
         24:c4:5b:c8:30:37:8a:00:a4:f0:6d:b4:32:11:dd:9c:2d:07:
         8b:fb:de:1c:7f:7f:db:3b:f5:3e:19:23:9a:88:a0:f6:c8:e9:
         28:7d:16:a6:68:24:b3:53:17:c0:7d:e3:9d:ab:86:51:98:1a:
         e7:73:d9:f1:b1:75:ca:76:f6:9c:4f:4d:13:71:fd:be:24:fa:
         72:e4:95:cf:e3:de:27:3a:78:52:28:3a:0f:01:3e:34:2d:cc:
         c0:44:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org