Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer
File:                     EC49574725049721FFA5AC0390E08D942C56EE07.cer (raw, json)
Hash identifier:          0elLN2MsfTB5SopCyvUnL+9Y5PMIr1xLy3/bVB7Dgog=
Subject key identifier:   EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25F4F516ED36D6772F5710B55D73EB8B9E4C45BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/EC49574725049721FFA5AC0390E08D942C56EE07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 17:14:24 +0000
Certificate not after:    Thu 12 Sep 2024 17:19:24 +0000
Subordinate resources:    AS: 272717
                          IP: 167.250.124.0/23
                          IP: 2804:8790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f4:f5:16:ed:36:d6:77:2f:57:10:b5:5d:73:eb:8b:9e:4c:45:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 17:14:24 2023 GMT
            Not After : Sep 12 17:19:24 2024 GMT
        Subject: CN=EC49574725049721FFA5AC0390E08D942C56EE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:ec:d6:29:2c:5b:f2:af:72:54:60:be:15:
                    d8:9f:b4:70:a0:e0:a6:a8:52:59:61:fd:d1:34:d9:
                    24:3d:c2:0b:75:75:1f:06:6f:a5:57:16:df:a5:3e:
                    74:fe:7d:8d:17:3a:11:84:c6:59:b9:bc:ca:0f:8d:
                    bd:6e:b5:3d:8b:cc:96:14:08:66:14:c9:10:2e:2d:
                    38:db:00:08:da:9b:9a:ca:fd:dd:45:ba:c0:d5:fd:
                    f4:04:39:b5:8f:3f:e6:fc:21:d7:ad:c7:6e:fd:b9:
                    e1:e2:55:07:e6:7c:38:96:9d:ed:2d:84:27:e4:6d:
                    6d:e9:38:e2:47:f6:70:40:c8:bb:b1:71:38:38:ca:
                    ac:95:7a:fb:a3:80:19:d5:96:26:ad:29:d7:55:bc:
                    c9:47:2f:47:52:ed:c4:13:42:18:ec:23:ff:19:2c:
                    d1:7a:2c:f2:0a:42:2f:a3:6a:ac:e8:b6:da:a3:8e:
                    9d:71:38:f8:2f:f4:4f:73:95:cb:00:cc:a6:c4:4b:
                    e3:d0:76:1e:d5:18:24:a7:63:65:92:31:25:d3:c7:
                    56:44:cb:42:c5:c7:24:e7:21:dd:c7:f2:7c:03:ce:
                    8f:87:3b:fe:be:80:af:44:64:bf:f5:6f:34:55:bc:
                    52:f5:db:2b:9f:c1:1a:6c:61:b9:72:f4:2e:a3:61:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/EC49574725049721FFA5AC0390E08D942C56EE07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.124.0/23
                IPv6:
                  2804:8790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272717

    Signature Algorithm: sha256WithRSAEncryption
         42:63:a0:5c:4d:ad:59:ed:b1:9a:75:12:7c:6e:54:09:4d:bc:
         52:20:2f:55:9e:58:79:56:b2:ca:75:19:62:2e:1b:12:59:33:
         c8:ec:51:5d:0e:fe:4a:84:3b:59:3b:ee:71:ca:94:f2:37:7c:
         8e:34:22:41:8b:36:a5:8a:d8:e3:16:2a:f2:f3:82:16:7a:26:
         b2:5a:25:22:38:65:58:64:2c:f4:82:aa:c0:dc:f8:84:78:fa:
         f4:5b:39:e1:88:12:94:c2:6a:a4:7f:70:86:4f:f7:8c:fb:da:
         37:d7:1c:b6:20:27:b6:b2:21:2f:3b:cf:8a:4b:fd:0c:7c:85:
         7e:bc:0a:4d:7f:03:1f:96:15:05:5f:83:b9:a2:fe:05:0a:a8:
         30:a9:f9:8f:00:69:b7:88:e7:77:ce:16:e9:e6:1d:10:d0:cc:
         d9:5e:ca:4d:f4:e0:d2:2f:18:4d:73:c7:32:86:cd:15:2b:65:
         0f:b2:e3:6e:2b:9f:4a:3d:79:c6:7a:65:dc:de:e0:32:0a:39:
         c1:69:a2:74:ba:54:98:b7:6f:2a:89:90:24:8d:7f:90:96:75:
         08:5c:39:53:8b:9f:fc:85:62:d2:5a:f3:eb:aa:b8:77:67:2c:
         de:22:04:c8:19:99:00:9d:8c:11:7c:cb:de:e3:cb:c2:ae:e2:
         59:d7:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org