Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
File:                     ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer (raw, json)
Hash identifier:          QK4CxUxTQCSYwUE27AGghti7CGDov8Hwc5+7wyHsa4g=
Subject key identifier:   EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CB71156D0D247BE1A6FE8CC570F1AAA4F011117
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 12:45:10 +0000
Certificate not after:    Fri 27 Sep 2024 12:50:10 +0000
Subordinate resources:    AS: 2716
                          AS: 19200
                          IP: 143.54.0.0/16
                          IP: 168.228.252.0/22
                          IP: 168.232.236.0/22
                          IP: 200.17.80.0/20
                          IP: 200.17.160.0/20
                          IP: 200.18.64.0/20
                          IP: 200.19.0.0/21
                          IP: 200.19.240.0/20
                          IP: 200.128.240.0/20
                          IP: 200.132.0.0/16
                          IP: 2804::/32
                          IP: 2804:1f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b7:11:56:d0:d2:47:be:1a:6f:e8:cc:57:0f:1a:aa:4f:01:11:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 12:45:10 2023 GMT
            Not After : Sep 27 12:50:10 2024 GMT
        Subject: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:4e:ea:7f:f3:8b:29:95:dd:23:d7:14:fc:
                    57:1e:b2:a2:88:8f:72:b6:05:bf:65:1a:97:5e:4d:
                    f2:0a:48:a2:74:e7:95:0e:bc:0e:89:95:57:8a:5e:
                    85:ce:b6:7c:68:22:7c:d7:d5:da:b3:4d:7f:f7:a1:
                    6d:82:79:2b:ce:60:f0:40:55:f2:f9:f8:0c:c5:d3:
                    b5:a7:f4:5b:b2:da:90:e5:e6:04:2e:ea:e5:30:2a:
                    2e:de:9e:cd:58:86:3f:2a:8d:9d:5b:46:18:d5:e0:
                    b5:e7:e4:f0:54:19:0c:bc:27:90:d6:23:21:59:b2:
                    ec:f5:ab:b8:bc:3d:dd:02:ff:b4:8e:67:ec:83:6d:
                    ac:e8:de:70:0e:59:06:35:a9:f9:fe:51:2a:61:59:
                    a2:d7:91:cf:27:9d:6f:8d:de:f5:f6:c6:9b:33:b7:
                    c3:49:06:ea:f3:b4:01:7a:ec:99:a0:74:d1:02:9e:
                    27:9c:39:84:51:7d:f0:97:ea:9b:9a:b9:57:eb:cf:
                    25:4f:9c:7c:67:03:25:3f:40:1b:4a:aa:b6:75:87:
                    94:c9:62:b5:c9:72:f4:a3:0c:73:08:00:5b:db:f0:
                    42:22:b9:ee:ae:47:a2:ff:c9:a4:e5:5b:c1:c1:c4:
                    99:f7:32:97:c8:37:80:bb:3a:82:17:3a:98:95:97:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.54.0.0/16
                  168.228.252.0/22
                  168.232.236.0/22
                  200.17.80.0/20
                  200.17.160.0/20
                  200.18.64.0/20
                  200.19.0.0/21
                  200.19.240.0/20
                  200.128.240.0/20
                  200.132.0.0/16
                IPv6:
                  2804::/32
                  2804:1f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2716
                  19200

    Signature Algorithm: sha256WithRSAEncryption
         24:fb:34:3f:b9:06:dd:d8:94:b1:31:cc:7d:75:f7:4b:2d:7b:
         82:00:4a:7d:ea:66:ee:a2:82:43:cf:d1:77:99:8f:92:81:82:
         da:cd:c2:b3:c4:9c:48:c9:52:3b:c7:64:2c:95:d6:eb:80:e4:
         8f:c3:16:17:13:cd:8b:b7:d2:b4:c1:14:de:0f:2f:0e:00:1a:
         60:0f:0b:e0:3f:ed:05:b6:13:65:69:0b:1a:db:62:2c:96:a0:
         c1:af:05:d5:da:6e:96:80:f9:38:25:df:b5:c0:b7:eb:26:bf:
         9b:a3:50:c9:1b:69:c8:63:24:72:e1:38:bd:32:be:31:3a:ee:
         d8:ea:3d:e5:76:d3:1d:7a:d6:58:d6:89:5b:0e:36:d7:e2:31:
         48:b2:b2:a4:1f:d2:93:8c:a8:65:04:e6:78:b8:d7:d9:42:d0:
         2f:d8:7f:84:b7:29:a4:9d:b3:e0:0f:c5:69:23:47:6c:ee:7c:
         e5:26:1d:f4:04:8f:cf:98:5e:d8:f6:f2:81:cb:df:0b:6d:75:
         67:d3:b7:da:dc:f9:b7:50:d2:d8:94:40:1b:74:da:de:c2:2e:
         fa:b3:1b:ec:97:f8:68:9f:76:6d:a0:96:ba:10:05:af:56:cc:
         f7:e0:5e:e7:f7:dc:45:72:16:21:b7:14:06:af:d3:be:40:ce:
         da:d9:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org