Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED0FA7AE43257C07C209E8489501FB7CE2E0A8E7.cer
File:                     ED0FA7AE43257C07C209E8489501FB7CE2E0A8E7.cer (raw, json)
Hash identifier:          d+oQHngdAHGwc8JIt9nfIzXtA/SJgB/cdGwR3J4/xXA=
Subject key identifier:   ED:0F:A7:AE:43:25:7C:07:C2:09:E8:48:95:01:FB:7C:E2:E0:A8:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4349F9ABA4EB07EEA7C5A99965F594B8EB3E8257
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/ED0FA7AE43257C07C209E8489501FB7CE2E0A8E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Sep 2022 22:55:13 +0000
Certificate not after:    Thu 07 Sep 2023 23:00:13 +0000
Subordinate resources:    AS: 262532
                          IP: 128.201.120.0/22
                          IP: 177.55.240.0/20
                          IP: 186.249.176.0/20
                          IP: 2804:ec8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:f9:ab:a4:eb:07:ee:a7:c5:a9:99:65:f5:94:b8:eb:3e:82:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 22:55:13 2022 GMT
            Not After : Sep  7 23:00:13 2023 GMT
        Subject: CN=ED0FA7AE43257C07C209E8489501FB7CE2E0A8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:81:08:2e:41:4c:84:fd:e8:3b:de:6e:2b:
                    08:d3:f2:10:a3:78:aa:5b:16:9a:a3:8a:ac:e1:41:
                    b7:2a:f0:3c:73:39:d8:ec:99:31:ab:0a:03:6e:28:
                    76:55:ba:cf:09:ce:3e:14:62:2f:bc:53:0f:21:3c:
                    c6:a7:73:5f:86:9d:e9:f0:3f:c6:d6:5d:47:0f:bb:
                    47:fc:36:e0:f7:a8:dc:28:53:a6:8c:06:37:2c:75:
                    a4:9c:af:e9:9d:54:89:53:5a:b2:a1:6f:2d:ed:b7:
                    84:35:1b:6a:17:2c:a3:33:fc:a8:4a:d4:f3:0f:b4:
                    3a:83:4b:91:46:81:b4:38:dc:f1:68:2d:bb:12:3a:
                    ee:ba:72:0e:f2:d4:07:ae:05:d7:70:d5:2f:b6:f4:
                    64:3d:32:f0:b2:7b:20:31:6c:7a:73:45:09:b1:db:
                    2c:53:48:18:23:40:5e:d3:bc:56:57:02:83:21:0b:
                    d7:01:77:85:4c:9d:d4:0a:65:a0:44:40:bc:3c:0e:
                    ac:6d:3f:96:5b:5a:39:37:e2:fc:fa:d5:8f:e6:54:
                    4e:c6:56:c2:2e:0e:9a:eb:5d:df:be:89:f4:af:b1:
                    81:6f:f3:ed:88:e8:d6:b0:77:46:71:24:9b:bb:a4:
                    c6:96:15:70:cc:c4:50:ee:a8:23:f2:57:44:41:cc:
                    4a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:0F:A7:AE:43:25:7C:07:C2:09:E8:48:95:01:FB:7C:E2:E0:A8:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/ED0FA7AE43257C07C209E8489501FB7CE2E0A8E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.120.0/22
                  177.55.240.0/20
                  186.249.176.0/20
                IPv6:
                  2804:ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262532

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:a3:d4:ac:12:6a:a9:e3:94:a7:8f:73:d6:74:8e:f4:fa:
         ad:20:fd:e4:b3:0e:c8:f6:28:ae:13:d5:7c:e8:c1:97:a3:1e:
         7e:fe:c1:10:8b:1b:53:99:2a:f8:c0:fd:bf:cc:ac:61:54:16:
         67:5b:9a:78:05:ec:aa:4b:af:9c:b2:8b:65:e5:27:7d:b4:a3:
         0a:b1:b5:d8:e0:c2:30:0b:ca:16:9a:4f:14:ce:30:a9:28:6a:
         8b:cd:7a:ec:f4:3b:e6:86:71:44:ac:d7:71:ec:a0:fd:c9:e9:
         11:21:20:2f:7a:a2:d3:5c:a7:36:9c:54:3f:5d:9f:6b:aa:31:
         32:1f:1b:a5:a5:c9:a9:96:39:36:eb:ec:b4:f4:92:0c:1a:6b:
         bb:c9:f6:b1:84:eb:3d:50:db:6d:2f:6b:b5:dd:6e:fe:a2:d0:
         c8:52:0b:d9:02:53:05:bf:b2:6a:51:e8:11:ae:1a:a6:72:33:
         98:61:5a:e6:b6:07:91:43:6a:ea:55:65:e5:f6:1b:fa:42:6a:
         e3:03:3f:43:69:2e:b4:49:84:86:f9:58:4a:60:3c:77:02:de:
         aa:3c:a6:35:19:6d:58:da:41:09:f7:3b:22:21:f5:0f:ba:e3:
         04:6f:0d:8b:bd:f0:8b:7f:91:a5:84:bb:26:fb:17:1b:aa:af:
         7c:9d:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org