Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED39006B37872C9E8FE17C71D29725C0C9DB8631.cer
File:                     ED39006B37872C9E8FE17C71D29725C0C9DB8631.cer (raw, json)
Hash identifier:          kVojoHtmasirplV3LW7Mt0DUMIOI3kdqw0pSqS+DiGE=
Subject key identifier:   ED:39:00:6B:37:87:2C:9E:8F:E1:7C:71:D2:97:25:C0:C9:DB:86:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       465900EC3E0CAA9C4F41FCE0CCC8A9A3C0304C03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/ED39006B37872C9E8FE17C71D29725C0C9DB8631.mft
caRepository:             rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Mar 2023 12:24:58 +0000
Certificate not after:    Tue 19 Mar 2024 12:29:58 +0000
Subordinate resources:    AS: 270794
                          IP: 189.51.164.0/22
                          IP: 2804:7184::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:59:00:ec:3e:0c:aa:9c:4f:41:fc:e0:cc:c8:a9:a3:c0:30:4c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 12:24:58 2023 GMT
            Not After : Mar 19 12:29:58 2024 GMT
        Subject: CN=ED39006B37872C9E8FE17C71D29725C0C9DB8631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:02:a6:e3:89:75:70:24:52:d7:f6:03:8a:
                    f7:78:b2:ea:2d:5f:78:51:73:49:1f:c6:09:fc:55:
                    26:4c:0f:20:ba:29:65:ec:a2:30:45:29:a6:12:77:
                    81:bd:ef:df:c7:74:e8:43:15:a6:5a:6f:62:38:e9:
                    5f:1c:0e:f2:54:4a:5f:f4:bb:d6:2b:a1:49:70:13:
                    e0:df:41:f7:3b:eb:e4:d7:5b:94:aa:0a:b7:95:76:
                    05:3f:c9:07:27:7b:73:7c:b6:2a:d6:25:37:49:4c:
                    a1:fd:9e:4c:f7:c4:83:35:a6:ca:2d:4b:ff:b4:b8:
                    7e:a3:55:23:0e:0a:36:a1:08:ab:17:fc:4f:0e:33:
                    df:68:c3:3f:1a:19:d9:20:69:de:42:f6:ad:03:96:
                    d2:cf:bc:75:61:7c:82:b2:b0:19:6e:46:da:9c:00:
                    c6:1d:bc:93:9a:fe:f8:76:e1:3e:0b:c4:f0:ab:3b:
                    9e:32:c7:cf:2e:07:94:7e:08:cf:02:8c:78:86:c8:
                    f2:67:b4:60:f9:dc:ff:30:ef:51:e4:c5:d2:5a:52:
                    66:1b:75:43:05:51:67:61:06:84:3e:9c:34:3a:f8:
                    85:61:c4:38:67:bb:89:9f:51:e1:76:9a:50:18:55:
                    09:d7:4e:c0:ef:53:85:0e:01:d1:a1:3e:88:5b:84:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:39:00:6B:37:87:2C:9E:8F:E1:7C:71:D2:97:25:C0:C9:DB:86:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/ED39006B37872C9E8FE17C71D29725C0C9DB8631.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.164.0/22
                IPv6:
                  2804:7184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270794

    Signature Algorithm: sha256WithRSAEncryption
         48:57:77:18:b4:46:50:63:c7:c8:84:47:c2:d9:47:f9:90:60:
         fa:bb:9e:82:6b:69:c4:86:a6:a9:33:5b:64:88:fa:cc:ae:16:
         62:0b:1b:47:b1:0d:ee:fe:08:1b:16:f1:4b:6d:e5:4d:13:07:
         b7:29:59:f3:d0:79:e7:e6:d9:45:92:4a:8e:ac:70:a9:81:ae:
         fd:bd:1c:e1:c2:41:c5:1e:eb:f3:91:13:17:b4:62:df:db:c7:
         50:69:2d:82:e0:ff:a5:95:a0:eb:47:70:a1:a5:b3:a3:a6:c5:
         61:16:da:27:9e:ca:02:bf:a2:d6:96:de:b5:d6:6d:b8:de:09:
         1c:da:86:4a:7a:28:36:b5:80:8d:83:2a:74:08:d5:c0:59:52:
         41:d0:22:ec:d6:f1:6a:76:2d:15:87:67:87:67:1c:9c:46:65:
         9d:05:9e:af:93:cf:1f:69:de:4a:ae:64:96:bd:52:15:8c:87:
         32:34:52:a4:fb:b4:9e:6a:e7:81:de:a0:6f:43:61:63:67:9e:
         9b:c5:7b:cf:86:9a:db:f8:29:c6:46:eb:37:3c:01:80:91:fd:
         6e:4a:3e:06:c6:be:fc:5b:3d:ef:44:d7:ec:da:c0:20:ae:e5:
         2a:8b:b2:8b:45:d0:e6:53:2f:04:99:89:38:89:bd:b1:c8:94:
         9d:39:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org