Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED4BF6F48E30F7152E13F8BC3758348B5BF99B6E.cer
File:                     ED4BF6F48E30F7152E13F8BC3758348B5BF99B6E.cer (raw, json)
Hash identifier:          e+ODhOPE3tzQIJm7onu7agBarrIEraCmkJBackxkR98=
Subject key identifier:   ED:4B:F6:F4:8E:30:F7:15:2E:13:F8:BC:37:58:34:8B:5B:F9:9B:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       011A81E719E0EC8AF642AB2A3F716C402EC7DEE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/ED4BF6F48E30F7152E13F8BC3758348B5BF99B6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 20:05:14 +0000
Certificate not after:    Wed 23 Oct 2024 20:10:14 +0000
Subordinate resources:    AS: 28663
                          AS: 53141
                          IP: 177.93.224.0/20
                          IP: 186.194.128.0 -- 186.194.139.255
                          IP: 189.1.32.0/20
                          IP: 2804:3e8::/32
                          IP: 2804:7a9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1a:81:e7:19:e0:ec:8a:f6:42:ab:2a:3f:71:6c:40:2e:c7:de:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 20:05:14 2023 GMT
            Not After : Oct 23 20:10:14 2024 GMT
        Subject: CN=ED4BF6F48E30F7152E13F8BC3758348B5BF99B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:5d:b6:be:ef:a8:d7:e8:31:91:72:a6:5b:
                    f3:6a:65:78:7e:73:e9:4c:3f:18:ab:6c:ea:29:08:
                    e0:57:55:83:00:e6:16:46:98:dd:d2:d8:fe:17:02:
                    f1:5b:57:24:5a:90:1c:b5:ee:9c:e9:8e:85:5a:fe:
                    b1:9f:fe:f5:4b:41:21:ab:f6:4b:49:51:ce:d8:6e:
                    57:53:bc:01:8f:1d:fd:0a:62:ef:85:37:8f:79:5a:
                    4f:b1:dc:52:c5:18:ab:96:8e:64:44:38:84:16:6f:
                    d8:cb:51:d9:bb:9d:04:01:e0:45:0c:4b:40:a9:83:
                    ee:03:89:fd:64:23:b5:de:66:d4:4a:a6:7f:8d:f1:
                    57:01:4a:d5:07:2d:64:6d:a2:d3:f1:13:1b:45:27:
                    22:ea:82:b8:5e:2e:fa:85:ea:02:57:05:0d:42:dc:
                    69:d9:26:0e:02:8d:6e:60:cf:15:cb:2a:7b:5b:1f:
                    74:16:e0:a4:f2:72:fd:98:6c:df:9d:03:12:34:f5:
                    2d:2f:cb:01:4a:a8:2f:80:80:58:f4:2b:04:fe:73:
                    2e:96:76:eb:d8:09:11:53:b9:47:23:76:7e:dc:98:
                    af:0f:7b:32:21:ec:67:c2:91:31:0c:da:5a:f4:6c:
                    6c:3e:b0:41:45:ff:c1:f3:a1:17:d4:54:4f:34:4a:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:4B:F6:F4:8E:30:F7:15:2E:13:F8:BC:37:58:34:8B:5B:F9:9B:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/ED4BF6F48E30F7152E13F8BC3758348B5BF99B6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.224.0/20
                  186.194.128.0-186.194.139.255
                  189.1.32.0/20
                IPv6:
                  2804:3e8::/32
                  2804:7a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28663
                  53141

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:0c:6f:e9:ce:a5:06:dc:e8:08:a1:5e:fa:b2:b8:6c:32:
         91:ff:8d:1e:3b:3d:a5:b9:e6:58:ac:94:43:0f:95:1e:8d:b4:
         20:0a:bb:d6:33:68:38:6d:b9:2b:d1:a8:19:4f:2c:29:82:2f:
         bc:e3:20:d5:13:bd:fa:98:33:3f:e4:c3:37:2a:a9:9f:5e:6b:
         da:24:28:45:d8:67:b3:f5:5d:b9:2a:43:7d:af:0c:00:7a:8f:
         c5:47:60:bd:bf:2e:6f:21:09:c9:e5:96:a5:04:67:a6:ba:a5:
         84:3d:f0:11:ec:ec:c8:88:44:13:e8:06:1f:5e:d5:e0:ad:9c:
         4c:39:79:11:b5:ec:52:90:96:4b:fa:0a:08:69:41:66:bf:96:
         7c:28:bd:ee:2f:33:54:54:46:43:fe:77:8f:9e:b6:b9:bd:28:
         a6:37:b5:55:ed:92:dd:af:40:75:99:56:6e:5a:c1:a2:ab:37:
         86:1e:22:50:bf:d6:5c:db:c8:df:05:3b:4c:75:41:45:0d:0e:
         a4:c6:ef:80:a6:06:30:6f:b2:42:aa:86:0f:7a:b1:3b:53:29:
         25:ad:4c:55:1b:47:a9:68:f0:72:22:e8:4d:7f:6a:30:0c:30:
         93:86:d9:b6:9a:43:88:45:ba:ac:d8:ca:43:f6:78:5a:ff:b0:
         56:7d:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org