Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED8DE9F54ACA2A6CA07F4F3C8247A97194C2FFC4.cer
File:                     ED8DE9F54ACA2A6CA07F4F3C8247A97194C2FFC4.cer (raw, json)
Hash identifier:          DGPv6RjhjjVFGlrvO9++ReTYQiYxcS8WIGY1Ec48D+s=
Subject key identifier:   ED:8D:E9:F5:4A:CA:2A:6C:A0:7F:4F:3C:82:47:A9:71:94:C2:FF:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64B372054BFA882FBAF833711E0ADBCCECE0B0D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/ED8DE9F54ACA2A6CA07F4F3C8247A97194C2FFC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 13:53:09 +0000
Certificate not after:    Mon 10 Feb 2025 13:58:09 +0000
Subordinate resources:    AS: 271708
                          IP: 2804:7fc4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b3:72:05:4b:fa:88:2f:ba:f8:33:71:1e:0a:db:cc:ec:e0:b0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 13:53:09 2024 GMT
            Not After : Feb 10 13:58:09 2025 GMT
        Subject: CN=ED8DE9F54ACA2A6CA07F4F3C8247A97194C2FFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:4a:c8:22:85:c2:f0:26:9d:8e:8a:a6:6d:
                    30:fe:b8:7a:4d:ac:44:87:e4:b3:86:e5:52:90:7a:
                    a6:cb:23:9d:fc:a1:cf:47:1f:3d:1c:f0:e2:63:8e:
                    bc:36:f7:b1:70:fa:ae:ea:55:7a:95:71:bc:49:1d:
                    df:9e:a9:6b:27:2d:f6:1a:96:15:4b:e4:ca:40:ee:
                    4f:ab:1a:30:1d:ab:27:fb:cc:54:85:d5:4d:53:26:
                    c9:00:71:2e:07:26:76:17:05:9e:fa:91:5b:d8:c1:
                    22:8d:b0:dd:92:03:27:c5:c9:6b:30:72:5d:7a:14:
                    17:b4:d9:9e:92:56:93:b6:dc:bb:e2:eb:43:c6:16:
                    76:58:04:5a:22:0f:65:01:31:36:da:35:65:fd:4c:
                    5c:16:b0:61:ae:99:7c:4b:60:c1:fa:02:0b:d5:57:
                    b2:6d:5c:2b:33:f2:44:f2:a1:30:17:6f:e4:fd:e2:
                    17:32:58:71:16:16:86:c2:2a:ff:23:62:ac:72:65:
                    79:cf:7b:56:91:4e:e5:6c:eb:fe:ae:e9:8a:93:89:
                    97:dc:db:12:6d:63:38:62:c3:a3:4f:05:a8:48:dd:
                    d4:da:03:bf:dd:7a:43:30:de:f8:23:ea:20:7f:b2:
                    65:ae:f4:03:f9:c0:74:6f:77:63:85:10:74:ba:bc:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:8D:E9:F5:4A:CA:2A:6C:A0:7F:4F:3C:82:47:A9:71:94:C2:FF:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/ED8DE9F54ACA2A6CA07F4F3C8247A97194C2FFC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271708

    Signature Algorithm: sha256WithRSAEncryption
         80:ee:02:34:fa:63:bf:7e:80:d8:c4:6f:ec:c0:80:08:f1:a8:
         97:3d:13:16:9e:45:fd:1f:06:86:fa:b2:fe:a7:f4:1e:74:15:
         21:de:ae:38:57:e7:8c:c8:36:0c:54:5d:5e:08:b5:b4:55:4d:
         37:ce:e6:31:73:17:bb:32:66:dd:83:e7:11:19:26:2a:18:70:
         c0:51:e3:6b:90:32:b3:64:85:03:0b:e0:2d:6d:7f:5d:eb:20:
         24:a4:c1:88:e3:e9:51:8c:0b:e6:43:42:63:0a:32:50:95:28:
         6b:e4:a2:55:5b:58:88:08:30:40:98:37:a5:33:99:96:19:d0:
         3a:8f:21:96:05:18:fd:7f:58:d0:e4:3f:d8:41:c1:33:2c:17:
         9c:b1:bc:5b:67:d3:50:96:99:50:d0:93:55:93:5e:d8:3a:c5:
         a8:ae:ac:97:9e:30:d5:61:84:8d:eb:52:6f:5e:54:08:47:8c:
         f1:c7:7a:21:41:99:0b:44:2e:22:ae:3b:d9:2c:5f:84:06:a8:
         ae:6e:46:62:cd:cc:b3:e9:00:83:49:2e:24:d9:1c:b6:bc:52:
         c9:a6:43:16:e7:7a:fb:97:2a:64:a6:39:8e:3a:0f:17:61:47:
         70:03:38:f3:33:33:f9:67:03:a2:f0:7d:e8:c3:60:8f:1c:df:
         8e:1b:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 18:09:28 2025 by rpki-client