Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EDAD00A81AFED482BFBE83C931F2B976835973C1.cer
File:                     EDAD00A81AFED482BFBE83C931F2B976835973C1.cer (raw, json)
Hash identifier:          NNbNqV5E5IYwPPKCwfAY+Fy3vNN/tUR3H4JcfZFtl7o=
Subject key identifier:   ED:AD:00:A8:1A:FE:D4:82:BF:BE:83:C9:31:F2:B9:76:83:59:73:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DAFF1000C86374606C4BBA59AEFAC52E1C141
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8o1pbDuy8tVsxMCzmxoXFDJm8oVbAAKH6GSMWgmrot21/0/EDAD00A81AFED482BFBE83C931F2B976835973C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8o1pbDuy8tVsxMCzmxoXFDJm8oVbAAKH6GSMWgmrot21/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 18:21:32 +0000
Certificate not after:    Fri 12 Apr 2024 18:26:32 +0000
Subordinate resources:    AS: 28208
                          IP: 170.246.72.0/22
                          IP: 177.222.144.0/20
                          IP: 186.226.32.0/20
                          IP: 189.91.192.0/20
                          IP: 2804:1000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:af:f1:00:0c:86:37:46:06:c4:bb:a5:9a:ef:ac:52:e1:c1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 14 18:21:32 2023 GMT
            Not After : Apr 12 18:26:32 2024 GMT
        Subject: CN=EDAD00A81AFED482BFBE83C931F2B976835973C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:9b:e4:73:21:6e:5d:8f:bf:c9:0e:f4:a1:
                    8c:a9:47:fd:46:0a:5a:73:10:ae:d7:f6:de:e9:bc:
                    4b:4a:72:21:67:1b:d0:da:f5:fc:6e:7d:f1:af:63:
                    45:1f:52:a3:6a:c0:5d:b2:3c:e6:ad:3c:7d:3f:86:
                    80:1b:c5:b1:51:88:07:17:10:87:c4:08:eb:47:21:
                    2a:2c:61:7e:3b:b8:2f:84:96:a2:34:9b:db:78:87:
                    26:67:e9:59:5b:d9:8e:57:d0:98:5a:c7:f7:16:bc:
                    07:43:14:03:34:40:99:3f:bd:cd:a0:d4:31:fb:8b:
                    9d:ab:24:61:5e:5e:0c:84:34:b0:dd:3f:80:2f:32:
                    69:f4:f6:da:bd:d1:89:e6:cb:5a:d1:2e:fe:4f:7a:
                    9c:1e:96:e9:32:30:42:c9:be:19:9d:85:29:eb:e6:
                    a8:e0:11:7a:e1:7b:50:66:52:f4:28:07:ab:fd:8b:
                    18:fc:be:81:55:40:6b:99:91:05:8c:f2:f6:98:38:
                    0e:6e:dc:88:9a:f4:97:01:6b:d6:be:c5:57:11:eb:
                    cf:23:c4:c3:be:2d:d9:94:4d:48:4f:11:ed:ec:c3:
                    8e:1d:01:d3:de:a5:4b:55:68:15:21:5f:2f:2d:72:
                    77:69:58:01:3e:20:85:42:1b:a2:64:87:e5:6b:40:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:AD:00:A8:1A:FE:D4:82:BF:BE:83:C9:31:F2:B9:76:83:59:73:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8o1pbDuy8tVsxMCzmxoXFDJm8oVbAAKH6GSMWgmrot21/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8o1pbDuy8tVsxMCzmxoXFDJm8oVbAAKH6GSMWgmrot21/0/EDAD00A81AFED482BFBE83C931F2B976835973C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.72.0/22
                  177.222.144.0/20
                  186.226.32.0/20
                  189.91.192.0/20
                IPv6:
                  2804:1000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28208

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:a3:d2:98:24:ea:32:31:56:95:4c:2d:dd:30:09:96:ae:
         26:03:77:1d:c7:c0:f7:0d:6a:c7:7a:6a:71:4c:b2:5d:a3:b0:
         39:bf:f2:af:82:ea:06:b8:df:18:15:88:f8:fa:ae:2c:aa:3b:
         a0:92:ca:ed:3c:79:64:d0:26:4e:32:ae:39:29:47:4d:9b:90:
         ec:2f:e3:ca:fc:5f:f4:2e:75:62:e5:3e:c8:ef:b2:c8:22:f7:
         92:11:10:d7:09:a5:86:81:38:a9:25:f7:b3:56:e5:8a:84:4a:
         84:8b:06:14:53:36:98:82:41:d3:01:87:13:14:9f:53:fd:c2:
         c9:f5:fa:9d:cb:c7:a4:ca:6d:81:e6:25:98:e9:e1:72:54:40:
         45:25:2e:6b:44:1a:74:b1:52:3e:cc:93:fd:38:01:64:58:51:
         b8:31:a6:05:f5:b5:dc:ef:0c:7c:b0:3a:0f:8e:6f:f2:2b:6a:
         f7:3d:61:30:ab:2f:a6:12:b4:b9:eb:36:cc:aa:e3:e9:48:17:
         57:2c:65:a0:a4:75:3e:28:48:e4:35:69:94:b1:ef:b7:e2:a6:
         d1:31:a8:f9:8e:ce:f0:53:5e:eb:70:63:7c:af:93:12:39:68:
         89:40:e1:75:6d:06:14:3b:7b:fd:2b:33:dd:4d:3c:9e:87:8a:
         bf:b8:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org