Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.cer
File:                     EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.cer (raw, json)
Hash identifier:          Xb43skc3ydUThC5U8qHuYa2I3HMLvlgj7pLbtBVIby4=
Subject key identifier:   ED:BE:BB:97:A2:E0:B3:1B:28:62:77:64:2B:AC:47:B7:14:C7:BA:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CF969D41080B18217EF09103AE418866E905C50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 18:24:20 +0000
Certificate not after:    Tue 18 Feb 2025 18:29:20 +0000
Subordinate resources:    AS: 264259
                          IP: 138.118.40.0/22
                          IP: 2804:2514::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:69:d4:10:80:b1:82:17:ef:09:10:3a:e4:18:86:6e:90:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 18:24:20 2024 GMT
            Not After : Feb 18 18:29:20 2025 GMT
        Subject: CN=EDBEBB97A2E0B31B286277642BAC47B714C7BAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:7b:e1:94:2c:d7:9e:58:be:c6:b3:e4:c9:
                    a4:c2:88:fc:8b:c1:d1:9f:9e:01:3d:0c:32:eb:f5:
                    13:6f:eb:02:ad:f7:46:ae:1a:96:ab:9c:29:87:45:
                    91:eb:5f:81:75:1d:97:59:ed:8b:e7:66:6b:68:c8:
                    2c:cb:1e:6e:b1:ca:c8:73:2c:25:8f:63:2b:3b:bf:
                    00:a8:28:a8:61:d4:bd:1a:a7:11:4c:c9:4e:4c:b1:
                    aa:7b:39:ce:21:7f:ad:6c:80:16:d7:4e:4f:c6:05:
                    e6:89:c9:9c:2a:84:a3:04:2f:05:61:b5:a8:aa:59:
                    56:13:29:73:8c:10:46:73:0e:21:e3:c1:d6:b7:50:
                    d0:d9:12:6a:79:e5:d8:ff:15:06:15:7b:70:3b:42:
                    62:94:73:70:c6:1b:7c:a8:c7:36:f4:70:53:36:42:
                    4c:65:95:e4:16:8c:45:be:f7:5b:71:66:75:b7:8a:
                    68:c7:f0:ea:6b:fc:7f:aa:62:ef:16:e8:2a:77:5f:
                    e6:c7:33:95:3f:ba:70:92:fe:06:c2:b4:47:6f:5c:
                    1c:d8:24:09:22:e7:8f:50:ae:3f:e5:64:ab:b8:93:
                    fa:6c:c5:24:f0:7b:15:4e:47:b9:9b:d4:a6:55:25:
                    67:d4:63:c5:a8:31:23:83:72:1a:71:2b:dc:db:04:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:BE:BB:97:A2:E0:B3:1B:28:62:77:64:2B:AC:47:B7:14:C7:BA:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.40.0/22
                IPv6:
                  2804:2514::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264259

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:1a:7d:37:24:b4:51:e5:72:a9:c9:9e:78:8f:be:22:89:
         8c:b1:64:db:e8:33:bb:59:8e:65:e2:a5:84:c5:c8:a4:ce:80:
         b7:af:86:67:fc:22:1c:f3:fd:c3:2d:aa:43:8f:b2:1e:ec:28:
         c8:3f:08:72:a3:c9:59:ce:08:18:ae:5f:2b:8d:5d:38:03:1a:
         cc:6e:41:b7:52:66:e4:67:5c:7e:c8:38:ce:2a:db:30:09:e7:
         85:c5:e9:f1:4d:90:04:18:57:25:8e:4b:7f:32:e8:87:f5:fa:
         c3:9c:f1:08:41:e4:ff:64:8d:76:5d:1e:70:17:d3:31:78:76:
         02:a7:f5:fd:62:29:e0:3a:b2:8f:59:62:36:e6:b1:31:fc:10:
         86:e8:8a:1b:a8:78:c8:12:4e:82:6e:ed:6e:be:87:fa:1b:e2:
         e8:94:cd:44:d5:ac:00:25:e6:6a:e8:1d:8f:79:20:32:d2:2b:
         a5:b1:46:cb:d7:98:ed:1f:7d:ab:1c:3f:7a:8e:ad:ff:60:70:
         92:18:9f:59:5f:c3:6d:03:be:0f:2b:40:b6:d5:c6:f9:76:01:
         81:92:31:22:c5:6d:cb:33:aa:13:b3:a0:06:81:01:7b:6c:be:
         e4:be:fc:fd:a0:59:63:7e:79:c1:46:a8:53:50:28:9c:f7:c6:
         db:e8:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org