Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
File:                     EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer (raw, json)
Hash identifier:          2gV5gC66V9HHJ0MCJSei70+WG5d9rhtYieJVbx7n+Qw=
Subject key identifier:   EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C45927BFEED27DEC70B41E1F0105008967A7D6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 18:25:09 +0000
Certificate not after:    Tue 06 Aug 2024 18:30:09 +0000
Subordinate resources:    AS: 53236
                          IP: 170.83.204.0/22
                          IP: 170.150.176.0/22
                          IP: 177.10.120.0/22
                          IP: 2804:2f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:45:92:7b:fe:ed:27:de:c7:0b:41:e1:f0:10:50:08:96:7a:7d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 18:25:09 2023 GMT
            Not After : Aug  6 18:30:09 2024 GMT
        Subject: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:b0:1c:4b:23:10:65:12:87:b1:9d:4d:2c:
                    20:54:55:cc:4d:d6:3a:59:74:a2:a3:96:c5:28:2e:
                    0c:bb:5f:d2:43:20:98:9f:39:5f:1b:eb:3c:9e:7f:
                    a5:50:65:9f:b9:80:59:e0:64:10:7b:e1:9e:5e:0d:
                    ca:eb:20:37:ae:41:a2:6e:81:ab:58:00:e8:b1:19:
                    77:c5:22:94:36:29:ca:2e:16:5d:3a:6f:6f:d7:5d:
                    a2:69:0d:77:eb:f8:1d:6a:da:5f:28:a8:5f:82:ae:
                    e9:c8:85:9f:69:5b:a0:11:6b:d0:1b:6d:f9:13:be:
                    77:3b:24:09:e6:a3:25:e9:4b:35:1e:89:eb:99:f9:
                    bb:cd:08:17:24:6b:eb:3e:d2:9c:72:75:41:8a:17:
                    d0:09:18:86:b3:51:bc:db:69:12:a0:c6:27:51:01:
                    ef:30:99:78:f8:7e:7e:d1:09:42:35:af:8f:ab:b0:
                    68:b4:26:36:f2:fd:ac:8d:3d:2f:d6:cd:c9:57:a7:
                    48:06:e9:40:9f:af:de:07:fd:17:c4:66:07:85:e5:
                    db:66:21:4c:b7:65:ed:81:0a:d5:a4:64:d2:45:9b:
                    c6:77:48:86:b7:6c:6f:40:20:79:28:a4:70:b4:37:
                    77:ad:a0:48:f7:b4:4f:e2:c4:de:32:b3:f4:d0:dc:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.204.0/22
                  170.150.176.0/22
                  177.10.120.0/22
                IPv6:
                  2804:2f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53236

    Signature Algorithm: sha256WithRSAEncryption
         14:95:16:23:49:c7:63:93:68:9e:8e:8a:51:1b:25:3f:5a:3a:
         f1:51:9e:5b:5a:31:33:21:a7:e3:d0:17:8b:0e:10:dd:91:26:
         30:64:79:fa:2e:ef:6d:9c:bc:8d:1c:f5:e9:37:32:ae:99:25:
         c3:f2:e8:71:3f:85:23:6d:c6:47:c0:a1:40:e3:66:ac:cc:4e:
         2d:53:e3:63:45:37:23:21:ce:c4:a9:b6:2b:4c:a2:ae:b1:90:
         a5:4c:d1:ed:9b:e1:4c:32:be:a8:c3:71:76:08:ee:77:73:58:
         f2:91:f4:09:eb:d6:1e:91:d4:4c:47:09:22:51:45:b1:12:fd:
         88:1c:bc:b2:71:b9:33:15:12:93:85:03:1b:8a:32:b7:24:b5:
         03:9f:3e:0a:83:82:5b:64:af:df:91:92:7e:e2:6c:81:a7:10:
         09:4c:b2:fe:d9:7c:d7:05:10:23:8b:ad:26:66:f7:d3:59:33:
         c7:f2:6b:cb:f8:85:05:7c:c0:71:74:b4:50:53:e5:0c:f5:c9:
         6e:fb:ca:c6:af:1f:7f:30:8c:38:99:31:31:b9:f8:d7:e8:ce:
         92:7b:72:7f:da:0a:54:df:61:61:58:87:bf:01:3c:b2:1b:d0:
         c0:aa:54:1e:bd:39:ed:40:3a:a3:0b:79:1c:07:fe:30:44:70:
         96:3d:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org