Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EE22DFD0A6F3267F806EBB03546AD6DFAE00DBBE.cer
File:                     EE22DFD0A6F3267F806EBB03546AD6DFAE00DBBE.cer (raw, json)
Hash identifier:          oFeI0KsGOe+NdBbWJhyH6Ht7XixbP5YlDx5/4GreQ1k=
Subject key identifier:   EE:22:DF:D0:A6:F3:26:7F:80:6E:BB:03:54:6A:D6:DF:AE:00:DB:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71EF14BC2DCA92C709BA6EEECC0954008D8470CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/EE22DFD0A6F3267F806EBB03546AD6DFAE00DBBE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 15 Oct 2023 14:02:53 +0000
Certificate not after:    Sun 13 Oct 2024 14:07:53 +0000
Subordinate resources:    AS: 270579
                          IP: 189.126.84.0/22
                          IP: 2804:6e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ef:14:bc:2d:ca:92:c7:09:ba:6e:ee:cc:09:54:00:8d:84:70:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 15 14:02:53 2023 GMT
            Not After : Oct 13 14:07:53 2024 GMT
        Subject: CN=EE22DFD0A6F3267F806EBB03546AD6DFAE00DBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:4a:84:77:25:92:64:7a:a7:d7:74:60:14:
                    88:8c:d6:c3:f7:08:cc:a9:e1:0a:43:03:2b:a9:54:
                    10:ed:12:54:9b:67:b4:5a:05:50:86:39:a0:14:dd:
                    0f:48:99:90:8c:95:f3:f0:e2:7f:73:8d:f3:e0:ad:
                    eb:9b:d4:e7:bc:50:e6:fa:69:67:13:fe:01:7f:d4:
                    38:52:f5:3e:eb:ff:e3:34:77:37:ab:f2:ce:3e:3b:
                    15:3d:15:b5:4a:82:d6:b1:06:2a:f3:62:0d:7f:0d:
                    ff:2a:b3:f5:e0:92:2a:cd:23:1c:17:05:3f:48:1a:
                    02:bd:e6:21:05:2e:02:cb:38:e8:55:e1:de:7f:a0:
                    0b:62:04:99:7b:44:00:04:95:fa:1b:52:c2:bf:0e:
                    f9:29:63:3f:63:96:7a:6d:8a:c0:99:07:49:ab:f3:
                    ca:92:17:b3:b2:3b:d4:6f:62:fb:f8:46:3f:4d:8b:
                    ad:dd:6d:af:a9:54:da:85:b0:d3:20:f8:51:95:07:
                    27:b5:83:4a:d0:d1:b2:49:b1:6c:33:cf:f0:f7:7f:
                    ae:9d:5d:8c:69:d3:54:6b:f7:a8:2b:b9:df:98:62:
                    35:18:47:5f:7d:4c:b8:f8:2e:0a:5f:6c:ef:8d:d4:
                    d7:f6:df:04:bb:a3:54:d2:55:cf:70:1f:1b:be:0a:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:22:DF:D0:A6:F3:26:7F:80:6E:BB:03:54:6A:D6:DF:AE:00:DB:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/EE22DFD0A6F3267F806EBB03546AD6DFAE00DBBE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22
                IPv6:
                  2804:6e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270579

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:7a:a3:85:56:c6:e3:91:fc:01:0b:36:8a:30:24:e9:6f:
         22:35:aa:50:05:66:2d:76:8b:84:48:97:7e:41:d8:41:e1:9c:
         da:55:ae:aa:bc:49:8a:c7:15:56:1f:95:57:68:11:0a:c6:a5:
         3a:65:5b:32:aa:86:4c:f4:28:fd:10:62:2f:4f:13:2e:37:37:
         f7:8c:11:cf:67:d0:6f:cb:b3:a0:87:8a:16:60:8a:c5:b0:cd:
         d2:92:e9:46:93:16:4a:8a:78:ed:d3:50:ca:4d:67:a4:ba:33:
         f2:dc:2c:e2:be:43:5a:a5:44:00:f2:7a:4a:b1:66:f1:5b:7a:
         1d:4c:a5:9a:34:1f:04:4e:90:ef:04:aa:2d:66:a1:2a:a2:25:
         54:0b:1a:e5:f4:b1:d3:80:e9:83:a2:fb:f6:29:96:8f:a3:cd:
         dd:22:e3:9f:e3:07:d1:69:60:d5:e1:41:8a:a2:2f:4c:88:72:
         30:89:cc:df:5f:76:4f:dc:4f:79:49:80:06:87:c1:01:32:b9:
         6f:cd:9f:99:b3:e3:83:bb:4d:73:53:b2:ef:89:08:e8:ea:c6:
         a3:69:96:6c:95:30:f5:ad:01:db:65:13:5b:c5:42:08:9b:80:
         bc:ca:85:18:45:d1:38:38:70:5b:67:98:e4:ba:f8:64:eb:bf:
         60:ff:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org