Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.cer
File:                     EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.cer (raw, json)
Hash identifier:          Z5ygcAk+65HS5dk28GvHrF6vr2V+63JT7zZv9DbGX5I=
Subject key identifier:   EE:2E:C7:1E:CC:9E:7B:D6:A4:E8:9A:AC:11:06:04:12:CE:5D:E6:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       203B7484700178C7563DFCB767E5E8FFDD7FFB95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 16:44:07 +0000
Certificate not after:    Wed 23 Oct 2024 16:49:07 +0000
Subordinate resources:    AS: 265197
                          IP: 167.250.72.0/22
                          IP: 2804:2c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3b:74:84:70:01:78:c7:56:3d:fc:b7:67:e5:e8:ff:dd:7f:fb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 16:44:07 2023 GMT
            Not After : Oct 23 16:49:07 2024 GMT
        Subject: CN=EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:66:cf:61:72:72:37:c0:cf:1a:7b:7b:f3:70:
                    24:fd:8f:cc:20:db:66:d7:a0:67:2c:be:e6:ca:2c:
                    98:7f:8b:53:b1:98:34:74:32:fe:3f:f1:d3:3e:70:
                    27:40:bf:0d:fe:56:17:fa:81:cc:a3:0f:96:95:cc:
                    60:30:52:34:5f:e2:da:89:4c:00:84:20:19:2f:5b:
                    2d:36:7a:b6:73:27:06:fa:f8:95:bb:dc:fb:d4:e4:
                    f6:7b:57:fa:a9:5e:bd:24:eb:3c:39:2c:b6:23:e5:
                    5f:cc:40:41:b7:4b:9b:66:60:7f:5a:ab:ae:01:19:
                    a9:73:ef:a1:8f:2d:2c:d3:a5:01:97:31:f4:b6:9b:
                    ff:05:68:24:fc:71:48:09:65:9a:53:18:a7:1a:60:
                    66:50:a7:4f:93:70:d1:0a:c1:14:cd:63:d0:a6:15:
                    fb:ac:0c:65:66:e6:19:9f:55:d5:3b:e9:4e:85:07:
                    24:ff:70:0a:ae:ce:b5:60:dd:3c:b8:01:90:46:30:
                    5b:03:fa:f5:7d:d6:fb:4f:48:ef:31:7f:db:ad:3d:
                    b7:dc:a7:18:c9:6e:08:6a:5f:58:1d:4e:f7:d8:f8:
                    e0:ad:02:c7:0b:97:e1:54:fc:3d:04:14:eb:cf:dd:
                    84:da:f0:f3:2c:c1:57:2f:be:7e:97:35:d6:16:77:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:2E:C7:1E:CC:9E:7B:D6:A4:E8:9A:AC:11:06:04:12:CE:5D:E6:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.72.0/22
                IPv6:
                  2804:2c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265197

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:58:17:7a:a5:9d:09:ec:81:09:19:db:56:29:26:5a:68:
         b1:df:61:4b:84:55:e4:39:33:8a:8c:ec:cc:41:30:5e:2d:7b:
         4b:4e:ef:53:69:e8:f4:11:9b:bd:a7:b7:32:03:02:1f:0b:3e:
         af:be:93:a6:ca:32:23:dd:94:1c:3e:b4:2d:4a:42:9d:ab:3f:
         0c:1d:32:b0:02:b9:2a:76:de:7c:4b:38:7c:1b:27:79:88:0f:
         37:13:32:a6:8d:bd:94:86:98:37:86:79:84:bf:a4:3c:75:29:
         2b:63:0b:95:2f:27:0d:96:9f:b3:45:b2:d7:c2:3d:e2:09:67:
         6f:2a:52:9d:37:bd:14:6e:c0:67:3b:ee:b9:32:62:74:cc:32:
         cb:8f:8b:54:fe:9b:89:b8:a0:66:86:6c:8f:56:5d:d7:d2:5f:
         ab:73:cd:8a:0d:f5:11:3d:5b:2f:13:61:2e:69:85:bf:de:30:
         cb:35:2c:ed:33:f4:41:27:3b:13:d7:70:12:47:b6:d8:fa:ea:
         d8:7c:b4:41:03:8d:91:ae:9a:22:87:5e:74:7b:32:17:9c:fa:
         13:6d:35:f6:0a:59:86:58:14:d6:89:70:c8:c7:b0:0c:10:ee:
         ba:50:64:a6:c3:54:66:b7:70:75:02:43:b4:9e:a8:5d:c5:6e:
         a4:06:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:45 2024 by rpki-client on console-ams.rpki-client.org