Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
File:                     EE41996111A070E5D185B28EC741E0A608B24EDC.cer (raw, json)
Hash identifier:          fhD1WVjB7totQo+98Q1TWAoUAJeSZB9RoQZrrMNyorE=
Subject key identifier:   EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       271326C662D10E12365D09E2A1D59DEB68562288
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 00:21:22 +0000
Certificate not after:    Mon 24 Feb 2025 00:26:22 +0000
Subordinate resources:    AS: 52613
                          IP: 138.36.56.0/22
                          IP: 143.0.56.0/22
                          IP: 168.232.160.0/22
                          IP: 170.231.232.0/22
                          IP: 177.125.168.0/21
                          IP: 2804:d3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:13:26:c6:62:d1:0e:12:36:5d:09:e2:a1:d5:9d:eb:68:56:22:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 00:21:22 2024 GMT
            Not After : Feb 24 00:26:22 2025 GMT
        Subject: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:00:94:5c:e6:90:52:82:ed:22:48:be:71:
                    0d:55:76:4f:cc:d5:f5:40:fb:73:dd:3f:4c:59:d1:
                    04:ec:50:30:e9:65:32:24:92:91:9c:bd:86:54:f3:
                    a1:19:6c:89:e4:b9:a6:b4:42:0c:9e:c1:54:b5:2d:
                    a3:13:5e:7d:c8:21:48:71:e7:1f:79:d0:58:cc:08:
                    b3:08:1f:83:37:ff:0d:bb:10:bc:1d:3e:dd:24:8a:
                    3e:eb:ea:cf:f5:00:16:ba:93:49:d0:16:ed:06:30:
                    cf:2c:86:ea:92:0e:7f:ff:b7:b8:64:bb:db:b9:8d:
                    d9:12:a8:71:ed:20:be:1b:07:91:8e:78:1f:14:97:
                    a0:00:d1:b6:cc:1a:61:cc:d1:67:c4:51:dc:d1:15:
                    76:59:6f:c5:57:32:fc:0a:48:d4:ab:6d:41:f1:24:
                    8f:21:f1:b4:b9:ea:90:53:d0:19:2e:c8:a0:a6:e7:
                    0c:8f:c8:ea:4c:e6:aa:51:48:b5:1d:cf:ee:77:56:
                    44:94:a2:ed:b5:c9:58:ea:66:d2:9c:68:72:09:55:
                    c1:0f:3a:dd:e9:99:46:cf:f7:87:ea:cf:5a:5d:6e:
                    ae:ea:0c:e2:20:23:c6:76:45:f2:e3:e4:3a:1c:3f:
                    71:d1:61:6f:44:9a:19:f3:43:5b:e5:42:6a:a9:2c:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.56.0/22
                  143.0.56.0/22
                  168.232.160.0/22
                  170.231.232.0/22
                  177.125.168.0/21
                IPv6:
                  2804:d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52613

    Signature Algorithm: sha256WithRSAEncryption
         a6:0c:ad:49:eb:b1:13:e6:72:5a:cd:1a:38:c5:0d:c8:49:ee:
         c1:8a:28:33:cb:7f:f1:04:df:79:d4:6f:59:31:d8:ec:13:bf:
         63:83:2f:de:b1:5f:79:0b:32:c7:b3:c7:2e:f9:c2:9c:18:65:
         f0:4a:ac:ad:0e:fe:50:5f:2b:2f:42:d1:11:71:e3:e0:99:e9:
         a1:6e:7b:45:27:07:b2:90:6b:d7:bf:e9:4b:f7:fa:ca:0b:63:
         e2:f2:81:f1:2b:27:52:1b:a0:01:06:09:91:3e:1f:63:75:54:
         01:13:ce:d1:4e:4f:5d:69:a7:d5:07:e4:7c:c0:29:72:dc:86:
         e5:fb:a4:ae:60:fc:ee:f8:f4:a3:61:a7:6c:40:ef:f7:ce:55:
         59:7c:64:37:ab:21:d4:35:91:fa:70:b7:e6:46:80:62:41:25:
         6b:d5:47:4f:93:62:4a:ff:d4:ae:0f:ba:93:64:08:32:76:ef:
         8a:04:f3:29:19:ad:a4:c2:2a:3a:00:ae:7c:89:53:f1:0c:85:
         c0:e5:6c:eb:f4:ad:d0:93:df:34:a9:1b:3e:12:39:cd:59:c3:
         c1:8a:6d:df:44:e8:a1:96:2c:e1:67:86:7b:30:29:5c:fb:9e:
         db:2f:22:03:da:90:29:4c:08:a1:d0:99:5d:43:88:9c:68:3d:
         60:5e:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org