Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EEC12DF44574CAD2F70FA261D1754C894C2B5CD0.cer
File:                     EEC12DF44574CAD2F70FA261D1754C894C2B5CD0.cer (raw, json)
Hash identifier:          CPACHZwzRCIOsFvQwl7vq2v7fsv/7wMGRn5i5j/M59E=
Subject key identifier:   EE:C1:2D:F4:45:74:CA:D2:F7:0F:A2:61:D1:75:4C:89:4C:2B:5C:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20993A3E4D5F6CAA5AC08A3D23749F4A20401026
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/EEC12DF44574CAD2F70FA261D1754C894C2B5CD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 20:07:25 +0000
Certificate not after:    Mon 08 Apr 2024 20:12:25 +0000
Subordinate resources:    AS: 267657
                          IP: 45.224.112.0/22
                          IP: 2804:44d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:99:3a:3e:4d:5f:6c:aa:5a:c0:8a:3d:23:74:9f:4a:20:40:10:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 20:07:25 2023 GMT
            Not After : Apr  8 20:12:25 2024 GMT
        Subject: CN=EEC12DF44574CAD2F70FA261D1754C894C2B5CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:06:68:91:bd:41:e5:70:f8:08:b3:2f:64:29:
                    4c:9a:ed:2a:62:85:0a:ca:14:53:cb:46:52:30:4e:
                    ec:b3:8f:ba:db:94:01:32:1f:b2:f3:1c:92:5c:4d:
                    33:27:3f:fa:0f:6a:93:32:ba:ce:b4:8b:38:e2:51:
                    f3:ea:f0:af:f5:2d:e2:76:43:2e:3c:8c:94:3b:a6:
                    50:dd:fb:55:a3:68:48:a4:73:ed:af:d8:a3:c5:a5:
                    22:d2:1f:db:a0:ac:8c:29:2f:f5:ba:b9:34:67:ed:
                    4d:1c:ba:75:9f:aa:d6:ba:b3:52:af:e5:5c:85:b5:
                    c4:47:b6:d0:93:84:6f:dc:d8:c7:b5:5f:3d:40:26:
                    96:a1:59:b8:2e:9a:e4:45:b5:a2:57:fd:86:34:0a:
                    9e:0c:61:6b:64:3b:d9:85:5d:be:ac:1b:e8:a0:3e:
                    5e:72:9d:99:cf:29:4a:22:62:ef:ec:3c:4e:a0:2a:
                    01:f4:5e:df:08:55:3e:19:20:8f:c7:51:8f:0c:dc:
                    04:db:bc:e5:35:e0:7a:94:e4:30:ed:0f:68:5e:dc:
                    6c:6c:d3:29:ac:69:98:98:70:4a:ac:4c:61:d9:50:
                    e8:98:0a:e3:72:ca:62:7d:55:a2:c0:ec:23:06:27:
                    82:8e:00:8a:d5:77:68:21:e3:9f:26:5d:6f:a0:5b:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:C1:2D:F4:45:74:CA:D2:F7:0F:A2:61:D1:75:4C:89:4C:2B:5C:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/EEC12DF44574CAD2F70FA261D1754C894C2B5CD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.112.0/22
                IPv6:
                  2804:44d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267657

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:b5:e1:37:f1:8c:31:9a:94:f0:29:14:8d:4d:1e:37:6e:
         4a:ba:c8:1e:a4:47:d3:36:3b:e2:82:30:cb:29:53:5c:d7:02:
         f2:64:f8:be:26:05:ea:d2:9e:81:d0:87:b4:7c:7b:99:df:89:
         d3:c5:a5:1a:c4:12:e6:30:4a:3a:c5:cd:ee:bd:dd:f1:09:3c:
         b4:be:08:34:69:26:2d:5e:56:3e:e8:6d:b7:8c:b6:59:9b:36:
         30:b3:02:f1:ad:c0:c7:f2:39:a8:82:61:8f:e8:9c:12:41:a3:
         b9:9b:94:2a:df:62:2b:8b:9a:2a:24:f0:ff:7d:20:a8:9c:ed:
         6d:46:8d:59:83:eb:91:72:53:84:18:73:7f:d5:d9:a5:2c:44:
         92:c8:3c:75:13:23:af:b0:5a:af:06:96:2c:61:f8:36:81:bf:
         57:3a:7e:74:f1:b0:8b:92:f7:3c:ec:9b:ce:55:ce:12:ff:8d:
         ca:72:38:84:bd:bd:28:21:ac:14:5c:9f:07:d0:78:52:66:54:
         88:34:75:09:67:23:d6:7d:19:ab:96:2d:5f:51:1e:a8:16:43:
         78:12:51:69:00:75:43:fe:4e:7b:11:2c:47:92:02:e1:d0:e9:
         6f:94:6b:5f:c4:8b:73:ac:fb:8a:8f:50:71:71:c6:61:28:72:
         7d:0a:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org