Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.cer
File:                     EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.cer (raw, json)
Hash identifier:          hr3zLnpm/Q4qBJOgWYoBFue18HCZYJUag950fp7+RCw=
Subject key identifier:   EE:C6:BC:61:93:AF:E1:9E:DF:1A:1C:FB:6C:4F:29:E1:A3:E1:2B:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0749FF8ED02A29892203746DC40FCD785ECAC9B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 22:43:58 +0000
Certificate not after:    Fri 13 Dec 2024 22:48:58 +0000
Subordinate resources:    AS: 264939
                          IP: 168.228.152.0/22
                          IP: 2804:3040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:49:ff:8e:d0:2a:29:89:22:03:74:6d:c4:0f:cd:78:5e:ca:c9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 22:43:58 2023 GMT
            Not After : Dec 13 22:48:58 2024 GMT
        Subject: CN=EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:50:11:cd:59:09:68:d1:3f:a3:c9:51:9a:
                    d3:76:16:1b:ac:ce:b3:88:09:ed:46:92:69:d0:c9:
                    0b:31:66:3c:60:46:5f:bd:01:74:6d:6a:f5:07:7d:
                    cc:b7:7f:1e:82:b5:46:2e:92:f2:f1:06:7d:3c:15:
                    f2:53:54:ae:9b:cd:4e:0d:8f:f0:91:74:a7:18:4b:
                    e9:a8:77:56:c5:0f:2c:0a:7a:5e:8d:9a:80:5d:e2:
                    7b:51:a2:35:f5:1b:51:4d:2e:e1:da:49:4b:d4:96:
                    65:91:25:4c:25:7e:74:b2:11:95:06:b8:96:4c:ec:
                    0d:7f:32:de:64:36:3d:ee:e3:a3:2d:dc:6a:8a:6a:
                    d4:43:5a:68:4e:20:e9:b3:ca:e3:67:1e:5d:31:85:
                    dd:54:c5:8d:da:f8:8e:20:a5:46:e5:08:93:97:54:
                    de:ba:5f:68:26:98:3a:b4:b4:45:e1:03:97:bf:e9:
                    72:69:60:9b:d5:36:4c:01:0d:ac:b7:e0:5a:bd:07:
                    3b:b9:dd:e5:c1:f7:ab:85:8b:2c:3a:5c:ba:bd:7d:
                    b7:fe:c0:64:70:56:bc:69:dd:61:36:d9:92:bf:50:
                    6a:34:9b:11:5b:5c:4a:5e:4b:90:21:3c:89:67:57:
                    42:72:c1:d5:07:cd:84:ed:7b:5b:6a:8c:c2:e0:c3:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:C6:BC:61:93:AF:E1:9E:DF:1A:1C:FB:6C:4F:29:E1:A3:E1:2B:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/EEC6BC6193AFE19EDF1A1CFB6C4F29E1A3E12BC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.152.0/22
                IPv6:
                  2804:3040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264939

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:8d:d0:3d:bb:22:24:66:7c:95:c5:7a:18:94:80:3e:5b:
         28:59:bd:5f:55:1d:a5:36:ea:63:d4:e9:b8:e3:4d:43:62:d2:
         cf:7f:e2:a2:18:13:8b:0c:a6:91:18:ae:27:13:ad:72:8a:74:
         76:b6:25:b3:4b:4b:48:9a:8f:ef:2a:2a:18:31:a3:2b:9e:52:
         7b:3c:3a:de:c6:a9:14:1d:a1:f8:02:7d:70:8c:76:a1:84:6a:
         7f:73:17:c2:4f:2b:5b:b1:b4:74:74:5a:5f:fc:fd:91:18:d2:
         c9:21:69:ff:cd:1a:3e:8d:54:a2:19:0e:b8:d6:84:52:f0:1d:
         cf:7f:a9:7d:09:59:b1:16:de:2e:66:39:79:38:16:20:fa:1f:
         f5:42:90:c6:d4:74:3b:f9:37:dc:b5:97:5c:da:79:f8:44:0b:
         21:15:de:4f:2d:b6:dd:13:6b:f3:e6:31:b1:b1:7f:82:38:7c:
         bf:7c:4c:2a:7a:24:49:d6:33:d8:63:4c:a0:1e:b4:d7:96:d5:
         17:6b:0d:44:59:df:a7:ea:28:2c:f7:82:01:75:e9:c9:d4:3c:
         4f:65:f3:1f:09:b9:f3:f2:64:62:45:ad:a3:69:db:f5:33:19:
         1a:e3:a5:0f:43:39:3c:06:ab:9d:64:ea:e0:5c:09:93:4c:d9:
         ca:bf:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org