Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EED88D39BA7F1A61A666812AD70DE90382BE9248.cer
File:                     EED88D39BA7F1A61A666812AD70DE90382BE9248.cer (raw, json)
Hash identifier:          D/SzfJ4w5EtGM7Za19Kqim/3xqgpxCSsyc+bQT0Md9E=
Subject key identifier:   EE:D8:8D:39:BA:7F:1A:61:A6:66:81:2A:D7:0D:E9:03:82:BE:92:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3444D662C362A51262F4E8A69C6753396875BA67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/EED88D39BA7F1A61A666812AD70DE90382BE9248.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Jan 2023 15:59:45 +0000
Certificate not after:    Mon 08 Jan 2024 16:04:45 +0000
Subordinate resources:    AS: 266492
                          IP: 170.244.64.0/22
                          IP: 2804:38a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:44:d6:62:c3:62:a5:12:62:f4:e8:a6:9c:67:53:39:68:75:ba:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 15:59:45 2023 GMT
            Not After : Jan  8 16:04:45 2024 GMT
        Subject: CN=EED88D39BA7F1A61A666812AD70DE90382BE9248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:b6:5e:49:ab:5f:ad:4f:26:48:b3:55:c5:
                    1c:c5:56:c6:1f:95:bf:72:f9:71:9c:92:39:d6:a0:
                    db:7a:4a:1c:e2:e0:96:ee:21:29:4d:c9:20:f7:04:
                    84:93:54:50:37:ab:fa:35:13:27:5b:ee:16:41:bf:
                    16:fd:58:bd:79:80:e8:b1:1b:30:5f:69:6d:91:48:
                    d1:f1:cc:c8:d6:cd:31:70:2b:57:3f:e0:6f:82:a0:
                    26:4c:cd:93:86:fb:8c:30:db:8f:6b:48:9a:0b:eb:
                    b0:02:c8:5a:0c:62:3c:22:3e:99:e3:dc:00:ff:5a:
                    f5:46:bd:c8:b2:26:de:cc:1a:50:2c:46:40:51:63:
                    0e:6f:78:ec:d9:ce:4f:b5:a9:c4:34:be:62:84:49:
                    7f:c2:0e:38:e1:b1:9f:30:c0:57:d5:85:74:7b:fe:
                    2f:72:9f:81:b8:04:c2:62:ea:7b:37:55:5b:d0:90:
                    7a:1a:21:26:9c:72:9a:aa:25:1a:13:69:4d:67:68:
                    1d:fe:4b:d0:a3:49:7c:53:ce:cd:34:62:0f:d9:c3:
                    14:47:41:92:f8:c4:75:fe:d1:df:35:4f:f8:10:ec:
                    69:92:24:88:54:ed:94:1f:0c:68:27:bd:99:04:70:
                    0e:3e:2d:3f:74:c1:3e:26:bd:c6:c8:66:1c:2e:a5:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:D8:8D:39:BA:7F:1A:61:A6:66:81:2A:D7:0D:E9:03:82:BE:92:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/EED88D39BA7F1A61A666812AD70DE90382BE9248.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.64.0/22
                IPv6:
                  2804:38a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266492

    Signature Algorithm: sha256WithRSAEncryption
         81:28:ff:78:b6:e2:7e:f1:3a:7d:2a:51:2e:94:c8:bf:23:5a:
         75:8d:65:60:31:29:79:6c:d4:48:a2:ca:6d:d2:18:9b:b2:0d:
         71:b7:f3:11:1d:f2:d9:70:5f:6f:1a:77:ba:be:2d:a8:73:83:
         f3:8d:ba:de:c5:4c:17:5f:41:c3:c9:8b:df:ab:f7:ed:12:fc:
         e4:6e:f9:49:44:22:f3:01:16:2c:1c:20:4b:4a:12:67:58:2a:
         4f:42:78:63:73:ad:c6:0d:c4:30:62:1a:9a:54:a4:ae:18:4c:
         72:b5:cd:ac:18:62:51:e7:d4:08:df:d8:d4:63:7b:1e:f7:14:
         25:1d:03:93:ae:01:49:f2:fd:4a:79:9e:9a:5e:69:1e:da:a4:
         13:f6:59:80:39:30:a5:a9:3f:8b:01:5f:4d:6c:00:c7:18:fe:
         c9:ba:25:e8:5b:d8:9c:07:7e:6e:0c:ea:91:f8:40:8f:64:d2:
         13:40:8d:0d:ab:ac:2c:31:01:b9:5e:49:53:e5:19:10:e8:f9:
         38:c2:03:df:9b:d2:14:e4:61:84:3b:44:b0:26:6b:30:70:2d:
         c8:6f:ae:cf:d2:73:50:40:a6:1c:b3:df:31:ef:cf:5b:a7:07:
         7c:3a:0d:ef:0f:9a:15:84:15:d6:e7:28:c5:7f:d0:d5:61:32:
         e7:c0:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org