Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer
File:                     EF531ED7D14F0D5A9816244417F263E1E521376E.cer (raw, json)
Hash identifier:          eZcgfliJwnKhd25pkkM57iBXvq050BHNeMX5e/4/ElM=
Subject key identifier:   EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AA1A73823D2A7927246529B097D18A66EF14538
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/EF531ED7D14F0D5A9816244417F263E1E521376E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Sep 2022 21:42:40 +0000
Certificate not after:    Thu 14 Sep 2023 21:47:40 +0000
Subordinate resources:    AS: 265485
                          IP: 168.197.156.0/22
                          IP: 2804:34dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a1:a7:38:23:d2:a7:92:72:46:52:9b:09:7d:18:a6:6e:f1:45:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 21:42:40 2022 GMT
            Not After : Sep 14 21:47:40 2023 GMT
        Subject: CN=EF531ED7D14F0D5A9816244417F263E1E521376E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:3d:4d:5d:50:b8:4e:ba:e4:1a:f7:2b:68:
                    12:95:89:62:44:30:6f:ff:c9:0a:b2:58:77:0c:eb:
                    7c:58:95:1d:e6:32:d6:ae:5b:c0:1f:4e:f7:43:50:
                    5e:0d:e9:ab:0a:13:fc:6e:4e:46:e7:90:eb:1e:91:
                    e8:36:03:51:00:ba:8c:0a:71:ea:92:a2:92:49:30:
                    6c:5b:d4:05:6b:5b:41:a9:f0:30:82:f8:b4:a1:de:
                    0d:ee:be:64:81:46:e2:76:cf:da:3d:fd:88:cc:18:
                    fc:97:d6:0a:04:a7:98:1f:ee:cc:35:f1:65:b2:33:
                    ff:a7:ed:85:04:cd:7e:83:16:01:94:71:f7:30:1f:
                    92:49:9b:c7:c9:ce:ed:81:aa:62:27:af:13:5d:85:
                    b4:a7:46:d9:4a:b2:bd:c2:81:bc:89:d6:09:be:8d:
                    19:8c:43:81:d1:38:8f:9c:8a:e3:2c:5e:a2:55:2c:
                    05:27:06:ba:36:f0:c6:c1:ef:1d:5d:92:fd:a8:a0:
                    e6:0f:35:a8:ac:8f:64:76:2c:9c:93:b6:42:fb:09:
                    8b:1c:97:6b:86:e7:19:76:66:87:cb:28:28:e8:6e:
                    ce:06:b1:c1:13:9a:bc:c4:1e:79:7d:21:cb:4a:2d:
                    67:5e:a7:91:88:2a:0e:65:15:26:42:47:31:7a:f6:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/EF531ED7D14F0D5A9816244417F263E1E521376E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.156.0/22
                IPv6:
                  2804:34dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265485

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:9d:8a:d0:f8:81:6a:7d:8d:a1:ab:9a:2a:e2:1d:13:2e:
         51:51:2a:4b:eb:ca:9e:cd:3d:40:58:bd:e1:02:a6:92:02:ed:
         7d:7d:ef:9b:1a:7d:80:86:65:ee:2f:21:56:c7:18:d0:77:be:
         53:a7:38:35:7b:7b:d9:4f:03:3f:a8:df:ba:21:9e:74:b7:e3:
         e3:47:77:8c:6f:ad:10:f6:69:ba:98:b1:4b:c8:f0:58:c7:30:
         0b:09:24:80:00:b8:03:f1:b1:7e:1c:9d:af:54:44:15:65:ba:
         f0:46:b5:85:c7:04:35:14:fc:54:55:8c:99:82:dc:28:2b:6b:
         0f:9c:a7:0d:a1:09:03:90:f8:4a:bf:8a:3b:d9:c1:5c:af:8f:
         3e:31:30:fd:ed:6f:d6:64:a7:3e:07:48:ea:ff:19:0d:15:e6:
         0c:74:f5:23:84:19:5e:38:41:f3:0a:e1:a6:62:b3:c6:4a:36:
         c1:a0:51:95:3d:15:0a:e7:7c:f8:d7:76:ed:52:bb:73:d9:77:
         2c:62:ff:b1:2e:97:85:76:80:5c:f0:05:e9:79:fa:8b:ab:5d:
         e7:fa:0b:9b:e8:b4:85:d1:c0:a5:15:94:47:4b:05:57:86:58:
         9a:bb:b7:57:93:ef:7b:cd:d8:de:99:0f:31:30:6a:57:71:47:
         3c:24:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org