Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.cer
File:                     EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.cer (raw, json)
Hash identifier:          E2RfqT8A4pJhjKp/N30UPOcvxnnXf/uOXFwNz4EADHw=
Subject key identifier:   EF:89:BA:CE:71:05:E7:1E:C2:0E:AF:CA:84:04:C3:A4:BA:2C:67:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FCF74909403FADC1BF04143E9FBD7CC212EFE17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 22 Oct 2023 18:22:33 +0000
Certificate not after:    Sun 20 Oct 2024 18:27:33 +0000
Subordinate resources:    AS: 267236
                          IP: 45.231.100.0/22
                          IP: 2804:4a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cf:74:90:94:03:fa:dc:1b:f0:41:43:e9:fb:d7:cc:21:2e:fe:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 18:22:33 2023 GMT
            Not After : Oct 20 18:27:33 2024 GMT
        Subject: CN=EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c4:98:8a:ab:23:50:fa:48:f8:29:e1:1d:76:
                    c5:d3:67:9a:12:4d:f2:02:5f:f7:be:aa:8b:9a:14:
                    ef:37:7c:84:2d:2e:2f:19:1f:4e:e3:7a:35:ea:6a:
                    78:12:5b:69:a4:4b:cf:99:2a:aa:ff:d8:cc:b3:7a:
                    07:05:a1:6e:dd:18:bc:e6:fc:47:ea:a6:aa:bf:be:
                    2c:6b:76:9b:d3:34:f6:ae:38:47:dc:11:32:a0:cb:
                    dd:cb:b5:ee:f1:33:a0:30:b5:b2:86:32:0c:ba:bf:
                    77:95:3e:4d:9b:9f:d8:34:fa:c4:5a:74:7e:28:72:
                    bc:28:50:30:f3:b4:54:b2:15:36:8c:4c:3a:55:3d:
                    b0:12:c4:f6:0f:88:70:83:41:22:4c:5e:3b:8f:8a:
                    df:4e:98:22:b0:c4:8a:1f:fa:64:dd:0c:db:dc:79:
                    81:fb:db:bb:ed:ef:0d:56:cd:db:4b:0b:8f:b7:9f:
                    1d:93:83:3f:cf:34:46:06:77:0a:ba:60:16:1f:e9:
                    91:c4:5b:e5:85:68:c7:41:3d:0d:8b:45:92:81:4b:
                    58:da:42:e5:33:e7:e3:87:29:4f:02:6f:1c:1b:df:
                    61:a6:aa:a3:c3:a2:1c:22:ca:28:d6:05:93:be:c7:
                    6d:98:6c:de:f8:6d:99:da:56:aa:50:0b:8a:8a:8a:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:89:BA:CE:71:05:E7:1E:C2:0E:AF:CA:84:04:C3:A4:BA:2C:67:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.100.0/22
                IPv6:
                  2804:4a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267236

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:5e:54:8d:71:e7:0b:98:05:06:a1:44:a7:1e:e0:e4:c8:
         55:ec:41:75:39:ca:48:f1:be:24:18:cb:58:b2:ca:c9:04:ff:
         6d:af:2c:49:10:29:87:e2:5f:86:61:ff:0c:3b:b9:1e:87:3e:
         8a:f9:a4:bd:b2:d2:37:0a:a3:47:05:9f:fd:d8:27:12:9b:7c:
         9a:df:5a:5d:a9:b8:b9:28:e2:82:8c:d5:38:04:80:2c:06:71:
         60:05:f4:cc:7e:43:86:56:4e:35:1f:46:e6:33:c5:af:0f:53:
         84:1b:e3:da:85:11:1c:f3:90:ef:5d:f7:1d:23:0a:09:03:c1:
         94:f3:e8:b5:e2:5f:50:9a:5c:a8:d5:e1:94:0f:9a:4c:db:f1:
         44:61:99:ae:92:8c:71:ec:ef:b3:72:71:1f:b3:4c:bb:91:7d:
         9d:45:de:93:32:4b:4e:f5:4a:a3:56:2f:e4:2b:4c:23:90:77:
         cc:00:ea:7d:a0:15:dc:0e:49:80:80:cc:71:ec:3c:d6:8e:90:
         69:aa:e1:8b:97:c3:3a:63:9c:e4:8f:98:c3:32:01:29:1c:b3:
         33:0c:75:d9:7d:5b:50:18:39:2f:ce:0e:e8:db:a1:76:1a:e1:
         c7:07:74:af:2d:1f:6b:1f:3e:88:99:76:cd:c4:87:57:aa:e2:
         d0:14:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:45 2024 by rpki-client on console-ams.rpki-client.org