Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
File:                     01EB0C4181F92B1230B0D1B98892311E2B70834A.cer (raw, json)
Hash identifier:          cyyyeV4DJHZGl1T2ppbo/Nbbgs6I7GijGZeI79ASvCg=
Subject key identifier:   01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56C220F3D28D94C16D2A5690EE0C316744DD4EA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 13:35:09 +0000
Certificate not after:    Tue 08 Oct 2024 13:40:09 +0000
Subordinate resources:    AS: 262808
                          IP: 177.37.112.0/20
                          IP: 177.75.32.0/21
                          IP: 189.90.112.0/20
                          IP: 191.253.208.0/20
                          IP: 2804:1368::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c2:20:f3:d2:8d:94:c1:6d:2a:56:90:ee:0c:31:67:44:dd:4e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 13:35:09 2023 GMT
            Not After : Oct  8 13:40:09 2024 GMT
        Subject: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:b3:c1:76:8e:13:c4:4b:25:f1:c1:aa:29:
                    f9:79:e1:1b:5b:93:86:97:c8:02:b3:94:41:b8:89:
                    3a:5e:63:74:29:15:de:0e:4c:18:96:4d:d8:d6:91:
                    cc:06:8e:1a:f8:b9:63:e0:98:9a:f4:a2:fc:f5:f1:
                    cb:99:90:4f:c7:0c:f1:2e:97:ac:1f:12:e6:b1:3b:
                    cd:e6:83:63:62:c6:ba:37:8c:89:cd:05:71:a2:7e:
                    05:2e:90:7a:73:cd:11:ab:2e:8a:f9:51:77:50:96:
                    9c:6c:ed:19:48:23:89:ac:42:18:41:93:cc:ba:ff:
                    85:65:3a:68:b2:ef:23:dc:9f:ea:54:00:be:75:93:
                    bd:c1:2f:98:b0:81:ed:a7:c4:ce:b9:f7:b6:ae:f1:
                    e0:d6:f3:58:a3:6d:d7:d7:76:fb:72:78:c3:b9:d4:
                    5a:c9:75:36:e6:22:74:75:b7:73:d0:6c:d9:4a:50:
                    66:cf:7b:90:e8:67:65:ee:9e:02:ac:4c:1f:0a:76:
                    e4:01:96:d4:57:52:62:19:36:e3:de:4a:38:96:19:
                    0b:a6:88:61:b1:22:ce:e2:ff:db:77:21:d9:91:6f:
                    54:a9:7e:e3:ac:62:03:aa:6e:6e:cf:71:54:28:59:
                    8a:dc:d4:0c:15:3c:8a:25:27:98:18:68:bb:e0:96:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.112.0/20
                  177.75.32.0/21
                  189.90.112.0/20
                  191.253.208.0/20
                IPv6:
                  2804:1368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262808

    Signature Algorithm: sha256WithRSAEncryption
         42:25:ec:30:09:05:7c:43:2f:59:98:d3:74:91:b4:e8:b6:35:
         0d:99:e0:2f:af:2d:ea:c1:78:10:d7:33:87:15:84:c8:c5:d7:
         2a:e8:1b:38:c6:6c:48:1b:e6:9c:f5:f4:26:a7:7a:43:3b:a5:
         69:75:5c:d4:ec:bf:32:79:de:e8:53:02:cf:a8:27:59:c4:d3:
         31:04:a3:26:00:59:1b:8d:b2:51:0d:01:e8:98:31:ba:b1:df:
         23:eb:83:4a:fc:e2:9b:88:27:10:e7:7e:93:39:a6:07:60:60:
         3a:bf:78:4d:cd:f4:34:36:de:ea:06:1a:41:51:dc:b9:4b:91:
         74:67:6a:03:e2:47:64:d0:00:4b:60:cf:61:71:e1:6c:d8:80:
         de:df:af:4d:f8:e1:01:4f:2d:dd:33:2c:98:d5:96:9e:17:19:
         27:23:d8:30:ae:aa:2f:9d:0e:2e:61:aa:53:1b:62:1b:10:c2:
         e2:ae:1b:c8:40:3a:74:ba:47:02:15:64:30:d4:a9:38:c4:d1:
         40:06:a0:c8:90:77:88:7b:14:78:9a:b9:f2:47:b5:17:53:20:
         ad:25:2e:ed:80:bd:a8:ff:33:56:6a:03:b8:28:29:29:02:33:
         24:6e:bf:7c:10:03:6f:f9:5a:24:3f:59:86:f2:28:36:ec:fb:
         12:c7:59:b0
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUVsIg89KNlMFtKlaQ7gwxZ0TdTqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTAxMzM1MDlaFw0yNDEwMDgxMzQwMDlaMDMxMTAvBgNV
BAMTKDAxRUIwQzQxODFGOTJCMTIzMEIwRDFCOTg4OTIzMTFFMkI3MDgzNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3rPBdo4TxEsl8cGqKfl54Rtb
k4aXyAKzlEG4iTpeY3QpFd4OTBiWTdjWkcwGjhr4uWPgmJr0ovz18cuZkE/HDPEu
l6wfEuaxO83mg2Nixro3jInNBXGifgUukHpzzRGrLor5UXdQlpxs7RlII4msQhhB
k8y6/4VlOmiy7yPcn+pUAL51k73BL5iwge2nxM6597au8eDW81ijbdfXdvtyeMO5
1FrJdTbmInR1t3PQbNlKUGbPe5DoZ2XungKsTB8KduQBltRXUmIZNuPeSjiWGQum
iGGxIs7i/9t3IdmRb1SpfuOsYgOqbm7PcVQoWYrc1AwVPIolJ5gYaLvglnHJAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQB6wxBgfkrEjCw
0bmIkjEeK3CDSjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BM1Q0aXhZUTQ3c1dFekpYaWpFQVphVlV2N0dDQzFxYThi
OXpHVHg2SFZNaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4
Yjl6R1R4NkhWTWgvMC8wMUVCMEM0MTgxRjkyQjEyMzBCMEQxQjk4ODkyMzExRTJC
NzA4MzRBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBASxJXADBAOxSyADBAS9
WnADBAS//dAwDQQCAAIwBwMFACgEE2gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BAKYMA0GCSqGSIb3DQEBCwUAA4IBAQBCJewwCQV8Qy9ZmNN0kbTotjUNmeAvry3q
wXgQ1zOHFYTIxdcq6Bs4xmxIG+ac9fQmp3pDO6VpdVzU7L8yed7oUwLPqCdZxNMx
BKMmAFkbjbJRDQHomDG6sd8j64NK/OKbiCcQ536TOaYHYGA6v3hNzfQ0Nt7qBhpB
Udy5S5F0Z2oD4kdk0ABLYM9hceFs2IDe369N+OEBTy3dMyyY1ZaeFxknI9gwrqov
nQ4uYapTG2IbEMLirhvIQDp0ukcCFWQw1Kk4xNFABqDIkHeIexR4mrnyR7UXUyCt
JS7tgL2o/zNWagO4KCkpAjMkbr98EANv+VokP1mG8ig27PsSx1mw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org