Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.cer
File:                     2E0076A37EFDCC7006F754C5E68251073C6A031D.cer (raw, json)
Hash identifier:          On8vbkdqv7x18IET1Yk+v2E5TxwVL2GVuTFD/ZAwLHs=
Subject key identifier:   2E:00:76:A3:7E:FD:CC:70:06:F7:54:C5:E6:82:51:07:3C:6A:03:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5EC9858D80896FD8DB17035F6B88FC2CD4F5EA56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 12:42:31 +0000
Certificate not after:    Tue 15 Oct 2024 12:47:31 +0000
Subordinate resources:    AS: 266584
                          IP: 45.7.116.0/22
                          IP: 2804:3e44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c9:85:8d:80:89:6f:d8:db:17:03:5f:6b:88:fc:2c:d4:f5:ea:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 12:42:31 2023 GMT
            Not After : Oct 15 12:47:31 2024 GMT
        Subject: CN=2E0076A37EFDCC7006F754C5E68251073C6A031D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:f4:ad:04:13:17:2f:2e:22:6a:8d:c3:37:
                    e7:cf:0f:42:68:f1:5a:56:2a:23:ad:cb:72:26:33:
                    a7:fa:4f:f8:c5:65:8a:6f:c2:db:18:5b:9e:1f:80:
                    6b:4b:a0:0d:bb:b4:1f:d3:37:87:c6:6c:72:c5:35:
                    20:f3:12:4c:ff:5e:1d:f9:be:ac:ad:4c:5d:75:48:
                    9a:fd:0d:b1:46:8c:c3:98:db:ee:52:41:5d:be:df:
                    b5:4d:d4:28:45:38:a1:3e:81:d7:c4:04:bb:f4:84:
                    32:47:df:7e:21:fa:11:7c:9b:f0:18:22:8e:27:29:
                    34:c2:e2:a2:c2:12:a4:5e:59:87:fa:91:8f:48:f2:
                    da:5b:ba:5b:12:67:ca:f4:50:51:82:1c:ca:cd:10:
                    a9:86:9d:98:bb:a2:8e:81:3a:d5:34:d5:85:ae:6c:
                    99:7a:e2:50:dd:be:39:9e:3f:8b:e2:e2:ef:2d:75:
                    96:26:6a:99:d7:7f:10:7c:f6:f5:af:80:35:74:7b:
                    d7:16:06:e6:d0:f6:0b:e2:02:65:6a:bb:24:88:55:
                    8f:dd:41:82:e2:2f:31:eb:42:a7:c3:e0:c6:2b:72:
                    37:56:c9:36:2c:64:d8:17:7b:41:71:fe:13:05:5d:
                    2f:a1:8a:d1:93:96:30:a6:0d:df:0a:19:a7:79:7a:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:00:76:A3:7E:FD:CC:70:06:F7:54:C5:E6:82:51:07:3C:6A:03:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22
                IPv6:
                  2804:3e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266584

    Signature Algorithm: sha256WithRSAEncryption
         90:39:7f:15:ef:4b:26:76:fa:49:fb:91:37:6f:e1:15:dd:b9:
         d1:22:99:0d:16:d5:1c:38:12:53:51:db:3c:be:07:d3:0c:5b:
         f2:3a:37:82:1f:52:42:b3:5c:7f:23:94:86:a0:1f:0c:06:49:
         59:62:d1:fa:36:eb:19:5c:59:79:13:d2:42:9d:d9:ea:4b:6b:
         77:a0:ad:ed:ee:75:40:06:b7:c2:86:3a:87:8e:17:86:15:91:
         77:1b:83:60:6d:b4:86:b9:a3:3d:83:34:ca:03:9d:e9:98:21:
         19:8e:16:eb:02:06:e8:7c:2c:87:d6:99:8d:05:5b:3b:e8:02:
         50:78:54:83:8b:5f:c7:ca:f2:02:fb:e4:ae:49:fa:e6:6b:6a:
         70:e8:34:da:b9:0d:f9:23:13:c1:96:aa:71:a0:9f:8d:d3:a7:
         e2:dd:ab:aa:e8:c3:31:40:c7:94:84:c3:83:b5:69:80:1a:5a:
         04:f9:18:d1:8a:ea:73:0e:b7:7a:fc:70:40:97:44:a4:0c:69:
         7d:c5:bc:4f:88:a9:b7:78:60:1f:59:d1:8e:92:a3:c3:c3:54:
         a4:64:1e:18:48:18:99:cf:dc:42:a1:29:ad:34:2d:eb:22:5d:
         f3:08:64:af:b2:b0:eb:73:59:4a:9b:7e:17:24:ce:88:d8:e4:
         b9:d4:0f:2f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUXsmFjYCJb9jbFwNfa4j8LNT16lYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTcxMjQyMzFaFw0yNDEwMTUxMjQ3MzFaMDMxMTAvBgNV
BAMTKDJFMDA3NkEzN0VGRENDNzAwNkY3NTRDNUU2ODI1MTA3M0M2QTAzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOvStBBMXLy4iao3DN+fPD0Jo
8VpWKiOty3ImM6f6T/jFZYpvwtsYW54fgGtLoA27tB/TN4fGbHLFNSDzEkz/Xh35
vqytTF11SJr9DbFGjMOY2+5SQV2+37VN1ChFOKE+gdfEBLv0hDJH334h+hF8m/AY
Io4nKTTC4qLCEqReWYf6kY9I8tpbulsSZ8r0UFGCHMrNEKmGnZi7oo6BOtU01YWu
bJl64lDdvjmeP4vi4u8tdZYmapnXfxB89vWvgDV0e9cWBubQ9gviAmVquySIVY/d
QYLiLzHrQqfD4MYrcjdWyTYsZNgXe0Fx/hMFXS+hitGTljCmDd8KGad5eoG9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuAHajfv3McAb3
VMXmglEHPGoDHTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zbUthemF5OVhXbzdlWmpUdFFVOG9RV3ZMc1RIYU5GZWFu
TldaNlRacnRNZS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zbUthemF5OVhXbzdlWmpUdFFVOG9RV3ZMc1RIYU5GZWFu
TldaNlRacnRNZS8wLzJFMDA3NkEzN0VGRENDNzAwNkY3NTRDNUU2ODI1MTA3M0M2
QTAzMUQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0HdDANBAIAAjAHAwUA
KAQ+RDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEVgwDQYJKoZIhvcNAQELBQAD
ggEBAJA5fxXvSyZ2+kn7kTdv4RXdudEimQ0W1Rw4ElNR2zy+B9MMW/I6N4IfUkKz
XH8jlIagHwwGSVli0fo26xlcWXkT0kKd2epLa3egre3udUAGt8KGOoeOF4YVkXcb
g2BttIa5oz2DNMoDnemYIRmOFusCBuh8LIfWmY0FWzvoAlB4VIOLX8fK8gL75K5J
+uZranDoNNq5DfkjE8GWqnGgn43Tp+Ldq6rowzFAx5SEw4O1aYAaWgT5GNGK6nMO
t3r8cECXRKQMaX3FvE+Iqbd4YB9Z0Y6So8PDVKRkHhhIGJnP3EKhKa00LesiXfMI
ZK+ysOtzWUqbfhckzojY5LnUDy8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org