Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
File:                     2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer (raw, json)
Hash identifier:          6otfJtP7FQA3FKGLHdHzUE2HQUqvpJo6FvDufrPJxtQ=
Subject key identifier:   2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C6DE723412462B42DF5B7A2BF1280597D153F82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 18:44:32 +0000
Certificate not after:    Fri 04 Oct 2024 18:49:32 +0000
Subordinate resources:    AS: 52759
                          AS: 262537
                          IP: 177.38.200.0/21
                          IP: 177.72.0.0/21
                          IP: 2804:5c0::/32
                          IP: 2804:b3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6d:e7:23:41:24:62:b4:2d:f5:b7:a2:bf:12:80:59:7d:15:3f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 18:44:32 2023 GMT
            Not After : Oct  4 18:49:32 2024 GMT
        Subject: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:2d:fb:c0:d0:e9:79:d7:b2:47:44:2b:8c:
                    85:0c:f1:e9:6d:91:ea:b6:ee:3a:3c:9e:84:d1:b4:
                    3f:be:e0:91:a4:d4:cc:1d:01:c7:96:5d:ad:b3:02:
                    fd:29:36:ad:32:1a:cc:83:85:3b:15:80:fa:65:fe:
                    51:6a:e3:83:2a:07:87:21:65:4a:e0:b8:c5:01:ff:
                    32:19:3d:0f:74:33:d0:18:f2:e2:35:c5:f1:f8:6e:
                    7b:b0:97:2a:b8:99:12:aa:3d:17:76:3f:7a:88:f9:
                    39:7a:d7:4d:2a:63:0e:20:76:8c:2c:50:48:61:ce:
                    f1:82:cd:32:af:82:05:89:8d:77:c1:69:49:18:57:
                    88:90:88:50:3d:4e:b8:4f:45:6c:cf:67:59:8f:a9:
                    3d:de:ad:f7:c9:a8:00:a4:83:c9:25:1d:6b:49:b5:
                    ac:dd:ed:99:c7:d8:68:d4:d5:fc:33:b1:8d:f6:93:
                    9e:4f:2f:14:7f:ac:ef:68:65:fd:74:3d:d1:ef:2d:
                    87:d5:21:c5:a6:d1:bb:f6:1e:3f:c3:5d:33:a0:55:
                    c6:49:9e:10:68:66:5f:2c:7f:e2:cb:7b:40:8b:e3:
                    2b:90:e3:1e:b0:8e:66:d6:5f:86:70:fd:c2:c5:cf:
                    ad:b5:e9:61:9d:0a:e0:9d:fb:43:ff:25:6a:8b:db:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.200.0/21
                  177.72.0.0/21
                IPv6:
                  2804:5c0::/32
                  2804:b3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52759
                  262537

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:b0:9d:7e:11:76:b7:9c:a2:a9:5c:a7:ca:1d:bc:6b:b2:
         19:1f:1c:0c:6e:1c:3c:1a:7b:e1:db:5f:52:42:48:79:45:94:
         4e:e1:4d:98:73:08:db:52:29:e5:8a:e4:94:36:51:e5:b1:30:
         ec:dd:61:c6:81:8d:18:a4:b4:79:a6:ca:36:b5:f3:87:1f:87:
         6e:e7:d6:09:b5:62:38:23:91:b7:a6:f4:20:89:7a:d7:54:1a:
         55:db:a7:9f:ff:14:4b:4b:4a:63:5d:87:ad:ca:cd:ef:66:f0:
         f6:ac:cb:4e:2e:f2:1c:e9:be:c7:90:2d:fd:34:dc:36:c8:c7:
         26:41:ea:7d:35:41:4a:56:42:b4:71:c0:81:40:4f:3e:41:d5:
         4c:2f:8b:fc:4d:ef:95:a6:96:80:fe:b5:11:26:8a:5b:b9:78:
         95:6f:e1:78:8f:59:f9:0c:41:22:6d:13:db:70:98:1a:fc:46:
         9c:af:42:b4:27:d4:ad:20:46:6a:4b:81:e6:1b:42:10:63:f2:
         1e:83:cd:84:6f:36:65:96:d3:1a:f4:0a:c1:cc:67:fe:3b:cb:
         e2:6b:ee:31:86:9e:6c:79:46:c7:c2:c7:ac:07:4f:ac:e7:eb:
         89:d1:12:c6:5a:f1:7b:7c:df:6a:78:27:d0:f4:50:25:b9:1a:
         ee:5c:53:5a
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUXG3nI0EkYrQt9beivxKAWX0VP4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMDYxODQ0MzJaFw0yNDEwMDQxODQ5MzJaMDMxMTAvBgNV
BAMTKDJFODQ5MDQxOEQ3MjU0RjA2QjkwRUMyRkMxNEIxMTAyQzRBMDY5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXaC37wNDpedeyR0QrjIUM8elt
keq27jo8noTRtD++4JGk1MwdAceWXa2zAv0pNq0yGsyDhTsVgPpl/lFq44MqB4ch
ZUrguMUB/zIZPQ90M9AY8uI1xfH4bnuwlyq4mRKqPRd2P3qI+Tl6100qYw4gdows
UEhhzvGCzTKvggWJjXfBaUkYV4iQiFA9TrhPRWzPZ1mPqT3erffJqACkg8klHWtJ
tazd7ZnH2GjU1fwzsY32k55PLxR/rO9oZf10PdHvLYfVIcWm0bv2Hj/DXTOgVcZJ
nhBoZl8sf+LLe0CL4yuQ4x6wjmbWX4Zw/cLFz6216WGdCuCd+0P/JWqL2yS3AgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuhJBBjXJU8GuQ
7C/BSxECxKBprTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9keldpVEFpVWI5RzUyejczakhGYzdlU0dySG95V2Jxemtp
dlRFd3JNbjM5LzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL2R6V2lUQWlVYjlHNTJ6NzNqSEZjN2VTR3JIb3lXYnF6a2l2
VEV3ck1uMzkvMC8yRTg0OTA0MThENzI1NEYwNkI5MEVDMkZDMTRCMTEwMkM0QTA2
OUFELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwOwYIKwYBBQUHAQcBAf8ELDAqMBIEAgABMAwDBAOxJsgDBAOxSAAwFAQCAAIw
DgMFACgEBcADBQAoBAs8MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDOFwIDBAGJ
MA0GCSqGSIb3DQEBCwUAA4IBAQBLr7CdfhF2t5yiqVynyh28a7IZHxwMbhw8Gnvh
219SQkh5RZRO4U2YcwjbUinliuSUNlHlsTDs3WHGgY0YpLR5pso2tfOHH4du59YJ
tWI4I5G3pvQgiXrXVBpV26ef/xRLS0pjXYetys3vZvD2rMtOLvIc6b7HkC39NNw2
yMcmQep9NUFKVkK0ccCBQE8+QdVML4v8Te+VppaA/rURJopbuXiVb+F4j1n5DEEi
bRPbcJga/Eacr0K0J9StIEZqS4HmG0IQY/Ieg82EbzZlltMa9ArBzGf+O8via+4x
hp5seUbHwsesB0+s5+uJ0RLGWvF7fN9qeCfQ9FAluRruXFNa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org