Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.cer
File:                     2ED5EFD424482750CB944AD164CEA0A8060BBCDE.cer (raw, json)
Hash identifier:          RJT++STeWYWYwKXiDxU9OJQKjsY8vj5eG4gCVPacuFw=
Subject key identifier:   2E:D5:EF:D4:24:48:27:50:CB:94:4A:D1:64:CE:A0:A8:06:0B:BC:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F387A78A429108DD7524D37229724E837AA354E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 22:30:19 +0000
Certificate not after:    Fri 14 Mar 2025 22:35:19 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:38:7a:78:a4:29:10:8d:d7:52:4d:37:22:97:24:e8:37:aa:35:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 22:30:19 2024 GMT
            Not After : Mar 14 22:35:19 2025 GMT
        Subject: CN=2ED5EFD424482750CB944AD164CEA0A8060BBCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:50:57:4d:d8:ea:df:9d:96:df:3c:94:95:
                    da:db:f9:6a:d7:a8:5f:1f:c0:70:3e:8c:90:25:f1:
                    d0:cb:48:27:d3:82:6b:06:e0:a6:bf:94:1b:44:56:
                    c0:71:98:62:65:49:72:64:fb:82:34:39:60:1e:ba:
                    c6:ff:2a:e1:3d:48:6f:32:77:f8:d1:4c:74:76:03:
                    98:f2:53:a8:7c:4c:92:86:7c:fe:1a:72:ac:e2:4b:
                    ce:37:43:2b:d4:d4:fb:8b:65:06:3e:e2:a4:56:38:
                    d3:73:e3:24:74:17:2d:78:05:10:92:d0:70:b8:e4:
                    39:36:5c:a2:d5:3d:17:8a:ff:00:c4:d7:5c:f4:2f:
                    5e:19:7b:9e:c0:70:c9:09:6e:8b:0c:82:93:76:d6:
                    2b:f2:e7:64:14:ba:b6:59:7b:35:6c:14:f3:07:48:
                    7b:a9:e8:ae:d7:47:8d:ca:3c:0e:d4:45:7e:90:d9:
                    44:91:3a:ec:b5:4a:67:78:ac:13:e7:a0:6d:6b:f9:
                    a2:35:2f:2b:03:09:39:0d:06:e9:c8:fd:83:6b:9e:
                    8b:5d:5b:71:91:1d:29:90:e0:6a:40:42:cf:31:d7:
                    61:b4:3e:79:ab:2f:7c:66:4d:a0:5d:b4:7c:9d:56:
                    20:be:54:55:ee:68:90:c9:ee:55:17:b3:52:07:c5:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:D5:EF:D4:24:48:27:50:CB:94:4A:D1:64:CE:A0:A8:06:0B:BC:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/2ED5EFD424482750CB944AD164CEA0A8060BBCDE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:95:f6:cf:bf:8c:1f:11:62:31:cc:b0:a4:f7:46:e6:be:
         3e:b6:12:fe:cb:85:84:bd:f9:9a:37:bb:2e:36:12:4a:2f:6b:
         a1:cc:3f:15:b6:d0:6b:d0:4a:62:20:c7:c0:f5:b5:c6:e4:e0:
         e4:de:b9:30:7d:24:d9:e0:7e:8d:a2:ed:0d:83:e7:7e:cc:2d:
         ea:8d:f8:6f:b7:f5:cd:97:92:83:ce:52:83:d9:68:42:72:e0:
         23:d9:ea:de:ae:e6:d3:61:c7:40:73:a6:d4:d2:fd:5f:96:da:
         f8:df:f0:d2:9f:3a:77:bf:1b:72:d7:1c:87:f3:ba:d9:e7:de:
         9f:b1:b4:27:91:4a:39:57:24:4c:77:0e:14:ca:1c:d8:fe:b5:
         60:54:7a:49:6b:14:27:36:76:f3:ee:84:2f:d1:5f:8f:70:7a:
         f5:9a:1f:87:e9:7a:00:b8:8f:be:d0:cd:e3:63:50:49:c1:5d:
         b1:6b:1d:d2:e6:15:b6:63:0c:26:02:35:00:6c:31:9a:4c:0e:
         42:6c:be:d2:2a:47:10:73:66:15:ab:3a:a6:b9:42:aa:2d:68:
         1e:ef:7e:f2:1b:9b:a6:14:f2:a8:c3:ae:e0:23:95:58:81:96:
         13:0c:5f:7b:03:f4:de:2a:98:8d:7d:23:4d:34:e8:fe:0a:aa:
         dd:fb:29:2f
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUTzh6eKQpEI3XUk03Ipck6DeqNU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTUyMjMwMTlaFw0yNTAzMTQyMjM1MTlaMDMxMTAvBgNV
BAMTKDJFRDVFRkQ0MjQ0ODI3NTBDQjk0NEFEMTY0Q0VBMEE4MDYwQkJDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZVBXTdjq352W3zyUldrb+WrX
qF8fwHA+jJAl8dDLSCfTgmsG4Ka/lBtEVsBxmGJlSXJk+4I0OWAeusb/KuE9SG8y
d/jRTHR2A5jyU6h8TJKGfP4acqziS843QyvU1PuLZQY+4qRWONNz4yR0Fy14BRCS
0HC45Dk2XKLVPReK/wDE11z0L14Ze57AcMkJbosMgpN21ivy52QUurZZezVsFPMH
SHup6K7XR43KPA7URX6Q2USROuy1Smd4rBPnoG1r+aI1LysDCTkNBunI/YNrnotd
W3GRHSmQ4GpAQs8x12G0PnmrL3xmTaBdtHydViC+VFXuaJDJ7lUXs1IHxVCXAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu1e/UJEgnUMuU
StFkzqCoBgu83jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DN2Q0YkZmS3VWelU4ZHhvQ1NxdnNEM1VCV2tWYUR3dXVy
THFIZlpXRURvYy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1
ckxxSGZaV0VEb2MvMC8yRUQ1RUZENDI0NDgyNzUwQ0I5NDRBRDE2NENFQTBBODA2
MEJCQ0RFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKoeUQDBALIaoQDBALI
fbAwDQQCAAIwBwMFACgELbwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAxUMA0G
CSqGSIb3DQEBCwUAA4IBAQAX15X2z7+MHxFiMcywpPdG5r4+thL+y4WEvfmaN7su
NhJKL2uhzD8VttBr0EpiIMfA9bXG5ODk3rkwfSTZ4H6Nou0Ng+d+zC3qjfhvt/XN
l5KDzlKD2WhCcuAj2ererubTYcdAc6bU0v1fltr43/DSnzp3vxty1xyH87rZ596f
sbQnkUo5VyRMdw4UyhzY/rVgVHpJaxQnNnbz7oQv0V+PcHr1mh+H6XoAuI++0M3j
Y1BJwV2xax3S5hW2YwwmAjUAbDGaTA5CbL7SKkcQc2YVqzqmuUKqLWge737yG5um
FPKow67gI5VYgZYTDF97A/TeKpiNfSNNNOj+Cqrd+ykv
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org