Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E199C821818D55FD07BFE7D1E3E60E85F1FE938D.cer
File:                     E199C821818D55FD07BFE7D1E3E60E85F1FE938D.cer (raw, json)
Hash identifier:          XrXG1pc44tTo7Zs9qM9kDqBPuecDTPci3Ox9DEuqspw=
Subject key identifier:   E1:99:C8:21:81:8D:55:FD:07:BF:E7:D1:E3:E6:0E:85:F1:FE:93:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       403860BA2289912E9C4C6BAA4E1C0EE048CD18F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/0/E199C821818D55FD07BFE7D1E3E60E85F1FE938D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 20:32:43 +0000
Certificate not after:    Mon 17 Feb 2025 20:37:43 +0000
Subordinate resources:    AS: 268166
                          IP: 45.170.180.0/22
                          IP: 2804:590c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:60:ba:22:89:91:2e:9c:4c:6b:aa:4e:1c:0e:e0:48:cd:18:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 20:32:43 2024 GMT
            Not After : Feb 17 20:37:43 2025 GMT
        Subject: CN=E199C821818D55FD07BFE7D1E3E60E85F1FE938D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:c1:ec:1c:51:ff:f6:c7:f3:27:42:ee:a7:
                    df:9d:8b:3f:d4:92:96:de:36:dc:a1:6c:29:bf:b9:
                    81:a3:37:ef:58:fa:3d:9f:3a:82:a6:b2:1c:59:99:
                    f8:9c:7c:d3:54:17:af:ac:64:d1:43:76:4b:be:77:
                    f4:cf:0f:00:a5:d5:7b:d9:bc:e6:85:f7:bc:f2:0b:
                    7e:74:b2:e3:e3:65:96:f5:2d:3b:d7:82:32:cc:89:
                    c6:59:93:34:c7:f7:77:44:28:84:ba:2c:de:e9:12:
                    37:24:29:44:ff:e3:3b:9e:03:8a:c1:74:89:c6:c5:
                    7a:91:b3:50:48:81:d6:93:4b:48:1b:13:66:a8:df:
                    2f:43:9e:f1:a5:9a:f2:b9:6b:de:9a:26:e0:e5:95:
                    f3:37:92:97:7c:16:21:d4:88:36:91:d7:c4:f3:1d:
                    70:d0:a5:5a:d0:7d:ab:6c:45:55:14:ae:7b:45:a8:
                    7d:3e:55:9a:34:64:bf:0a:4b:bc:56:93:37:a5:7f:
                    fb:f6:5b:9e:8e:e9:5f:29:65:7f:92:69:35:d5:c4:
                    f5:c1:66:aa:d7:f7:dd:e0:42:f9:5d:1e:7b:d5:a1:
                    24:cf:09:cb:38:f2:bc:ca:95:64:01:a9:ce:e6:af:
                    98:02:f4:3e:f7:74:c6:09:de:a1:51:24:23:c0:b4:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:99:C8:21:81:8D:55:FD:07:BF:E7:D1:E3:E6:0E:85:F1:FE:93:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/0/E199C821818D55FD07BFE7D1E3E60E85F1FE938D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.180.0/22
                IPv6:
                  2804:590c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268166

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:ff:3c:7f:9b:24:69:df:79:04:11:65:cc:d2:4b:94:f8:
         0f:e5:a7:bb:79:b0:c7:e2:7d:8e:18:d9:f5:36:74:5c:00:a6:
         5c:bb:17:20:cb:16:88:81:43:24:83:9b:07:36:2b:fb:d5:32:
         eb:61:c7:a6:ef:51:2d:54:51:b1:5f:6b:48:98:6f:83:1f:7d:
         89:b4:ee:b8:9e:b4:e6:7c:1c:29:ea:86:6f:c3:19:19:e4:cf:
         f9:53:82:79:24:26:dc:92:af:bb:d4:e0:37:73:19:2a:0a:a5:
         5d:b3:0f:c3:61:35:95:a8:f4:c1:e7:f2:be:56:5f:3e:97:f4:
         21:ce:6a:96:23:72:e5:1f:fa:b7:40:4f:77:11:c7:22:05:82:
         2f:3a:40:43:6f:09:1b:ba:6b:2a:12:7c:95:bc:27:e9:d9:06:
         39:73:17:90:6d:da:99:ea:6b:d8:8c:df:11:87:a7:86:79:ed:
         1c:11:4d:e5:19:42:00:fc:52:a9:b1:3f:53:9b:4b:3f:7a:7b:
         07:6e:bc:b3:2e:44:7b:6d:94:69:33:1b:6d:88:a3:12:57:b3:
         b4:ed:f1:85:34:eb:f5:af:57:a7:b6:ff:c0:e3:ab:e8:42:9e:
         28:00:d1:4d:60:3f:ab:32:a8:d5:7c:18:c9:79:50:ad:e0:a5:
         cc:0b:fd:d7
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQDhguiKJkS6cTGuqThwO4EjNGPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTkyMDMyNDNaFw0yNTAyMTcyMDM3NDNaMDMxMTAvBgNV
BAMTKEUxOTlDODIxODE4RDU1RkQwN0JGRTdEMUUzRTYwRTg1RjFGRTkzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DsHsHFH/9sfzJ0Lup9+diz/U
kpbeNtyhbCm/uYGjN+9Y+j2fOoKmshxZmficfNNUF6+sZNFDdku+d/TPDwCl1XvZ
vOaF97zyC350suPjZZb1LTvXgjLMicZZkzTH93dEKIS6LN7pEjckKUT/4zueA4rB
dInGxXqRs1BIgdaTS0gbE2ao3y9DnvGlmvK5a96aJuDllfM3kpd8FiHUiDaR18Tz
HXDQpVrQfatsRVUUrntFqH0+VZo0ZL8KS7xWkzelf/v2W56O6V8pZX+SaTXVxPXB
ZqrX993gQvldHnvVoSTPCcs48rzKlWQBqc7mr5gC9D73dMYJ3qFRJCPAtOnfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThmcghgY1V/Qe/
59Hj5g6F8f6TjTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HcENLVFNWVlZKY3ZieVV3b0xCNXphUWFuOHczeFRSQUZi
Z2E1Y3ZTVmJRay8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3BDS1RTVlZWSmN2YnlVd29MQjV6YVFhbjh3M3hUUkFG
YmdhNWN2U1ZiUWsvMC9FMTk5QzgyMTgxOEQ1NUZEMDdCRkU3RDFFM0U2MEU4NUYx
RkU5MzhELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqrQwDQQCAAIwBwMF
ACgEWQwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBeGMA0GCSqGSIb3DQEBCwUA
A4IBAQA7hf88f5skad95BBFlzNJLlPgP5ae7ebDH4n2OGNn1NnRcAKZcuxcgyxaI
gUMkg5sHNiv71TLrYcem71EtVFGxX2tImG+DH32JtO64nrTmfBwp6oZvwxkZ5M/5
U4J5JCbckq+71OA3cxkqCqVdsw/DYTWVqPTB5/K+Vl8+l/QhzmqWI3LlH/q3QE93
EcciBYIvOkBDbwkbumsqEnyVvCfp2QY5cxeQbdqZ6mvYjN8Rh6eGee0cEU3lGUIA
/FKpsT9Tm0s/ensHbryzLkR7bZRpMxttiKMSV7O07fGFNOv1r1entv/A46voQp4o
ANFNYD+rMqjVfBjJeVCt4KXMC/3X
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org