Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2B20551EDECFF02154E7D55D93C1E00847390AF.cer
File:                     E2B20551EDECFF02154E7D55D93C1E00847390AF.cer (raw, json)
Hash identifier:          KWlwXX+w/yF0+gc8SmwtRicvaI/1JrAGypCbMaY8on0=
Subject key identifier:   E2:B2:05:51:ED:EC:FF:02:15:4E:7D:55:D9:3C:1E:00:84:73:90:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07CC20E1446CEA19E80FC48611FCCA55B6234906
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/0/E2B20551EDECFF02154E7D55D93C1E00847390AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jun 2023 19:05:10 +0000
Certificate not after:    Sun 16 Jun 2024 19:10:10 +0000
Subordinate resources:    AS: 268210
                          IP: 45.236.4.0/22
                          IP: 2804:4da4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cc:20:e1:44:6c:ea:19:e8:0f:c4:86:11:fc:ca:55:b6:23:49:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 18 19:05:10 2023 GMT
            Not After : Jun 16 19:10:10 2024 GMT
        Subject: CN=E2B20551EDECFF02154E7D55D93C1E00847390AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:1e:44:6a:d8:ac:28:bd:e0:06:85:86:4d:
                    e1:d4:c6:c4:d4:95:e3:a3:57:24:0e:3d:d9:77:71:
                    20:c6:87:ba:69:92:18:72:6c:aa:e0:ea:52:be:ad:
                    63:48:b1:88:f7:99:bd:b2:9d:0d:43:51:fc:36:03:
                    6d:87:d7:85:b2:a8:d5:74:f0:41:75:a4:eb:7f:84:
                    c3:ab:47:ff:7b:79:8f:b5:ef:19:02:36:14:62:d4:
                    38:c9:5b:01:e4:91:7c:19:e6:84:44:74:87:b8:54:
                    2f:c5:b0:4f:5a:cb:06:10:22:e2:ab:5f:77:25:0e:
                    4d:95:72:45:48:64:5d:35:b1:64:f2:8c:e9:25:48:
                    df:30:c8:22:61:09:d5:a1:ef:69:93:dd:b8:9a:b3:
                    48:f8:4d:7a:9c:52:cc:43:a4:68:78:d7:95:07:ad:
                    45:58:49:fe:79:e7:62:a9:81:47:a2:77:6a:a3:4a:
                    51:92:0f:bb:29:bd:8f:74:2d:c5:cd:f7:8e:f3:ba:
                    14:61:d6:26:90:7f:44:4b:67:ce:c8:89:51:48:63:
                    6f:6a:f3:89:29:a1:1e:4a:fa:4a:09:33:42:12:bb:
                    14:f6:70:fc:43:d3:b1:ad:43:44:89:85:59:cb:81:
                    4a:05:d3:cb:bb:98:1d:a6:2e:0b:be:63:2f:59:3a:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:B2:05:51:ED:EC:FF:02:15:4E:7D:55:D9:3C:1E:00:84:73:90:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/0/E2B20551EDECFF02154E7D55D93C1E00847390AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.4.0/22
                IPv6:
                  2804:4da4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268210

    Signature Algorithm: sha256WithRSAEncryption
         97:6e:e5:4e:93:3b:ea:aa:46:34:1c:91:58:15:d4:e8:bd:e7:
         13:43:94:26:a8:4c:3a:8c:76:13:fd:a8:5c:3c:13:18:a2:1d:
         d2:1b:05:16:cf:12:44:cf:cd:b1:94:e6:bf:37:33:18:45:df:
         47:a8:51:4f:76:51:64:7c:47:50:f1:da:04:ff:7c:90:2c:58:
         41:db:5c:c8:93:86:40:d6:59:ad:3b:2b:b5:90:7a:11:b1:43:
         6d:bd:f7:86:a2:5b:65:75:2a:7f:a2:2f:c0:d6:8d:2d:a9:da:
         72:ee:90:e1:9b:48:f8:fa:53:38:67:e1:8a:c6:49:95:a0:d7:
         67:cf:3d:66:22:6d:40:5b:87:08:1f:97:6c:9a:2a:71:29:91:
         de:47:49:1e:d2:40:e9:7d:1c:a3:4e:c9:be:49:ac:eb:e4:61:
         bd:99:58:87:af:06:67:40:01:9d:31:37:a0:62:80:19:05:36:
         cc:7e:87:3b:77:64:b6:9c:bb:99:4d:40:6a:fc:c1:f2:1f:af:
         f8:1b:76:fc:58:6b:9c:c0:6e:45:e1:de:3d:db:aa:fb:1c:75:
         70:c4:4d:fb:6a:55:87:46:6d:04:6e:82:fa:c5:70:91:46:6f:
         2b:b0:9f:07:ba:5c:58:cf:56:21:15:49:ab:76:ed:a8:df:59:
         00:5e:fd:39
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUB8wg4URs6hnoD8SGEfzKVbYjSQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MTgxOTA1MTBaFw0yNDA2MTYxOTEwMTBaMDMxMTAvBgNV
BAMTKEUyQjIwNTUxRURFQ0ZGMDIxNTRFN0Q1NUQ5M0MxRTAwODQ3MzkwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQB5EatisKL3gBoWGTeHUxsTU
leOjVyQOPdl3cSDGh7ppkhhybKrg6lK+rWNIsYj3mb2ynQ1DUfw2A22H14WyqNV0
8EF1pOt/hMOrR/97eY+17xkCNhRi1DjJWwHkkXwZ5oREdIe4VC/FsE9aywYQIuKr
X3clDk2VckVIZF01sWTyjOklSN8wyCJhCdWh72mT3bias0j4TXqcUsxDpGh415UH
rUVYSf5552KpgUeid2qjSlGSD7spvY90LcXN947zuhRh1iaQf0RLZ87IiVFIY29q
84kpoR5K+koJM0ISuxT2cPxD07GtQ0SJhVnLgUoF08u7mB2mLgu+Yy9ZOia9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTisgVR7ez/AhVO
fVXZPB4AhHOQrzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zV2ZhcFBiMWc4MUFxdnJIcjQxNHZQbkphNXZ2cDVXN0Ri
OVZnZTNicWljcS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM1dmYXBQYjFnODFBcXZySHI0MTR2UG5KYTV2dnA1VzdE
YjlWZ2UzYnFpY3EvMC9FMkIyMDU1MUVERUNGRjAyMTU0RTdENTVEOTNDMUUwMDg0
NzM5MEFGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7AQwDQQCAAIwBwMF
ACgETaQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBeyMA0GCSqGSIb3DQEBCwUA
A4IBAQCXbuVOkzvqqkY0HJFYFdTovecTQ5QmqEw6jHYT/ahcPBMYoh3SGwUWzxJE
z82xlOa/NzMYRd9HqFFPdlFkfEdQ8doE/3yQLFhB21zIk4ZA1lmtOyu1kHoRsUNt
vfeGoltldSp/oi/A1o0tqdpy7pDhm0j4+lM4Z+GKxkmVoNdnzz1mIm1AW4cIH5ds
mipxKZHeR0ke0kDpfRyjTsm+Sazr5GG9mViHrwZnQAGdMTegYoAZBTbMfoc7d2S2
nLuZTUBq/MHyH6/4G3b8WGucwG5F4d4926r7HHVwxE37alWHRm0EboL6xXCRRm8r
sJ8HulxYz1YhFUmrdu2o31kAXv05
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org