Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer
File:                     E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer (raw, json)
Hash identifier:          WaSqIG7orZYuIEbK6OkzdnonlEluEkefFU7XweWDoto=
Subject key identifier:   E2:E3:7F:67:D2:EE:63:A1:22:24:C1:5B:9A:D1:5A:60:A6:BF:0B:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1323213C925AA74DBB0EED8D5365746A5B9F6AD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 14:36:27 +0000
Certificate not after:    Tue 14 Jan 2025 14:41:27 +0000
Subordinate resources:    AS: 270248
                          IP: 200.107.116.0/22
                          IP: 2804:6918::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:23:21:3c:92:5a:a7:4d:bb:0e:ed:8d:53:65:74:6a:5b:9f:6a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 14:36:27 2024 GMT
            Not After : Jan 14 14:41:27 2025 GMT
        Subject: CN=E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:31:f7:c0:05:d9:5a:39:0e:06:20:db:44:
                    7c:d7:75:16:5f:03:0c:30:60:eb:e0:3e:8d:f8:04:
                    62:e8:dd:dc:d6:7f:1b:0f:ca:37:d4:a6:d9:bd:b7:
                    61:98:5f:6f:d0:a3:b0:c4:52:35:dc:39:e7:a2:2b:
                    08:60:54:54:0f:b0:4c:cc:92:86:c7:31:ca:a7:fb:
                    c1:89:1e:ed:dd:0b:04:17:01:e5:95:0c:82:1a:d8:
                    50:66:80:da:7f:9e:f2:0b:3b:3d:62:43:22:fe:82:
                    ac:a7:df:c7:5b:20:ac:66:ba:1a:cd:a5:1b:11:cc:
                    2c:1a:22:e6:eb:f9:5a:28:a8:38:2d:98:7b:cd:ea:
                    18:c2:cd:a0:21:01:d3:1b:f3:fd:c8:a3:95:70:39:
                    81:f3:fb:c4:01:69:be:66:17:1c:23:29:59:54:cc:
                    0e:5b:0b:94:76:01:bd:7d:7f:ff:1d:0b:17:36:eb:
                    2c:94:0c:92:1b:9d:3a:6a:95:f4:3f:19:57:52:42:
                    7b:be:d1:d2:10:4d:bf:38:a7:a5:6c:35:a6:fd:0c:
                    f0:a2:ff:8c:55:d5:74:72:ce:c8:03:99:9f:b7:40:
                    9a:a2:11:dc:14:eb:ee:f7:3c:ab:b8:bb:cb:0d:ae:
                    dd:ef:ff:9b:af:43:a7:c4:2f:51:6f:bd:f1:98:07:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:E3:7F:67:D2:EE:63:A1:22:24:C1:5B:9A:D1:5A:60:A6:BF:0B:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.116.0/22
                IPv6:
                  2804:6918::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270248

    Signature Algorithm: sha256WithRSAEncryption
         21:61:1a:7e:1a:03:a5:0d:88:82:84:7f:7e:47:cb:28:db:56:
         ad:94:a9:fa:5c:f7:5c:a3:04:26:aa:aa:e9:60:c9:fd:5d:33:
         e4:f1:07:fd:3e:48:57:b0:17:d8:2e:bd:21:9c:48:fb:c5:5b:
         f9:d7:a0:8a:a7:85:13:b6:64:ac:54:df:91:59:4b:f6:a0:14:
         75:2d:21:49:f8:f5:6f:92:3e:ae:69:8d:08:55:6e:74:41:d4:
         b5:74:20:f3:24:3c:26:64:3a:f8:a2:37:7c:b8:76:49:13:16:
         77:db:23:5f:3e:2f:41:ee:f8:e4:6a:bc:81:4a:0a:ac:f4:37:
         18:55:fc:d4:f1:5d:db:a9:7f:db:3a:7f:6b:d8:b5:93:93:0d:
         68:40:56:2a:5b:6a:e9:a2:64:cf:69:4c:d2:55:ee:84:c0:d9:
         ba:33:c9:e1:c3:8d:ca:e5:2b:d7:a5:47:2c:c0:2d:85:57:d8:
         20:09:9c:85:ea:fd:c1:e8:91:3c:5d:dc:6e:06:98:ca:2c:c6:
         20:ca:65:db:1d:4d:ca:a0:4e:09:e9:04:5b:ce:2d:1d:14:a9:
         1d:4c:8e:f0:19:46:53:bb:6c:be:e8:6e:4c:37:0e:7a:1c:e0:
         ca:1a:61:a7:9f:36:96:6e:d9:80:85:d6:b3:6e:e1:4d:0b:9f:
         80:cb:bb:9e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUEyMhPJJap027Du2NU2V0alufatAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTYxNDM2MjdaFw0yNTAxMTQxNDQxMjdaMDMxMTAvBgNV
BAMTKEUyRTM3RjY3RDJFRTYzQTEyMjI0QzE1QjlBRDE1QTYwQTZCRjBCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTjH3wAXZWjkOBiDbRHzXdRZf
AwwwYOvgPo34BGLo3dzWfxsPyjfUptm9t2GYX2/Qo7DEUjXcOeeiKwhgVFQPsEzM
kobHMcqn+8GJHu3dCwQXAeWVDIIa2FBmgNp/nvILOz1iQyL+gqyn38dbIKxmuhrN
pRsRzCwaIubr+VooqDgtmHvN6hjCzaAhAdMb8/3Io5VwOYHz+8QBab5mFxwjKVlU
zA5bC5R2Ab19f/8dCxc26yyUDJIbnTpqlfQ/GVdSQnu+0dIQTb84p6VsNab9DPCi
/4xV1XRyzsgDmZ+3QJqiEdwU6+73PKu4u8sNrt3v/5uvQ6fEL1FvvfGYB8ULAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTi439n0u5joSIk
wVua0Vpgpr8LQzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BSEVOaTNEQmVoRHRNVG1CTVMxeVJBMzNBaVZSUDVNa2lL
ejl3TWU1UXFuNy8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUhFTmkzREJlaER0TVRtQk1TMXlSQTMzQWlWUlA1TWtp
S3o5d01lNVFxbjcvMS9FMkUzN0Y2N0QyRUU2M0ExMjIyNEMxNUI5QUQxNUE2MEE2
QkYwQjQzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIa3QwDQQCAAIwBwMF
ACgEaRgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB+oMA0GCSqGSIb3DQEBCwUA
A4IBAQAhYRp+GgOlDYiChH9+R8so21atlKn6XPdcowQmqqrpYMn9XTPk8Qf9PkhX
sBfYLr0hnEj7xVv516CKp4UTtmSsVN+RWUv2oBR1LSFJ+PVvkj6uaY0IVW50QdS1
dCDzJDwmZDr4ojd8uHZJExZ32yNfPi9B7vjkaryBSgqs9DcYVfzU8V3bqX/bOn9r
2LWTkw1oQFYqW2rpomTPaUzSVe6EwNm6M8nhw43K5SvXpUcswC2FV9ggCZyF6v3B
6JE8XdxuBpjKLMYgymXbHU3KoE4J6QRbzi0dFKkdTI7wGUZTu2y+6G5MNw56HODK
GmGnnzaWbtmAhdazbuFNC5+Ay7ue
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org