Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.cer
File:                     E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.cer (raw, json)
Hash identifier:          FX95YBENrY4AQzOw4JacpsUYQJZ7MQVlr01J7MimcEk=
Subject key identifier:   E3:0F:23:C8:79:2C:39:E2:DA:52:F7:E0:AD:9F:88:64:F1:3B:5E:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46E0D25D742645DC38756480F8C42F2EF86586D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 17:30:06 +0000
Certificate not after:    Wed 25 Dec 2024 17:35:06 +0000
Subordinate resources:    AS: 28610
                          IP: 186.209.88.0/22
                          IP: 2804:dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e0:d2:5d:74:26:45:dc:38:75:64:80:f8:c4:2f:2e:f8:65:86:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 17:30:06 2023 GMT
            Not After : Dec 25 17:35:06 2024 GMT
        Subject: CN=E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:40:78:b9:a0:fb:41:16:3b:ea:f1:b6:4f:
                    4c:ba:a0:ea:02:e0:a5:ad:14:1e:8c:4c:fc:70:d6:
                    5c:62:98:fd:f0:e7:4b:9b:ef:7b:21:ee:10:b5:5e:
                    3d:92:6e:d4:9b:c6:57:ca:70:79:41:b3:4a:62:66:
                    bd:00:22:27:26:08:bd:42:c7:71:1a:52:9f:d1:94:
                    7f:d2:5b:7e:48:89:ff:44:77:4b:b9:d7:c7:52:8e:
                    3f:4a:96:07:46:b2:8c:8c:09:84:28:8e:ab:b0:b1:
                    8c:93:07:ba:67:83:e9:ac:db:36:29:f0:7c:d1:ea:
                    0f:8f:5a:88:68:70:33:1d:ed:9e:31:48:c6:6f:94:
                    ff:28:3d:83:a7:72:b3:5d:f6:ff:29:9e:f0:51:dc:
                    10:00:84:32:07:2d:3d:ba:81:6b:0a:37:1b:6e:c9:
                    97:6a:f8:7a:90:e2:df:3d:46:5a:6e:4b:fa:68:5f:
                    ed:17:5c:46:ea:b6:d9:6e:c0:34:ae:82:74:aa:77:
                    55:61:23:6e:70:4e:f3:f2:98:8d:eb:62:54:10:b8:
                    7d:62:ec:c7:8e:c6:ab:e9:2a:1a:cd:8f:81:08:26:
                    b0:ae:a8:68:5a:fa:d9:21:4a:eb:79:ee:f5:a5:ca:
                    92:01:f0:bf:ca:49:ca:8a:ef:fa:0e:34:c7:52:d8:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:0F:23:C8:79:2C:39:E2:DA:52:F7:E0:AD:9F:88:64:F1:3B:5E:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.88.0/22
                IPv6:
                  2804:dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28610

    Signature Algorithm: sha256WithRSAEncryption
         4a:b4:1b:15:be:6b:33:dc:28:f9:96:fc:9f:5d:ac:14:9f:50:
         4b:7c:6f:26:d4:fa:8c:9c:44:be:ca:48:97:17:31:8c:c7:87:
         36:f4:04:27:bc:ee:1c:e6:c6:72:46:fe:04:d7:bf:ea:4e:da:
         f2:bc:7d:92:a4:fe:5f:3a:d7:21:6c:91:1d:fa:94:d5:96:f5:
         d2:7f:54:1c:a0:78:48:a8:03:c2:75:b4:7f:d2:60:2e:83:b7:
         2b:70:ef:a8:60:0e:79:18:bd:7e:8a:a8:a8:3c:1c:8f:42:28:
         7f:2f:ce:ef:f7:27:fb:fa:f8:a6:4e:98:83:4a:ea:3f:0e:39:
         5f:61:3d:8b:29:57:06:cb:09:bb:fd:ad:53:63:04:af:ba:cc:
         80:97:0b:3e:7d:9c:ec:9f:cd:6e:ce:67:68:29:74:62:b3:f5:
         2f:76:54:b8:cb:ea:db:2e:3d:c2:b2:27:28:0e:99:2b:13:73:
         6f:1f:53:eb:54:95:a7:3b:47:40:a0:fb:0a:ae:c0:63:88:f7:
         81:e2:55:67:79:af:4f:33:d2:87:2b:a0:9e:d3:38:b7:d5:4a:
         9c:6f:52:e4:b3:0c:d9:da:c5:51:59:a5:8f:54:a1:a4:4c:b3:
         23:b1:93:28:ff:4c:a2:f5:0a:9d:9d:c2:f3:c7:6b:fd:bb:ec:
         ad:e2:0b:9d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIURuDSXXQmRdw4dWSA+MQvLvhlhtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjcxNzMwMDZaFw0yNDEyMjUxNzM1MDZaMDMxMTAvBgNV
BAMTKEUzMEYyM0M4NzkyQzM5RTJEQTUyRjdFMEFEOUY4ODY0RjEzQjVFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqEB4uaD7QRY76vG2T0y6oOoC
4KWtFB6MTPxw1lximP3w50ub73sh7hC1Xj2SbtSbxlfKcHlBs0piZr0AIicmCL1C
x3EaUp/RlH/SW35Iif9Ed0u518dSjj9KlgdGsoyMCYQojquwsYyTB7png+ms2zYp
8HzR6g+PWohocDMd7Z4xSMZvlP8oPYOncrNd9v8pnvBR3BAAhDIHLT26gWsKNxtu
yZdq+HqQ4t89RlpuS/poX+0XXEbqttluwDSugnSqd1VhI25wTvPymI3rYlQQuH1i
7MeOxqvpKhrNj4EIJrCuqGha+tkhSut57vWlypIB8L/KScqK7/oONMdS2NtrAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjDyPIeSw54tpS
9+Ctn4hk8TteejAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZjJ3a0Y5d1hZYURwRkpiQlppZlIyNWtGR1U2RURrQ1k1
R0tkaTg2Z1prSC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMmYyd2tGOXdYWWFEcEZKYkJaaWZSMjVrRkdVNkVEa0NZ
NUdLZGk4Nmdaa0gvMC9FMzBGMjNDODc5MkMzOUUyREE1MkY3RTBBRDlGODg2NEYx
M0I1RTdBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK60VgwDQQCAAIwBwMF
ACgEDcAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICb8IwDQYJKoZIhvcNAQELBQAD
ggEBAEq0GxW+azPcKPmW/J9drBSfUEt8bybU+oycRL7KSJcXMYzHhzb0BCe87hzm
xnJG/gTXv+pO2vK8fZKk/l861yFskR36lNWW9dJ/VBygeEioA8J1tH/SYC6Dtytw
76hgDnkYvX6KqKg8HI9CKH8vzu/3J/v6+KZOmINK6j8OOV9hPYspVwbLCbv9rVNj
BK+6zICXCz59nOyfzW7OZ2gpdGKz9S92VLjL6tsuPcKyJygOmSsTc28fU+tUlac7
R0Cg+wquwGOI94HiVWd5r08z0ocroJ7TOLfVSpxvUuSzDNnaxVFZpY9UoaRMsyOx
kyj/TKL1Cp2dwvPHa/277K3iC50=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org