Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer
File:                     E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer (raw, json)
Hash identifier:          UJ8l2CjY+tUi/kipe4oxQhlit0Ojfu/n2AtN07zvLrA=
Subject key identifier:   E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42993302D04E748867434B54AB909F0E98825932
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 19:12:11 +0000
Certificate not after:    Mon 09 Sep 2024 19:17:11 +0000
Subordinate resources:    AS: 264566
                          IP: 138.0.144.0/22
                          IP: 2804:21ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:99:33:02:d0:4e:74:88:67:43:4b:54:ab:90:9f:0e:98:82:59:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 19:12:11 2023 GMT
            Not After : Sep  9 19:17:11 2024 GMT
        Subject: CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:54:5b:45:3d:31:39:3a:18:cb:c4:bc:1e:
                    34:c8:ab:04:8a:d1:3a:96:78:63:b2:79:05:4a:1b:
                    e6:af:82:ea:9d:23:3d:95:4b:0a:ba:da:a6:24:bc:
                    e8:3c:b5:37:ea:db:e9:d4:b8:3c:15:87:18:b6:dd:
                    bf:49:26:0e:e6:17:b0:26:cf:c7:5f:1d:5a:80:53:
                    de:a4:54:42:bf:a1:3c:24:45:11:51:fc:86:07:24:
                    b3:cb:40:08:27:56:4d:26:89:d5:9e:0a:48:74:3b:
                    50:d7:ac:ba:ec:83:e8:71:b6:46:31:ab:7b:27:66:
                    a2:25:54:81:f1:6e:24:2a:21:79:b4:dc:8b:79:f3:
                    7f:40:31:47:bd:d8:4e:48:ba:d9:af:46:ac:4c:2a:
                    a6:38:01:a5:0a:f2:99:14:b9:b4:58:8d:06:4b:58:
                    f2:aa:d1:8c:cd:53:29:20:fb:1b:14:38:7f:b3:74:
                    ba:88:38:01:f5:fc:1d:44:e8:df:5e:f2:90:79:2d:
                    e1:14:74:23:75:3d:b8:d2:f2:5e:40:fb:fd:d4:99:
                    e7:76:99:e6:e7:59:6d:6e:11:65:0c:60:b2:f8:f2:
                    85:c7:b5:00:c0:80:46:82:ef:7e:d8:17:2b:02:22:
                    79:22:40:f7:89:6b:4f:a9:bd:31:02:a3:dc:a6:c8:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.144.0/22
                IPv6:
                  2804:21ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264566

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:6d:00:8d:0c:70:9b:9e:32:e4:8d:13:94:63:43:a6:06:
         d8:39:d4:82:c1:0e:3b:e4:86:c7:36:59:96:59:62:0e:aa:2b:
         3a:52:84:cf:2f:c5:55:45:23:b5:a9:94:3e:6c:31:53:e5:4b:
         fb:5f:d6:82:16:c5:11:85:8d:0a:cd:1b:82:b1:f5:4f:04:8b:
         3f:bf:07:e0:c1:00:da:a4:28:a9:7b:d1:2a:fc:dc:7e:1f:fe:
         dc:bf:55:d7:05:a2:eb:8a:9b:3c:e5:66:38:2c:c9:f0:3e:86:
         f1:8e:3a:0b:7a:27:42:a7:02:51:33:27:8e:6d:de:c4:1a:50:
         6f:5c:23:f3:f7:24:97:fb:75:c3:32:29:15:98:7b:3e:9a:22:
         00:49:1c:23:44:0c:92:34:2e:c0:a5:55:ed:53:00:64:1f:49:
         f7:6a:e1:54:db:1f:c8:ce:10:12:0e:d7:25:c6:dd:5c:f6:db:
         89:ae:f7:d0:2f:34:4f:66:a5:f5:32:48:28:af:ad:7f:a7:6e:
         5b:23:19:85:40:26:f9:4c:27:97:97:c7:4e:df:8e:5d:6f:8d:
         4b:e7:7c:eb:2f:e2:95:8b:dd:12:20:b0:5c:d2:02:0d:66:bf:
         03:08:04:f6:4d:76:79:56:59:82:a0:77:5e:e2:98:0c:b7:c3:
         6a:b5:5a:41
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQpkzAtBOdIhnQ0tUq5CfDpiCWTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTExOTEyMTFaFw0yNDA5MDkxOTE3MTFaMDMxMTAvBgNV
BAMTKEUzNDZFRjY2MTQ5QzMyRjNDMkQxQkVFMDY5RkZDRUVCRDg3QjExRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sVRbRT0xOToYy8S8HjTIqwSK
0TqWeGOyeQVKG+avguqdIz2VSwq62qYkvOg8tTfq2+nUuDwVhxi23b9JJg7mF7Am
z8dfHVqAU96kVEK/oTwkRRFR/IYHJLPLQAgnVk0midWeCkh0O1DXrLrsg+hxtkYx
q3snZqIlVIHxbiQqIXm03It5839AMUe92E5IutmvRqxMKqY4AaUK8pkUubRYjQZL
WPKq0YzNUykg+xsUOH+zdLqIOAH1/B1E6N9e8pB5LeEUdCN1PbjS8l5A+/3Umed2
mebnWW1uEWUMYLL48oXHtQDAgEaC737YFysCInkiQPeJa0+pvTECo9ymyIhNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjRu9mFJwy88LR
vuBp/87r2HsR7DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80WjlVckZVODdGbUh4UGMzY0FhS0FKYzZqRTZTYm1iWjRC
UW5WYXNIaE5VYy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNFo5VXJGVTg3Rm1IeFBjM2NBYUtBSmM2akU2U2JtYlo0
QlFuVmFzSGhOVWMvMC9FMzQ2RUY2NjE0OUMzMkYzQzJEMUJFRTA2OUZGQ0VFQkQ4
N0IxMUVDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKAJAwDQQCAAIwBwMF
ACgEIawwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAl2MA0GCSqGSIb3DQEBCwUA
A4IBAQBaV20AjQxwm54y5I0TlGNDpgbYOdSCwQ475IbHNlmWWWIOqis6UoTPL8VV
RSO1qZQ+bDFT5Uv7X9aCFsURhY0KzRuCsfVPBIs/vwfgwQDapCipe9Eq/Nx+H/7c
v1XXBaLrips85WY4LMnwPobxjjoLeidCpwJRMyeObd7EGlBvXCPz9ySX+3XDMikV
mHs+miIASRwjRAySNC7ApVXtUwBkH0n3auFU2x/IzhASDtclxt1c9tuJrvfQLzRP
ZqX1Mkgor61/p25bIxmFQCb5TCeXl8dO345db41L53zrL+KVi90SILBc0gINZr8D
CAT2TXZ5VlmCoHde4pgMt8NqtVpB
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org