Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer
File:                     E429F35E74597C6DE39F18CE6F1303823FC75955.cer (raw, json)
Hash identifier:          M+ow8gbP/sUTFdCy3C5Fgh2QL3cwY4Ywuw+YlAh/mwE=
Subject key identifier:   E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F95D607C50E0E6B48CAB14D0524E3D61DF6A7A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E429F35E74597C6DE39F18CE6F1303823FC75955.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 00:23:52 +0000
Certificate not after:    Mon 24 Feb 2025 00:28:52 +0000
Subordinate resources:    AS: 268424
                          IP: 45.161.4.0/22
                          IP: 2804:5100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:95:d6:07:c5:0e:0e:6b:48:ca:b1:4d:05:24:e3:d6:1d:f6:a7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 00:23:52 2024 GMT
            Not After : Feb 24 00:28:52 2025 GMT
        Subject: CN=E429F35E74597C6DE39F18CE6F1303823FC75955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:74:73:7e:18:31:a5:48:cb:bc:54:d1:2c:
                    de:90:4d:8d:b5:2c:83:5c:e3:d9:31:b0:3e:c3:c5:
                    78:91:b2:4d:d3:72:05:48:ba:d5:c5:11:37:a8:06:
                    8b:76:65:e8:d1:8b:8b:f2:e1:b6:c7:3c:4f:b3:38:
                    c2:67:5d:02:f8:83:d9:5e:d6:a5:9b:52:c7:0b:8e:
                    b5:12:7e:dc:95:74:d9:b7:b3:a3:e5:95:5f:08:94:
                    b9:1c:ca:20:62:83:ec:16:f8:0a:59:29:ae:e6:16:
                    b9:9a:96:eb:89:eb:9b:3c:90:6c:21:bc:3e:ea:50:
                    6d:57:5d:52:70:47:55:99:c0:d2:aa:b2:4e:20:73:
                    87:b4:57:d3:48:0e:28:07:9b:ab:7f:f3:a5:ac:fa:
                    74:e6:33:5e:b1:1a:cd:fb:26:bc:f7:02:94:6b:79:
                    6d:16:55:09:6d:b6:4e:e6:f0:a2:0c:78:1f:66:3b:
                    63:00:98:57:f3:44:a3:0f:dd:a6:36:82:8e:3c:63:
                    74:83:60:f3:07:61:a6:48:b8:1d:85:71:bc:3f:ff:
                    46:64:26:94:40:d6:fa:01:01:c9:63:95:1e:37:07:
                    8d:ed:33:e9:41:c4:1c:c3:0d:e7:c2:eb:1f:8f:7b:
                    98:b5:0a:7b:a5:a2:55:c1:7f:37:bf:7d:99:bf:45:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E429F35E74597C6DE39F18CE6F1303823FC75955.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.4.0/22
                IPv6:
                  2804:5100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268424

    Signature Algorithm: sha256WithRSAEncryption
         19:05:68:f8:12:e6:2e:f3:19:31:80:80:47:1c:d0:78:fa:ba:
         20:18:46:25:cb:c7:28:79:82:9e:49:cb:91:f2:dc:a9:53:00:
         f6:3f:ec:b4:2c:39:04:b9:97:00:65:bc:d9:2d:a1:fa:9e:29:
         a2:86:d4:55:33:c6:ad:28:d1:48:68:52:c0:8a:33:0c:b3:33:
         04:01:66:9a:0a:02:7d:a9:cb:41:0b:cc:43:95:b4:90:7b:87:
         a4:ed:ff:cc:31:76:50:e4:e2:87:c2:99:10:b5:33:5a:f5:94:
         7e:73:4d:9a:a9:f6:f7:80:db:ed:a6:74:ed:58:fe:37:29:7b:
         6e:32:e0:0d:6c:9c:26:ff:b3:9c:6b:37:19:c1:4f:33:dc:78:
         0d:e0:55:de:44:3e:10:39:88:ac:b2:97:cb:09:92:93:ce:3a:
         71:05:e8:15:69:7f:30:f1:fa:69:e6:28:72:db:c4:6c:aa:d0:
         97:f3:8b:d2:c4:89:6d:41:e0:0e:73:13:86:fa:23:75:d8:1e:
         9e:22:24:0d:f6:d4:ba:78:47:d5:bf:1c:17:be:73:e2:25:f9:
         37:fc:cc:52:35:44:78:55:f1:09:32:ff:73:47:03:bc:9f:da:
         9d:0c:59:8c:fd:0d:ab:4a:2c:37:e5:a1:84:4b:43:09:f7:32:
         4a:0f:22:5e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUL5XWB8UODmtIyrFNBSTj1h32p6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjYwMDIzNTJaFw0yNTAyMjQwMDI4NTJaMDMxMTAvBgNV
BAMTKEU0MjlGMzVFNzQ1OTdDNkRFMzlGMThDRTZGMTMwMzgyM0ZDNzU5NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNl3RzfhgxpUjLvFTRLN6QTY21
LINc49kxsD7DxXiRsk3TcgVIutXFETeoBot2ZejRi4vy4bbHPE+zOMJnXQL4g9le
1qWbUscLjrUSftyVdNm3s6PllV8IlLkcyiBig+wW+ApZKa7mFrmaluuJ65s8kGwh
vD7qUG1XXVJwR1WZwNKqsk4gc4e0V9NIDigHm6t/86Ws+nTmM16xGs37Jrz3ApRr
eW0WVQlttk7m8KIMeB9mO2MAmFfzRKMP3aY2go48Y3SDYPMHYaZIuB2Fcbw//0Zk
JpRA1voBAcljlR43B43tM+lBxBzDDefC6x+Pe5i1CnulolXBfze/fZm/RZKpAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkKfNedFl8beOf
GM5vEwOCP8dZVTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80TXJtRW1SUjZheDRqV1RpOGs4cDgzTGNuNlNVV0FqSkdE
TVY5UmhKaFRlNS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNE1ybUVtUlI2YXg0aldUaThrOHA4M0xjbjZTVVdBakpH
RE1WOVJoSmhUZTUvMC9FNDI5RjM1RTc0NTk3QzZERTM5RjE4Q0U2RjEzMDM4MjNG
Qzc1OTU1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItoQQwDQQCAAIwBwMF
ACgEUQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBiIMA0GCSqGSIb3DQEBCwUA
A4IBAQAZBWj4EuYu8xkxgIBHHNB4+rogGEYly8coeYKeScuR8typUwD2P+y0LDkE
uZcAZbzZLaH6nimihtRVM8atKNFIaFLAijMMszMEAWaaCgJ9qctBC8xDlbSQe4ek
7f/MMXZQ5OKHwpkQtTNa9ZR+c02aqfb3gNvtpnTtWP43KXtuMuANbJwm/7OcazcZ
wU8z3HgN4FXeRD4QOYisspfLCZKTzjpxBegVaX8w8fpp5ihy28RsqtCX84vSxIlt
QeAOcxOG+iN12B6eIiQN9tS6eEfVvxwXvnPiJfk3/MxSNUR4VfEJMv9zRwO8n9qd
DFmM/Q2rSiw35aGES0MJ9zJKDyJe
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org