Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E4AC9F306A1370AB72094CBB7E430BEB4CCAA51A.cer
File:                     E4AC9F306A1370AB72094CBB7E430BEB4CCAA51A.cer (raw, json)
Hash identifier:          WZhqFGrwHqn6albF/ZCyFYOkp5TyKQ8Z06b9X1J5fAs=
Subject key identifier:   E4:AC:9F:30:6A:13:70:AB:72:09:4C:BB:7E:43:0B:EB:4C:CA:A5:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62F293E4DAA87150E5FBEA88CA242937C4FC0732
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/E4AC9F306A1370AB72094CBB7E430BEB4CCAA51A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Mar 2023 02:52:02 +0000
Certificate not after:    Fri 08 Mar 2024 02:57:02 +0000
Subordinate resources:    AS: 61670
                          IP: 131.100.104.0/22
                          IP: 2804:1cb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f2:93:e4:da:a8:71:50:e5:fb:ea:88:ca:24:29:37:c4:fc:07:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 10 02:52:02 2023 GMT
            Not After : Mar  8 02:57:02 2024 GMT
        Subject: CN=E4AC9F306A1370AB72094CBB7E430BEB4CCAA51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:64:a8:08:39:65:af:40:93:2c:90:a1:87:
                    87:73:99:72:f7:d9:8d:2c:b8:d7:8a:0c:17:e8:38:
                    b7:52:2e:96:a4:5d:15:ae:d7:1c:60:ac:f2:3e:0b:
                    61:32:57:24:eb:f1:1e:96:88:e1:ef:bb:f9:cd:0e:
                    88:4e:67:3d:7a:f1:95:a7:50:be:fc:60:3d:41:74:
                    6d:df:26:f2:e4:67:ad:bf:3d:2a:fb:a0:95:99:ca:
                    b7:36:80:30:8e:93:43:32:b3:40:b0:a0:b4:35:1a:
                    95:09:6d:13:5f:f8:c3:38:bc:86:ce:35:5a:70:ec:
                    cd:0a:3c:13:73:f4:db:45:5f:92:1d:b1:21:bb:bb:
                    36:70:e8:a1:f4:ab:44:6e:3c:15:cf:8a:b0:0b:94:
                    61:cc:95:95:83:38:05:f9:91:60:37:35:a0:0c:0f:
                    b5:29:3b:84:82:a0:57:e9:d0:93:70:f6:6d:fc:48:
                    9b:2f:6f:41:aa:f2:1e:07:a3:b7:11:76:f2:cc:aa:
                    dd:4f:94:f2:1c:b1:e3:9c:04:34:14:0e:2c:59:01:
                    d5:74:62:b9:86:56:fc:24:8a:74:78:78:76:b4:7b:
                    80:c2:6f:a9:6b:8d:22:bf:61:3c:a0:1e:56:04:0d:
                    84:7e:7c:11:52:4b:35:7e:79:f7:24:29:d1:0d:32:
                    47:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:AC:9F:30:6A:13:70:AB:72:09:4C:BB:7E:43:0B:EB:4C:CA:A5:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/E4AC9F306A1370AB72094CBB7E430BEB4CCAA51A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.104.0/22
                IPv6:
                  2804:1cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61670

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:bf:2a:2e:41:33:d7:f0:5b:3e:ca:ad:7b:b8:65:c4:a1:
         c8:f3:63:0a:61:64:28:a1:f0:04:87:b1:5d:08:38:d3:f6:a8:
         5b:eb:2f:a3:54:d8:45:4f:8e:e4:85:b2:66:6e:02:cc:68:d4:
         6a:f4:80:57:0e:e9:0f:64:af:b9:3d:84:a5:9b:0f:25:05:9f:
         3e:b8:d7:01:f1:a4:23:4a:be:a9:e7:0c:17:fa:06:2a:1c:d1:
         24:92:03:38:f7:66:f3:e6:16:b4:c0:f1:fe:cf:e9:be:99:a4:
         38:b0:c8:44:27:e1:b6:71:a5:ba:6b:85:57:d9:29:0e:54:0b:
         1c:19:26:ec:b3:35:7e:f1:03:98:e2:99:f1:10:78:b1:0d:ec:
         a2:25:73:d9:3e:19:00:1b:9f:bd:1a:4d:cb:fb:65:c4:0c:99:
         57:53:69:35:98:72:96:3f:0a:e3:9b:ec:04:e6:77:4e:5a:6c:
         c8:36:43:6a:83:0a:82:2e:41:b3:c3:dd:0e:5b:77:43:7f:d4:
         4c:2a:2f:1a:bf:c0:1f:3d:5a:62:ff:68:20:25:8b:78:3f:f0:
         68:75:5e:85:e7:1c:3a:c7:1c:3d:63:36:36:a7:d8:fe:62:16:
         3e:c2:4b:f8:a0:0d:a9:0e:87:0f:5a:1b:c1:d3:44:d6:d6:33:
         ff:b1:97:34
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUYvKT5NqocVDl++qIyiQpN8T8BzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMTAwMjUyMDJaFw0yNDAzMDgwMjU3MDJaMDMxMTAvBgNV
BAMTKEU0QUM5RjMwNkExMzcwQUI3MjA5NENCQjdFNDMwQkVCNENDQUE1MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/HmSoCDllr0CTLJChh4dzmXL3
2Y0suNeKDBfoOLdSLpakXRWu1xxgrPI+C2EyVyTr8R6WiOHvu/nNDohOZz168ZWn
UL78YD1BdG3fJvLkZ62/PSr7oJWZyrc2gDCOk0Mys0CwoLQ1GpUJbRNf+MM4vIbO
NVpw7M0KPBNz9NtFX5IdsSG7uzZw6KH0q0RuPBXPirALlGHMlZWDOAX5kWA3NaAM
D7UpO4SCoFfp0JNw9m38SJsvb0Gq8h4Ho7cRdvLMqt1PlPIcseOcBDQUDixZAdV0
YrmGVvwkinR4eHa0e4DCb6lrjSK/YTygHlYEDYR+fBFSSzV+efckKdENMkdzAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrJ8wahNwq3IJ
TLt+QwvrTMqlGjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IVWhObUNmcFZVQkFDbWpNTDhtdzlHaFU4c1pOUlduemJC
dEJpU0pEWWRxWi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IVWhObUNmcFZVQkFDbWpNTDhtdzlHaFU4c1pOUlduemJC
dEJpU0pEWWRxWi8wL0U0QUM5RjMwNkExMzcwQUI3MjA5NENCQjdFNDMwQkVCNEND
QUE1MUEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoNkaDANBAIAAjAHAwUA
KAQctDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8OYwDQYJKoZIhvcNAQELBQAD
ggEBAAouvyouQTPX8Fs+yq17uGXEocjzYwphZCih8ASHsV0IONP2qFvrL6NU2EVP
juSFsmZuAsxo1Gr0gFcO6Q9kr7k9hKWbDyUFnz641wHxpCNKvqnnDBf6Bioc0SSS
Azj3ZvPmFrTA8f7P6b6ZpDiwyEQn4bZxpbprhVfZKQ5UCxwZJuyzNX7xA5jimfEQ
eLEN7KIlc9k+GQAbn70aTcv7ZcQMmVdTaTWYcpY/CuOb7ATmd05abMg2Q2qDCoIu
QbPD3Q5bd0N/1EwqLxq/wB89WmL/aCAli3g/8Gh1XoXnHDrHHD1jNjan2P5iFj7C
S/igDakOhw9aG8HTRNbWM/+xlzQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org