Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.cer
File:                     E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.cer (raw, json)
Hash identifier:          UEkEmvEodgFwdsRoitOOK7JtzEiAjiXW4dU6Wz8V/9M=
Subject key identifier:   E4:BB:7B:7E:EF:AB:6D:FD:FD:44:41:96:60:45:A2:3C:F0:6D:02:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0350A969949AD2F16CE75BC7924AD39C7940243A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 19:26:55 +0000
Certificate not after:    Mon 03 Mar 2025 19:31:55 +0000
Subordinate resources:    AS: 267561
                          IP: 45.70.112.0/22
                          IP: 2804:434c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:50:a9:69:94:9a:d2:f1:6c:e7:5b:c7:92:4a:d3:9c:79:40:24:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 19:26:55 2024 GMT
            Not After : Mar  3 19:31:55 2025 GMT
        Subject: CN=E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:d7:b8:93:df:5a:9a:cf:f0:0c:58:46:65:
                    d5:b6:23:9f:8b:35:a2:3e:7e:09:68:53:d1:42:5d:
                    33:f8:59:27:be:e3:23:4d:f2:69:66:e4:8c:48:b1:
                    2d:70:35:6e:b2:59:ec:6f:09:0d:b7:c1:e0:c7:8d:
                    73:9c:48:53:1e:0c:b7:a1:1d:b0:6b:7b:0c:6f:da:
                    fb:68:2c:43:2d:94:61:77:60:2e:85:73:45:03:f2:
                    3e:e3:a6:24:02:26:3f:85:22:3d:a4:12:18:30:da:
                    7f:ca:b0:1d:91:e2:ad:73:01:ca:13:bb:9b:79:37:
                    45:2c:0a:50:03:75:b3:86:7e:b1:08:6c:00:ea:c6:
                    f9:62:95:d4:48:0b:44:93:e1:24:15:61:95:b4:ad:
                    b3:3e:b7:ee:a0:40:2f:05:dc:4e:02:e9:4f:20:c1:
                    a1:c8:38:b3:fd:46:83:7b:ea:6f:f2:a5:78:ed:db:
                    15:53:50:51:8c:0d:9f:93:00:b1:04:b2:00:83:ab:
                    b8:9f:f5:3a:52:de:7b:e2:c3:8c:44:40:e3:96:6a:
                    4c:94:4a:72:15:40:48:9e:b5:46:86:b3:1e:a4:c6:
                    13:22:0b:b9:fe:ee:c8:02:05:72:a0:7e:e7:12:f9:
                    29:50:a5:cb:cc:75:23:b4:44:08:ed:eb:96:61:f1:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:BB:7B:7E:EF:AB:6D:FD:FD:44:41:96:60:45:A2:3C:F0:6D:02:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/E4BB7B7EEFAB6DFDFD4441966045A23CF06D02E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.112.0/22
                IPv6:
                  2804:434c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267561

    Signature Algorithm: sha256WithRSAEncryption
         a5:c6:44:94:08:7e:fc:23:99:a5:2e:c7:bd:3c:16:94:c3:db:
         31:09:a1:14:7c:3d:65:34:4c:25:30:30:55:1f:8a:84:6d:b5:
         22:b3:bf:f1:01:56:00:64:a5:de:58:4f:5e:33:89:62:0a:2c:
         6c:dd:9c:ab:7e:70:a8:f0:03:61:5c:b8:a6:9e:6b:4f:ff:59:
         84:8f:04:83:a9:97:51:30:08:b1:cd:e8:63:4d:9d:e6:0c:aa:
         21:18:be:3f:52:5e:29:01:79:96:8c:01:0c:91:2a:89:fa:1d:
         17:0b:f5:33:61:9b:22:24:2c:f6:2d:7f:31:7a:88:f2:58:31:
         d3:4a:e3:2d:eb:f1:fd:1c:91:5c:3e:fc:fc:87:15:b1:5d:a6:
         76:6d:68:17:10:81:c3:47:02:f1:07:49:dd:41:ae:77:43:7f:
         06:c4:37:79:c3:99:da:5f:82:bf:f4:d9:39:ab:68:58:fa:3c:
         de:7a:6d:bb:e1:59:a8:96:9d:e3:1e:b7:fd:e4:d7:2e:8e:30:
         d5:88:cc:ee:73:ee:78:92:d4:28:8d:eb:30:c2:65:62:5b:2a:
         11:4a:cc:d2:61:14:2e:6d:7b:34:be:e6:56:96:d0:3d:91:11:
         02:da:0e:09:aa:9e:1c:b6:11:da:c5:f6:05:10:19:31:c7:4c:
         7c:a6:3c:c8
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUA1CpaZSa0vFs51vHkkrTnHlAJDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDQxOTI2NTVaFw0yNTAzMDMxOTMxNTVaMDMxMTAvBgNV
BAMTKEU0QkI3QjdFRUZBQjZERkRGRDQ0NDE5NjYwNDVBMjNDRjA2RDAyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBde4k99ams/wDFhGZdW2I5+L
NaI+fgloU9FCXTP4WSe+4yNN8mlm5IxIsS1wNW6yWexvCQ23weDHjXOcSFMeDLeh
HbBrewxv2vtoLEMtlGF3YC6Fc0UD8j7jpiQCJj+FIj2kEhgw2n/KsB2R4q1zAcoT
u5t5N0UsClADdbOGfrEIbADqxvlildRIC0ST4SQVYZW0rbM+t+6gQC8F3E4C6U8g
waHIOLP9RoN76m/ypXjt2xVTUFGMDZ+TALEEsgCDq7if9TpS3nviw4xEQOOWakyU
SnIVQEietUaGsx6kxhMiC7n+7sgCBXKgfucS+SlQpcvMdSO0RAjt65Zh8TzlAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTku3t+76tt/f1E
QZZgRaI88G0C5TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ndVI3OXVpcUQ2bW11eTdTYVpLSFVQR1hHZFZmQVlWMkxF
YmY2NEthUzJ5LzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ndVI3OXVpcUQ2bW11eTdTYVpLSFVQR1hHZFZmQVlWMkxF
YmY2NEthUzJ5LzAvRTRCQjdCN0VFRkFCNkRGREZENDQ0MTk2NjA0NUEyM0NGMDZE
MDJFNS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUZwMA0EAgACMAcDBQAo
BENMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQVKTANBgkqhkiG9w0BAQsFAAOC
AQEApcZElAh+/COZpS7HvTwWlMPbMQmhFHw9ZTRMJTAwVR+KhG21IrO/8QFWAGSl
3lhPXjOJYgosbN2cq35wqPADYVy4pp5rT/9ZhI8Eg6mXUTAIsc3oY02d5gyqIRi+
P1JeKQF5lowBDJEqifodFwv1M2GbIiQs9i1/MXqI8lgx00rjLevx/RyRXD78/IcV
sV2mdm1oFxCBw0cC8QdJ3UGud0N/BsQ3ecOZ2l+Cv/TZOatoWPo83nptu+FZqJad
4x63/eTXLo4w1YjM7nPueJLUKI3rMMJlYlsqEUrM0mEULm17NL7mVpbQPZERAtoO
CaqeHLYR2sX2BRAZMcdMfKY8yA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org