Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.cer
File:                     E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.cer (raw, json)
Hash identifier:          ACJbo3GbP2WoJxx7vcZQOOrxWYIpxOh25sUeCAlTW/w=
Subject key identifier:   E5:09:BA:A2:69:3B:17:A5:41:A2:42:E2:F3:1A:9A:5B:B0:EE:68:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DFD9F5B2D092C75B2BFE7B2C3A592287E7EF13C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 16:02:33 +0000
Certificate not after:    Wed 12 Feb 2025 16:07:33 +0000
Subordinate resources:    AS: 270553
                          IP: 189.85.108.0/22
                          IP: 2804:6dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fd:9f:5b:2d:09:2c:75:b2:bf:e7:b2:c3:a5:92:28:7e:7e:f1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 16:02:33 2024 GMT
            Not After : Feb 12 16:07:33 2025 GMT
        Subject: CN=E509BAA2693B17A541A242E2F31A9A5BB0EE68AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:c1:c4:9b:0f:07:d7:83:36:57:b9:31:a1:
                    d0:ab:6f:43:a8:6f:b2:fb:ca:25:15:26:67:c2:db:
                    76:35:9a:96:68:87:f0:ab:ee:95:02:ee:2b:b7:be:
                    86:bb:b8:fd:09:06:c5:7d:40:da:6f:67:61:5d:9c:
                    30:c0:1d:06:6e:54:ab:f5:70:9a:7e:f2:2f:ca:49:
                    10:fd:6e:67:bc:35:9f:a9:0e:a4:cf:f3:4d:cf:9d:
                    91:a0:67:6b:27:ce:72:29:d6:06:cf:7a:70:72:f0:
                    51:d2:c0:b1:a4:e3:9d:87:56:1c:05:d0:3c:84:59:
                    d9:3c:4b:66:e3:a0:53:bc:b0:53:40:8e:61:c6:47:
                    4b:bd:c9:f8:61:6b:df:c8:29:cf:89:47:59:14:ef:
                    44:3b:3b:63:4c:ed:4a:69:97:b0:b7:94:15:7c:ad:
                    f2:3b:77:34:78:bf:b7:d7:03:88:66:22:e7:1b:a4:
                    38:66:5a:64:f3:94:29:f5:1c:03:c3:a8:fb:19:f5:
                    29:59:0c:3a:e9:8b:d0:d8:73:5f:d7:34:ed:6b:94:
                    73:17:8a:33:a0:ed:0a:d5:61:ea:2b:d9:4f:41:7e:
                    64:bb:1c:cb:f3:db:1a:b9:45:6f:fb:2a:00:e0:79:
                    3c:92:b6:f3:82:ba:05:5e:fe:80:95:a9:09:5f:57:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:09:BA:A2:69:3B:17:A5:41:A2:42:E2:F3:1A:9A:5B:B0:EE:68:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.108.0/22
                IPv6:
                  2804:6dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270553

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:4e:7b:3a:c3:4e:bb:75:5c:23:56:33:60:68:3f:88:d9:
         fc:4c:86:46:b8:f8:71:d4:30:97:cf:4f:15:16:8b:f1:c0:ff:
         3a:05:43:0a:d1:bb:94:7b:05:9b:38:5d:5e:99:37:9b:7c:46:
         f8:28:6d:2b:f3:2f:27:e8:d5:49:4e:df:7d:26:ce:7e:d3:c2:
         f5:c0:d1:33:15:70:8e:b0:c4:21:d5:a3:2b:c5:e1:8a:6a:b5:
         9c:db:73:3f:db:b8:1d:d6:79:a9:5c:c4:5e:1a:a7:1e:26:de:
         ad:7d:6e:c9:cb:1b:4a:1d:a1:1a:11:45:5c:68:38:e1:7c:23:
         73:ef:2e:10:0b:f9:4f:1a:e0:c1:dd:15:cf:70:ff:95:20:8c:
         48:90:0f:02:bf:9f:6e:62:f2:84:27:a3:5b:67:1c:00:02:d4:
         1b:34:ef:9f:67:ae:50:a4:6e:a6:fc:1f:3a:10:61:73:fc:f9:
         c1:2d:2b:6c:d9:c7:03:c7:bd:37:18:1d:61:c3:29:eb:85:bf:
         c1:16:de:d5:0a:87:d8:07:c9:fc:5d:e8:cd:93:9a:33:ea:c5:
         cd:a4:5c:25:70:a9:40:f2:51:c5:dd:55:bc:b8:46:0f:19:e0:
         45:d1:ba:55:16:fc:fc:61:07:d1:be:3d:30:52:35:9f:fa:a9:
         5f:ab:62:7f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTf2fWy0JLHWyv+eyw6WSKH5+8TwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTQxNjAyMzNaFw0yNTAyMTIxNjA3MzNaMDMxMTAvBgNV
BAMTKEU1MDlCQUEyNjkzQjE3QTU0MUEyNDJFMkYzMUE5QTVCQjBFRTY4QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVcHEmw8H14M2V7kxodCrb0Oo
b7L7yiUVJmfC23Y1mpZoh/Cr7pUC7iu3voa7uP0JBsV9QNpvZ2FdnDDAHQZuVKv1
cJp+8i/KSRD9bme8NZ+pDqTP803PnZGgZ2snznIp1gbPenBy8FHSwLGk452HVhwF
0DyEWdk8S2bjoFO8sFNAjmHGR0u9yfhha9/IKc+JR1kU70Q7O2NM7Uppl7C3lBV8
rfI7dzR4v7fXA4hmIucbpDhmWmTzlCn1HAPDqPsZ9SlZDDrpi9DYc1/XNO1rlHMX
ijOg7QrVYeor2U9BfmS7HMvz2xq5RW/7KgDgeTyStvOCugVe/oCVqQlfVxsRAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTlCbqiaTsXpUGi
QuLzGppbsO5orjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HdmExUk5XTFFaS1gybUtHWDNBQk56RGYyR1VFbUh0dWRu
OGlhQXdQSjU5Yi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3ZhMVJOV0xRWktYMm1LR1gzQUJOekRmMkdVRW1IdHVk
bjhpYUF3UEo1OWIvMC9FNTA5QkFBMjY5M0IxN0E1NDFBMjQyRTJGMzFBOUE1QkIw
RUU2OEFFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK9VWwwDQQCAAIwBwMF
ACgEbcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCDZMA0GCSqGSIb3DQEBCwUA
A4IBAQCQ8057OsNOu3VcI1YzYGg/iNn8TIZGuPhx1DCXz08VFovxwP86BUMK0buU
ewWbOF1emTebfEb4KG0r8y8n6NVJTt99Js5+08L1wNEzFXCOsMQh1aMrxeGKarWc
23M/27gd1nmpXMReGqceJt6tfW7JyxtKHaEaEUVcaDjhfCNz7y4QC/lPGuDB3RXP
cP+VIIxIkA8Cv59uYvKEJ6NbZxwAAtQbNO+fZ65QpG6m/B86EGFz/PnBLSts2ccD
x703GB1hwynrhb/BFt7VCofYB8n8XejNk5oz6sXNpFwlcKlA8lHF3VW8uEYPGeBF
0bpVFvz8YQfRvj0wUjWf+qlfq2J/
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org