Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.cer
File:                     E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.cer (raw, json)
Hash identifier:          Ijc/kANukDArV7E995zvr7ruRWKT//cbVkIkXmIMNXo=
Subject key identifier:   E5:8B:EB:71:37:C8:A8:83:82:E5:D3:B9:7D:2A:0E:11:0D:4C:50:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       051BAFD79DB9CB1F862F2CF07776124AF860887E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 13:16:53 +0000
Certificate not after:    Thu 10 Apr 2025 13:21:53 +0000
Subordinate resources:    AS: 268623
                          IP: 45.164.120.0/22
                          IP: 2804:5404::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1b:af:d7:9d:b9:cb:1f:86:2f:2c:f0:77:76:12:4a:f8:60:88:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 13:16:53 2024 GMT
            Not After : Apr 10 13:21:53 2025 GMT
        Subject: CN=E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:ad:a0:ab:89:6f:62:22:84:69:17:13:ee:
                    97:0e:fe:dc:24:67:ee:26:31:d3:18:31:56:5b:ad:
                    4a:24:94:ef:67:49:d0:fc:64:1f:ff:78:c9:8d:bf:
                    00:19:46:19:a5:6d:56:17:59:dd:e1:9b:17:da:15:
                    51:91:8e:6f:47:a8:bb:e2:a5:05:a9:56:37:e6:03:
                    29:5f:5d:97:1c:87:1e:74:7f:37:bc:f2:07:95:5f:
                    61:5d:2c:15:f2:05:ad:fd:12:dd:75:ff:08:44:61:
                    16:92:e1:74:69:16:aa:6d:97:a0:9c:a2:ce:e1:d9:
                    c8:9d:0e:b2:62:48:9c:be:7d:33:d7:4a:f6:64:ec:
                    55:45:d4:75:c1:1a:e1:60:73:d3:5d:a2:ee:b2:24:
                    44:e1:51:92:63:a4:35:fc:62:d5:19:e8:df:7b:f0:
                    30:5b:a7:01:1b:c7:ac:b2:f7:2c:4f:19:5a:da:de:
                    e6:6a:30:55:ed:45:30:54:05:ee:0e:af:64:8b:df:
                    56:3a:8a:3b:17:9b:f3:d7:ff:9b:b8:a3:ef:9c:ba:
                    90:24:c6:10:4e:21:36:ae:69:0c:d8:48:6c:ab:32:
                    ee:53:f8:da:50:05:a8:18:6e:0d:dc:3c:38:c6:de:
                    33:fd:b6:6b:05:e8:06:ad:d0:e3:9c:65:7d:28:45:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:8B:EB:71:37:C8:A8:83:82:E5:D3:B9:7D:2A:0E:11:0D:4C:50:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.120.0/22
                IPv6:
                  2804:5404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268623

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:24:1b:d9:04:fa:26:1a:d1:27:54:e4:4c:77:7c:ba:7c:
         d6:e1:10:11:51:61:3b:c6:a2:1b:c0:d7:98:af:f3:f6:af:6f:
         77:64:76:ad:4f:3d:2c:fc:30:46:2c:bf:d7:a4:22:2c:02:92:
         40:95:f0:02:60:8f:c2:08:47:32:28:ec:92:c6:4a:79:b3:5f:
         a8:fd:d8:c9:24:9c:55:3f:11:3c:22:f7:7a:ea:13:8e:f8:32:
         68:0f:8b:dd:06:0c:f2:c3:e8:32:40:15:4e:d3:24:89:57:bb:
         50:bf:52:a3:5b:10:7c:d3:2d:c5:8f:c7:4e:b6:5a:3d:51:7b:
         a4:80:30:2b:76:be:48:fe:51:58:73:71:bc:44:8e:45:7f:39:
         a5:5d:51:02:7a:75:7e:b6:a2:e9:34:fc:e0:19:bb:ae:f4:53:
         29:6c:a8:82:f3:fb:3d:2c:4d:18:d7:a2:fe:9d:40:32:ce:40:
         e3:34:90:6a:2f:92:24:b2:3c:29:7b:01:1d:4d:00:94:39:6f:
         83:1a:4d:59:f0:b8:3e:51:7d:7a:6e:59:55:cb:6c:99:aa:a1:
         bd:1b:3b:ff:5c:8b:dc:13:45:16:40:c3:4f:86:32:6d:9b:11:
         d1:40:3e:af:43:bb:7e:3e:7f:b0:f0:bf:b0:53:2e:04:89:ea:
         0f:cf:94:51
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUBRuv1525yx+GLyzwd3YSSvhgiH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MTExMzE2NTNaFw0yNTA0MTAxMzIxNTNaMDMxMTAvBgNV
BAMTKEU1OEJFQjcxMzdDOEE4ODM4MkU1RDNCOTdEMkEwRTExMEQ0QzUwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpK2gq4lvYiKEaRcT7pcO/twk
Z+4mMdMYMVZbrUoklO9nSdD8ZB//eMmNvwAZRhmlbVYXWd3hmxfaFVGRjm9HqLvi
pQWpVjfmAylfXZcchx50fze88geVX2FdLBXyBa39Et11/whEYRaS4XRpFqptl6Cc
os7h2cidDrJiSJy+fTPXSvZk7FVF1HXBGuFgc9Ndou6yJEThUZJjpDX8YtUZ6N97
8DBbpwEbx6yy9yxPGVra3uZqMFXtRTBUBe4Or2SL31Y6ijsXm/PX/5u4o++cupAk
xhBOITauaQzYSGyrMu5T+NpQBagYbg3cPDjG3jP9tmsF6Aat0OOcZX0oRbg5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTli+txN8iog4Ll
07l9Kg4RDUxQuzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84alA0ekthd0g0Z2ttb3c0NGt1aW9GcGhxVkFKMzYxTFFw
Nmp5eWN2TEZjby8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84alA0ekthd0g0Z2ttb3c0NGt1aW9GcGhxVkFKMzYxTFFw
Nmp5eWN2TEZjby8wL0U1OEJFQjcxMzdDOEE4ODM4MkU1RDNCOTdEMkEwRTExMEQ0
QzUwQkIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2keDANBAIAAjAHAwUA
KARUBDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGU8wDQYJKoZIhvcNAQELBQAD
ggEBAHJ8JBvZBPomGtEnVORMd3y6fNbhEBFRYTvGohvA15iv8/avb3dkdq1PPSz8
MEYsv9ekIiwCkkCV8AJgj8IIRzIo7JLGSnmzX6j92MkknFU/ETwi93rqE474MmgP
i90GDPLD6DJAFU7TJIlXu1C/UqNbEHzTLcWPx062Wj1Re6SAMCt2vkj+UVhzcbxE
jkV/OaVdUQJ6dX62ouk0/OAZu670UylsqILz+z0sTRjXov6dQDLOQOM0kGovkiSy
PCl7AR1NAJQ5b4MaTVnwuD5RfXpuWVXLbJmqob0bO/9ci9wTRRZAw0+GMm2bEdFA
Pq9Du34+f7Dwv7BTLgSJ6g/PlFE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org