Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E5A9EB01D7B46B711B731DBE19C8D0D683CCB449.cer
File:                     E5A9EB01D7B46B711B731DBE19C8D0D683CCB449.cer (raw, json)
Hash identifier:          b/uXcnTEhRKyU4kjGwg4svqkzqCEzdBrS9WV7b6AtdY=
Subject key identifier:   E5:A9:EB:01:D7:B4:6B:71:1B:73:1D:BE:19:C8:D0:D6:83:CC:B4:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FBAFD5664D95196CD1DB8472C361DD57A1897E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E5A9EB01D7B46B711B731DBE19C8D0D683CCB449.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 14:37:30 +0000
Certificate not after:    Thu 16 Jan 2025 14:42:30 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ba:fd:56:64:d9:51:96:cd:1d:b8:47:2c:36:1d:d5:7a:18:97:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 14:37:30 2024 GMT
            Not After : Jan 16 14:42:30 2025 GMT
        Subject: CN=E5A9EB01D7B46B711B731DBE19C8D0D683CCB449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:a7:ac:e2:3d:f7:a4:f9:6b:c8:32:7f:cd:
                    c7:c6:f6:88:97:90:44:9d:17:b3:37:43:bb:21:89:
                    b1:58:38:6f:8a:ab:91:3a:d2:a8:88:cd:89:c1:46:
                    cd:fa:89:63:83:00:b2:9c:c9:72:3a:3d:03:d0:54:
                    80:14:74:d2:15:ee:99:71:db:84:e1:ff:7e:b9:47:
                    c5:d6:79:48:3f:6f:f5:3c:5b:e0:dc:fa:93:5e:53:
                    46:29:2f:a6:67:55:3d:45:37:92:c9:46:e6:91:9a:
                    63:e0:a4:39:96:06:0e:19:dd:98:44:db:70:05:b4:
                    af:72:21:f1:6d:d1:47:89:0c:fd:e2:29:07:20:84:
                    3b:38:8c:68:d6:ec:53:dc:1b:d7:3b:80:f8:f0:60:
                    1d:bc:d3:cb:a5:1b:be:4e:58:44:3f:d0:33:3d:2a:
                    08:21:a4:12:ac:52:a5:61:09:a6:14:34:18:79:ca:
                    7c:42:66:50:17:e2:70:4d:26:7b:ef:7e:e1:11:5e:
                    ec:bb:45:37:9d:ab:92:d5:5e:71:89:99:5b:33:8f:
                    db:d3:25:78:d9:5e:a4:6e:7d:22:97:c0:60:87:6d:
                    d2:0d:05:06:97:bd:3d:c6:fc:a5:73:94:2a:c0:7f:
                    42:bf:97:38:94:8b:91:fb:af:31:86:61:f8:ec:f1:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:A9:EB:01:D7:B4:6B:71:1B:73:1D:BE:19:C8:D0:D6:83:CC:B4:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E5A9EB01D7B46B711B731DBE19C8D0D683CCB449.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         87:74:55:1a:45:e1:6f:75:6c:b0:12:a2:ba:14:45:5e:fd:a0:
         37:0f:90:0f:8e:df:6c:24:c4:de:3e:b8:63:2e:4b:9f:d6:d8:
         bc:56:96:64:ff:2d:4a:c2:6e:3f:ca:ea:18:65:d1:31:52:d1:
         da:e3:8a:63:4f:54:32:37:af:4f:6d:3c:31:37:2f:fe:20:b7:
         72:43:63:28:7b:ed:74:48:a7:58:b1:3a:34:39:49:d6:00:b0:
         ef:89:da:7e:0f:73:3e:e9:3b:d1:5f:a9:32:28:5f:6d:74:69:
         57:0c:8f:6b:a7:55:b4:7f:10:a2:d0:a2:fc:55:e2:d5:c6:20:
         25:99:c5:76:ae:b1:e8:e7:6c:78:3d:bd:b1:a9:c8:e0:f4:fa:
         2d:73:cd:04:8d:63:de:61:93:5e:18:d5:3d:61:31:80:bc:ce:
         3e:3b:af:d8:cb:07:58:c5:bc:81:a8:f1:c3:6b:97:02:84:15:
         b2:de:d3:80:05:a1:1e:a4:98:cc:2e:2c:52:ce:c8:79:eb:b8:
         c8:28:b6:63:39:fc:15:0e:3d:58:59:aa:9b:25:cf:0d:b3:e4:
         52:66:ad:4a:13:c3:4b:c1:65:6d:c4:59:50:18:1b:90:ab:a0:
         c8:e4:53:7f:93:45:d4:0b:07:52:65:e3:77:a2:9b:96:46:26:
         18:d4:9f:e2
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUb7r9VmTZUZbNHbhHLDYd1XoYl+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTgxNDM3MzBaFw0yNTAxMTYxNDQyMzBaMDMxMTAvBgNV
BAMTKEU1QTlFQjAxRDdCNDZCNzExQjczMURCRTE5QzhEMEQ2ODNDQ0I0NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikKes4j33pPlryDJ/zcfG9oiX
kESdF7M3Q7shibFYOG+Kq5E60qiIzYnBRs36iWODALKcyXI6PQPQVIAUdNIV7plx
24Th/365R8XWeUg/b/U8W+Dc+pNeU0YpL6ZnVT1FN5LJRuaRmmPgpDmWBg4Z3ZhE
23AFtK9yIfFt0UeJDP3iKQcghDs4jGjW7FPcG9c7gPjwYB2808ulG75OWEQ/0DM9
KgghpBKsUqVhCaYUNBh5ynxCZlAX4nBNJnvvfuERXuy7RTedq5LVXnGJmVszj9vT
JXjZXqRufSKXwGCHbdINBQaXvT3G/KVzlCrAf0K/lziUi5H7rzGGYfjs8fSDAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTlqesB17RrcRtz
Hb4ZyNDWg8y0STAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EM3g0cHdyamtIdjgybTFneFRLbnB2OEo1eDRTQ0pmTWJV
S3lOV2lQZHhUZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1i
VUt5TldpUGR4VGYvMC9FNUE5RUIwMUQ3QjQ2QjcxMUI3MzFEQkUxOUM4RDBENjgz
Q0NCNDQ5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxJ5wwDQQCAAIwBwMF
ACgEJZwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM4kMA0GCSqGSIb3DQEBCwUA
A4IBAQCHdFUaReFvdWywEqK6FEVe/aA3D5APjt9sJMTePrhjLkuf1ti8VpZk/y1K
wm4/yuoYZdExUtHa44pjT1QyN69PbTwxNy/+ILdyQ2Moe+10SKdYsTo0OUnWALDv
idp+D3M+6TvRX6kyKF9tdGlXDI9rp1W0fxCi0KL8VeLVxiAlmcV2rrHo52x4Pb2x
qcjg9Potc80EjWPeYZNeGNU9YTGAvM4+O6/YywdYxbyBqPHDa5cChBWy3tOABaEe
pJjMLixSzsh567jIKLZjOfwVDj1YWaqbJc8Ns+RSZq1KE8NLwWVtxFlQGBuQq6DI
5FN/k0XUCwdSZeN3opuWRiYY1J/i
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org