Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.cer
File:                     E5D8A4B837924CB61F25609D9A7874CF60F09B18.cer (raw, json)
Hash identifier:          BiJlhtXuwVDESpiAJHExvO7dYcA0cBV9PsUru4CwY98=
Subject key identifier:   E5:D8:A4:B8:37:92:4C:B6:1F:25:60:9D:9A:78:74:CF:60:F0:9B:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23B62F5B1D98C9CBC1EF955082C09F299CCE76B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 20:38:48 +0000
Certificate not after:    Thu 20 Jun 2024 20:43:48 +0000
Subordinate resources:    AS: 267585
                          IP: 45.70.192.0/22
                          IP: 2804:43b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b6:2f:5b:1d:98:c9:cb:c1:ef:95:50:82:c0:9f:29:9c:ce:76:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 22 20:38:48 2023 GMT
            Not After : Jun 20 20:43:48 2024 GMT
        Subject: CN=E5D8A4B837924CB61F25609D9A7874CF60F09B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:c4:3a:13:b4:95:47:f9:e0:10:b2:7d:b3:
                    36:70:c7:30:61:32:22:16:e7:16:a5:1f:da:fb:f7:
                    32:62:64:89:b9:5f:e1:7a:af:b1:6f:93:3e:84:d7:
                    46:d2:cb:e3:c0:b6:c0:4a:43:62:fe:ad:7a:0d:91:
                    26:d7:78:04:4a:84:99:2c:d4:11:2c:4e:7b:3f:95:
                    e9:82:0e:08:b0:f1:4e:9d:9c:1b:cc:97:67:2e:2e:
                    bb:0d:59:e7:a3:04:56:55:40:f6:ed:01:cb:a9:46:
                    6e:b3:5e:c2:e7:77:2a:4f:5e:b7:ab:7e:d4:01:cf:
                    34:01:44:d9:51:64:8a:10:b7:34:49:aa:8a:ac:ec:
                    b7:6f:6a:b5:f4:ff:f0:c5:58:ee:bf:17:1f:70:1c:
                    45:6d:73:f9:36:af:2e:32:d8:4d:ed:92:ea:a5:87:
                    01:af:af:5f:b9:78:f5:ae:d0:a0:d2:ed:7b:dc:76:
                    7d:9e:8a:1a:74:d0:0c:3d:79:a8:39:ad:23:8f:dc:
                    6e:80:ab:14:5a:06:d4:4a:cb:6f:8d:98:11:23:2c:
                    b9:94:eb:da:c0:f2:78:a9:4c:13:fb:e0:30:9e:88:
                    d1:f0:87:32:74:28:a1:f8:74:dc:3a:bd:49:2e:bd:
                    89:9d:40:ef:ab:94:bf:7a:09:5d:17:54:fc:65:06:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:D8:A4:B8:37:92:4C:B6:1F:25:60:9D:9A:78:74:CF:60:F0:9B:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.192.0/22
                IPv6:
                  2804:43b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267585

    Signature Algorithm: sha256WithRSAEncryption
         96:f2:22:1e:7b:1a:9b:e0:d2:f1:b8:26:79:57:f0:d4:08:57:
         d8:49:17:df:d7:4d:64:30:39:6c:63:27:eb:00:32:0d:36:96:
         ec:b6:01:6b:bc:87:87:f3:e0:a6:e6:93:d9:3c:ac:40:fc:16:
         bb:a2:22:d0:c7:cf:d7:f3:ae:cf:7b:12:75:c6:ea:8e:07:35:
         ed:c5:68:9e:7b:28:0e:81:3a:68:4b:34:3d:8d:ca:05:94:44:
         f0:5e:6e:90:fa:7f:29:31:6f:e9:e7:ab:44:1f:12:53:d1:ca:
         4b:df:d3:1a:78:c8:27:50:df:17:39:84:32:81:13:1a:9f:c9:
         51:c6:e7:d8:dc:0d:7f:de:81:6c:2b:c5:ed:e0:cb:4f:83:30:
         f5:6f:e2:9f:f8:9e:d2:c4:60:75:cf:32:c7:c3:c6:15:b5:7d:
         1d:6f:ac:e8:ea:f3:51:d5:6b:cf:e8:fc:b8:94:34:27:ce:de:
         d4:32:cf:93:94:2e:68:3f:30:4f:1f:dc:3e:83:d5:7b:bf:31:
         6e:6c:02:e6:39:55:bc:4b:41:00:79:a2:76:46:1e:cf:ba:f0:
         3a:c1:4b:5e:6f:9a:70:3f:a8:6c:60:ca:89:1d:c7:88:7e:cf:
         82:8e:68:c7:92:b6:5d:b3:51:73:3b:73:12:17:a7:21:61:83:
         6c:cb:64:99
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUI7YvWx2YycvB75VQgsCfKZzOdrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjIyMDM4NDhaFw0yNDA2MjAyMDQzNDhaMDMxMTAvBgNV
BAMTKEU1RDhBNEI4Mzc5MjRDQjYxRjI1NjA5RDlBNzg3NENGNjBGMDlCMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukMQ6E7SVR/ngELJ9szZwxzBh
MiIW5xalH9r79zJiZIm5X+F6r7Fvkz6E10bSy+PAtsBKQ2L+rXoNkSbXeARKhJks
1BEsTns/lemCDgiw8U6dnBvMl2cuLrsNWeejBFZVQPbtAcupRm6zXsLndypPXrer
ftQBzzQBRNlRZIoQtzRJqoqs7LdvarX0//DFWO6/Fx9wHEVtc/k2ry4y2E3tkuql
hwGvr1+5ePWu0KDS7Xvcdn2eihp00Aw9eag5rSOP3G6AqxRaBtRKy2+NmBEjLLmU
69rA8nipTBP74DCeiNHwhzJ0KKH4dNw6vUkuvYmdQO+rlL96CV0XVPxlBiq1AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTl2KS4N5JMth8l
YJ2aeHTPYPCbGDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ed1F4bkZxemlpdGh3Um0zY1ZDTUtxTEtVMzY4OUZETUpN
TVJMQzdnd2JVWi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRHdReG5GcXppaXRod1JtM2NWQ01LcUxLVTM2ODlGRE1K
TU1STEM3Z3diVVovMC9FNUQ4QTRCODM3OTI0Q0I2MUYyNTYwOUQ5QTc4NzRDRjYw
RjA5QjE4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItRsAwDQQCAAIwBwMF
ACgEQ7QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBVBMA0GCSqGSIb3DQEBCwUA
A4IBAQCW8iIeexqb4NLxuCZ5V/DUCFfYSRff101kMDlsYyfrADINNpbstgFrvIeH
8+Cm5pPZPKxA/Ba7oiLQx8/X867PexJ1xuqOBzXtxWieeygOgTpoSzQ9jcoFlETw
Xm6Q+n8pMW/p56tEHxJT0cpL39MaeMgnUN8XOYQygRMan8lRxufY3A1/3oFsK8Xt
4MtPgzD1b+Kf+J7SxGB1zzLHw8YVtX0db6zo6vNR1WvP6Py4lDQnzt7UMs+TlC5o
PzBPH9w+g9V7vzFubALmOVW8S0EAeaJ2Rh7PuvA6wUteb5pwP6hsYMqJHceIfs+C
jmjHkrZds1FzO3MSF6chYYNsy2SZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org