Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E81335DEC02101DE2CB6688D10CE75398B3908B8.cer
File:                     E81335DEC02101DE2CB6688D10CE75398B3908B8.cer (raw, json)
Hash identifier:          WMSc3ZtwD6VmBxyIxCtK3lOHsJ2EYMkJmRI3c8yu1Jg=
Subject key identifier:   E8:13:35:DE:C0:21:01:DE:2C:B6:68:8D:10:CE:75:39:8B:39:08:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       532B38D42DEA3C32DF72F724FCD89EF673667AE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/E81335DEC02101DE2CB6688D10CE75398B3908B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Nov 2022 02:37:27 +0000
Certificate not after:    Mon 20 Nov 2023 02:42:27 +0000
Subordinate resources:    AS: 262503
                          IP: 45.181.228.0/22
                          IP: 167.249.168.0/22
                          IP: 177.66.192.0/22
                          IP: 177.91.52.0/22
                          IP: 2804:2be0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2b:38:d4:2d:ea:3c:32:df:72:f7:24:fc:d8:9e:f6:73:66:7a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 02:37:27 2022 GMT
            Not After : Nov 20 02:42:27 2023 GMT
        Subject: CN=E81335DEC02101DE2CB6688D10CE75398B3908B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:63:80:5c:1b:3e:35:93:b9:32:e1:ec:db:2a:
                    77:c3:44:ca:f9:1f:72:62:35:a7:35:28:55:8a:57:
                    20:d7:f2:37:e1:10:aa:ae:1a:b2:a6:3b:09:c0:dd:
                    77:58:3b:0e:1e:c4:c6:d2:28:35:c8:b1:84:56:06:
                    80:60:5b:e4:fe:1d:0b:56:ed:24:f2:a6:b8:7b:2c:
                    d4:c0:fa:ff:ba:7b:5f:38:98:b5:89:d8:ad:ae:b7:
                    68:4a:57:8e:b5:a5:da:22:96:c4:cc:eb:93:5c:95:
                    29:f0:58:6e:d6:a0:e5:41:17:dc:ce:22:71:06:49:
                    32:0d:5f:81:bd:83:fb:1f:37:0f:a9:a5:a8:0c:12:
                    70:44:d8:6f:0d:f8:f3:44:ff:36:34:11:b0:a5:99:
                    71:72:73:83:cc:7b:bd:24:94:63:c3:92:60:d9:38:
                    0a:36:45:2a:76:9e:83:b0:f6:e5:10:ba:77:48:07:
                    d8:94:b1:7f:99:79:2d:03:ef:d5:c4:66:df:bf:74:
                    de:13:7d:d8:d1:1a:a2:d5:40:0a:b9:f5:a8:3c:4f:
                    dd:01:90:7d:7a:ae:ce:3b:8c:98:be:a3:5e:fc:f6:
                    43:78:0a:54:c0:fb:ba:ed:bf:76:8d:89:4c:94:20:
                    ce:f7:2f:47:fc:a3:4f:91:ba:ae:2a:a8:40:16:0a:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:13:35:DE:C0:21:01:DE:2C:B6:68:8D:10:CE:75:39:8B:39:08:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/E81335DEC02101DE2CB6688D10CE75398B3908B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/22
                  167.249.168.0/22
                  177.66.192.0/22
                  177.91.52.0/22
                IPv6:
                  2804:2be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262503

    Signature Algorithm: sha256WithRSAEncryption
         4e:45:3c:e2:91:29:d3:c6:8e:83:a7:5b:50:98:a4:c6:1f:ac:
         13:02:25:d5:cc:9d:fc:2b:5a:e8:e8:5c:2f:ba:3d:76:4e:0c:
         3c:09:e2:4e:24:24:51:5f:8a:53:35:d7:31:cd:82:39:98:be:
         c1:f9:bf:29:d3:7e:c0:8d:e0:bf:88:56:48:78:1e:86:0a:19:
         6c:ef:10:fb:a3:00:9d:9d:ed:e9:3b:b3:83:4a:db:80:a9:34:
         36:06:44:12:c2:7b:88:bf:34:0b:a2:49:ba:f2:b6:86:73:a4:
         8e:5b:a4:86:89:8a:da:86:7f:6a:7c:85:31:9b:e1:b4:37:31:
         0e:b1:43:f4:52:84:85:9c:87:0d:8a:06:a1:01:df:b2:70:fa:
         f0:c9:db:a7:92:63:a4:0a:98:fe:99:74:d3:b6:de:cf:dd:14:
         a5:ff:20:dc:4c:06:a7:33:7a:7c:b6:5e:49:64:d7:ca:5f:16:
         ef:42:f8:a2:f2:82:e7:55:86:13:2e:ea:5b:c4:e6:f9:80:a5:
         0c:6b:76:a9:dc:21:08:1f:36:8a:f0:c3:0c:58:68:7e:e9:02:
         41:17:0e:e7:28:7a:15:7f:64:d8:b6:f3:a3:68:3d:e4:3d:2b:
         86:cb:2c:dd:07:5b:fc:2b:b6:85:b8:6f:6c:41:a6:1a:56:ef:
         4d:ae:45:cc
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUUys41C3qPDLfcvck/Nie9nNmeucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMjEwMjM3MjdaFw0yMzExMjAwMjQyMjdaMDMxMTAvBgNV
BAMTKEU4MTMzNURFQzAyMTAxREUyQ0I2Njg4RDEwQ0U3NTM5OEIzOTA4QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnY4BcGz41k7ky4ezbKnfDRMr5
H3JiNac1KFWKVyDX8jfhEKquGrKmOwnA3XdYOw4exMbSKDXIsYRWBoBgW+T+HQtW
7STyprh7LNTA+v+6e184mLWJ2K2ut2hKV461pdoilsTM65NclSnwWG7WoOVBF9zO
InEGSTINX4G9g/sfNw+ppagMEnBE2G8N+PNE/zY0EbClmXFyc4PMe70klGPDkmDZ
OAo2RSp2noOw9uUQundIB9iUsX+ZeS0D79XEZt+/dN4TfdjRGqLVQAq59ag8T90B
kH16rs47jJi+o1789kN4ClTA+7rtv3aNiUyUIM73L0f8o0+Ruq4qqEAWCtnZAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToEzXewCEB3iy2
aI0QznU5izkIuDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84RW81UU1tcXRkaW00andvNUF0VHVQSmtRaXpQY21XU205
Zm9SdWZZTUZrRi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84RW81UU1tcXRkaW00andvNUF0VHVQSmtRaXpQY21XU205
Zm9SdWZZTUZrRi8wL0U4MTMzNURFQzAyMTAxREUyQ0I2Njg4RDEwQ0U3NTM5OEIz
OTA4QjgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAi215AMEAqf5qAMEArFC
wAMEArFbNDANBAIAAjAHAwUAKAQr4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
AWcwDQYJKoZIhvcNAQELBQADggEBAE5FPOKRKdPGjoOnW1CYpMYfrBMCJdXMnfwr
WujoXC+6PXZODDwJ4k4kJFFfilM11zHNgjmYvsH5vynTfsCN4L+IVkh4HoYKGWzv
EPujAJ2d7ek7s4NK24CpNDYGRBLCe4i/NAuiSbrytoZzpI5bpIaJitqGf2p8hTGb
4bQ3MQ6xQ/RShIWchw2KBqEB37Jw+vDJ26eSY6QKmP6ZdNO23s/dFKX/INxMBqcz
eny2Xklk18pfFu9C+KLygudVhhMu6lvE5vmApQxrdqncIQgfNorwwwxYaH7pAkEX
DucoehV/ZNi286NoPeQ9K4bLLN0HW/wrtoW4b2xBphpW702uRcw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org