Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E8E5FD94DF7BF4A0DAFCF7C6B4B97C2359D7A923.cer
File:                     E8E5FD94DF7BF4A0DAFCF7C6B4B97C2359D7A923.cer (raw, json)
Hash identifier:          uD//i8taanvHS5HRCtNoNaTS9H+eG37vevhAgZ9ctWE=
Subject key identifier:   E8:E5:FD:94:DF:7B:F4:A0:DA:FC:F7:C6:B4:B9:7C:23:59:D7:A9:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2590FFCD73A9F40A583BBFFAF8B7B1587EE3810D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/E8E5FD94DF7BF4A0DAFCF7C6B4B97C2359D7A923.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 18:54:57 +0000
Certificate not after:    Fri 01 Nov 2024 18:59:57 +0000
Subordinate resources:    AS: 266071
                          IP: 45.4.120.0/22
                          IP: 2804:3a1c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:90:ff:cd:73:a9:f4:0a:58:3b:bf:fa:f8:b7:b1:58:7e:e3:81:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 18:54:57 2023 GMT
            Not After : Nov  1 18:59:57 2024 GMT
        Subject: CN=E8E5FD94DF7BF4A0DAFCF7C6B4B97C2359D7A923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:39:00:8e:51:cb:ec:ea:da:b2:5a:d0:f5:
                    c7:b4:1a:3a:98:2d:af:28:02:72:3b:85:00:5f:81:
                    f4:eb:0d:a2:fe:b2:b0:d3:ac:7f:9e:ae:d8:90:c5:
                    25:84:a1:2c:0b:c9:41:4a:c0:8a:b2:0e:c8:9d:99:
                    13:08:4a:a9:1c:c4:b6:2a:66:b7:76:10:36:9c:3d:
                    9a:2f:49:2c:28:54:6f:d3:db:ae:4b:c0:16:f7:72:
                    e5:6f:ce:2a:28:79:6c:08:37:6d:f2:89:41:b8:c2:
                    4a:8f:84:c2:5c:35:a9:6c:71:20:cd:75:50:3c:3f:
                    4a:f7:f0:95:ec:2c:9a:3f:43:33:07:86:5b:1b:19:
                    3f:a8:54:11:c3:5e:f5:59:d2:ce:f5:1c:f9:08:15:
                    d5:83:bb:fb:74:33:d9:a5:66:c4:f3:ef:7a:10:ec:
                    87:2d:5b:b1:66:08:74:a8:95:36:f7:b4:cc:b6:b8:
                    9b:7b:69:03:b2:54:05:d9:aa:50:08:c1:21:e6:17:
                    38:c9:03:15:23:a8:9a:0e:a6:5c:7a:b1:3d:5e:55:
                    7d:d0:36:9c:33:f9:ae:2d:c8:2e:3e:66:1e:be:17:
                    83:20:7d:6e:3b:56:f2:b6:ba:96:ff:36:7a:ac:1f:
                    95:2e:c4:ac:e4:99:4e:2a:79:bc:4b:17:2f:14:a4:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:E5:FD:94:DF:7B:F4:A0:DA:FC:F7:C6:B4:B9:7C:23:59:D7:A9:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/E8E5FD94DF7BF4A0DAFCF7C6B4B97C2359D7A923.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.120.0/22
                IPv6:
                  2804:3a1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266071

    Signature Algorithm: sha256WithRSAEncryption
         94:f5:5a:48:b4:05:c3:9d:4c:eb:7c:20:e0:70:ab:40:04:f0:
         b4:72:75:78:29:ea:5d:b2:dd:51:61:67:c7:a6:e5:ff:14:f1:
         f8:0d:12:3d:45:e2:f9:6c:51:61:07:cf:1b:dd:c2:23:70:a4:
         a7:60:9c:36:6d:44:c6:33:01:46:23:34:1e:b0:73:35:3e:44:
         88:3e:d3:be:30:db:2f:80:cf:58:0f:01:fe:08:0c:6e:d7:a9:
         15:fa:ce:35:75:34:df:01:f8:26:14:0e:31:ff:49:44:e3:0c:
         3e:01:80:af:b6:9e:ec:03:74:85:c1:59:d6:f2:a2:a9:95:d3:
         38:b5:74:a8:81:fd:02:53:dd:2c:52:7a:52:37:cd:0d:92:24:
         98:19:90:54:75:28:9c:69:dc:40:7e:a9:ad:e1:22:47:06:86:
         4c:b9:cd:41:46:cb:ec:d7:9e:51:55:43:52:c4:8b:4c:e7:dc:
         42:db:c7:68:9d:d4:22:7b:fb:1d:e7:92:ab:17:61:28:b6:06:
         0f:99:f0:b8:8a:23:3b:b3:ad:17:e8:a1:51:d3:b7:b1:10:21:
         0e:1b:b8:43:f2:eb:22:58:de:ca:8b:a4:7d:22:0b:b2:a0:65:
         14:b5:ca:96:ff:d1:07:37:cd:ef:6b:a5:d5:f9:48:75:9e:54:
         60:43:43:3e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJZD/zXOp9ApYO7/6+LexWH7jgQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDMxODU0NTdaFw0yNDExMDExODU5NTdaMDMxMTAvBgNV
BAMTKEU4RTVGRDk0REY3QkY0QTBEQUZDRjdDNkI0Qjk3QzIzNTlEN0E5MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lTkAjlHL7OraslrQ9ce0GjqY
La8oAnI7hQBfgfTrDaL+srDTrH+ertiQxSWEoSwLyUFKwIqyDsidmRMISqkcxLYq
Zrd2EDacPZovSSwoVG/T265LwBb3cuVvziooeWwIN23yiUG4wkqPhMJcNalscSDN
dVA8P0r38JXsLJo/QzMHhlsbGT+oVBHDXvVZ0s71HPkIFdWDu/t0M9mlZsTz73oQ
7IctW7FmCHSolTb3tMy2uJt7aQOyVAXZqlAIwSHmFzjJAxUjqJoOplx6sT1eVX3Q
Npwz+a4tyC4+Zh6+F4MgfW47VvK2upb/NnqsH5UuxKzkmU4qebxLFy8UpEFTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTo5f2U33v0oNr8
98a0uXwjWdepIzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83ZkVWM0dSeDJBTk5jaVY5UmhNeGJSUzlhTlV1cHBOR2ZX
SG1uajJxaHJ2Vy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN2ZFVjNHUngyQU5OY2lWOVJoTXhiUlM5YU5VdXBwTkdm
V0htbmoycWhydlcvMC9FOEU1RkQ5NERGN0JGNEEwREFGQ0Y3QzZCNEI5N0MyMzU5
RDdBOTIzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBHgwDQQCAAIwBwMF
ACgEOhwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA9XMA0GCSqGSIb3DQEBCwUA
A4IBAQCU9VpItAXDnUzrfCDgcKtABPC0cnV4Kepdst1RYWfHpuX/FPH4DRI9ReL5
bFFhB88b3cIjcKSnYJw2bUTGMwFGIzQesHM1PkSIPtO+MNsvgM9YDwH+CAxu16kV
+s41dTTfAfgmFA4x/0lE4ww+AYCvtp7sA3SFwVnW8qKpldM4tXSogf0CU90sUnpS
N80NkiSYGZBUdSicadxAfqmt4SJHBoZMuc1BRsvs155RVUNSxItM59xC28dondQi
e/sd55KrF2EotgYPmfC4iiM7s60X6KFR07exECEOG7hD8usiWN7Ki6R9IguyoGUU
tcqW/9EHN83va6XV+Uh1nlRgQ0M+
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:35:41 2025 by rpki-client