Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EA64F678B3E4692978A38CF10F5606C1ECD4CACC.cer
File:                     EA64F678B3E4692978A38CF10F5606C1ECD4CACC.cer (raw, json)
Hash identifier:          lSJWn3R6GMBJhpLfUbh8Sn9qMLvATl+8xykVNkmvB/A=
Subject key identifier:   EA:64:F6:78:B3:E4:69:29:78:A3:8C:F1:0F:56:06:C1:EC:D4:CA:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42A4EA3C49E2EE7BCA8F541E930AFD894634FAA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/EA64F678B3E4692978A38CF10F5606C1ECD4CACC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 04:12:33 +0000
Certificate not after:    Mon 03 Mar 2025 04:17:33 +0000
Subordinate resources:    AS: 267654
                          IP: 45.70.156.0/22
                          IP: 2804:44cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a4:ea:3c:49:e2:ee:7b:ca:8f:54:1e:93:0a:fd:89:46:34:fa:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 04:12:33 2024 GMT
            Not After : Mar  3 04:17:33 2025 GMT
        Subject: CN=EA64F678B3E4692978A38CF10F5606C1ECD4CACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:3d:80:ff:fe:3a:86:eb:a1:54:48:11:1b:
                    9a:38:7e:58:a6:4f:a0:72:7c:dc:fc:72:6d:7c:d0:
                    72:51:72:f4:b8:5a:da:05:c6:0e:3c:9f:3a:41:54:
                    15:a3:2b:d9:78:e0:7f:a7:67:fb:a2:29:23:70:8b:
                    9a:cf:b6:32:de:72:7a:3d:cb:a8:c1:58:69:56:7a:
                    a7:79:d8:5d:30:91:19:11:29:ab:2d:63:9a:b7:9b:
                    af:08:ff:05:72:27:32:60:ea:21:3f:c5:32:5b:53:
                    48:e0:46:c9:87:aa:84:dc:19:3a:8c:96:1b:e0:f7:
                    74:5b:47:b4:96:7f:40:1a:d7:c9:57:df:60:70:75:
                    9d:f2:8a:9b:e7:17:9a:6a:c7:a2:6a:83:6e:f1:9a:
                    91:45:42:58:dd:92:20:96:c1:7f:7b:8f:ed:5e:d1:
                    a2:aa:42:95:7b:56:9b:83:cd:b3:97:fb:91:50:bc:
                    34:a6:df:e1:66:b8:65:8e:6b:2e:8f:9a:b6:05:ba:
                    2a:f3:07:1b:bd:1c:8d:f9:f4:b3:fb:f5:14:6e:63:
                    2d:6d:71:d7:76:99:f9:7c:44:da:90:11:72:70:88:
                    a8:e4:89:87:76:0e:c3:27:82:3d:8a:9e:4f:75:e2:
                    45:26:ee:32:1b:4d:c1:16:5c:b9:b0:f8:c2:97:d4:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:64:F6:78:B3:E4:69:29:78:A3:8C:F1:0F:56:06:C1:EC:D4:CA:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/EA64F678B3E4692978A38CF10F5606C1ECD4CACC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.156.0/22
                IPv6:
                  2804:44cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267654

    Signature Algorithm: sha256WithRSAEncryption
         68:c4:3c:cd:39:fe:d4:14:f4:ea:be:da:9a:57:f4:88:9e:1b:
         c6:c6:86:26:1f:0c:ce:e3:b8:53:35:f8:bd:68:53:9f:f1:d0:
         b4:2f:d7:62:23:6e:ed:d2:01:d7:00:7b:0b:ea:16:8e:c7:17:
         74:b9:a6:fc:69:b3:ca:a3:ff:57:de:76:94:b1:27:82:ed:1f:
         c4:75:04:f5:c6:ea:f4:8b:82:f9:9f:15:2c:d7:1e:a9:6e:56:
         bd:bb:1f:92:af:ff:ed:f8:28:ee:7f:b1:90:69:a7:11:e4:33:
         63:fc:28:35:9e:4b:80:41:ad:7a:82:89:7d:a5:16:5d:bd:71:
         e7:32:0b:57:05:df:00:12:4b:86:cc:c2:0b:5c:24:73:33:51:
         05:a9:93:6f:d9:28:13:74:75:54:dd:f5:af:a2:4f:a2:5f:06:
         ea:17:9b:06:6c:07:c9:34:c2:d2:84:68:d8:c0:cc:ed:29:e9:
         bd:d6:85:c7:29:f3:04:fe:e5:0d:20:d5:73:d4:be:2f:87:cd:
         60:db:51:e4:fa:21:00:6f:ff:28:4a:6d:6e:17:3e:c3:70:f0:
         f3:53:a3:d9:8e:76:a3:93:cb:e6:d6:1d:4d:a6:9f:22:c2:45:
         0e:9b:4a:a3:44:c1:79:a8:0f:2d:48:a1:4d:f7:5e:72:6a:ce:
         59:ce:0a:83
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQqTqPEni7nvKj1Qekwr9iUY0+qcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDQwNDEyMzNaFw0yNTAzMDMwNDE3MzNaMDMxMTAvBgNV
BAMTKEVBNjRGNjc4QjNFNDY5Mjk3OEEzOENGMTBGNTYwNkMxRUNENENBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOT2A//46huuhVEgRG5o4flim
T6ByfNz8cm180HJRcvS4WtoFxg48nzpBVBWjK9l44H+nZ/uiKSNwi5rPtjLecno9
y6jBWGlWeqd52F0wkRkRKastY5q3m68I/wVyJzJg6iE/xTJbU0jgRsmHqoTcGTqM
lhvg93RbR7SWf0Aa18lX32BwdZ3yipvnF5pqx6Jqg27xmpFFQljdkiCWwX97j+1e
0aKqQpV7VpuDzbOX+5FQvDSm3+FmuGWOay6PmrYFuirzBxu9HI359LP79RRuYy1t
cdd2mfl8RNqQEXJwiKjkiYd2DsMngj2Knk914kUm7jIbTcEWXLmw+MKX1NGTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTqZPZ4s+RpKXij
jPEPVgbB7NTKzDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80cUJCNUR2d21SREpaNnprOEtCUDVOZk4zdHRXaWFqSGhL
dDhoSnFZbWFxZS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNHFCQjVEdndtUkRKWjZ6azhLQlA1TmZOM3R0V2lhakho
S3Q4aEpxWW1hcWUvMC9FQTY0RjY3OEIzRTQ2OTI5NzhBMzhDRjEwRjU2MDZDMUVD
RDRDQUNDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItRpwwDQQCAAIwBwMF
ACgERMwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBWGMA0GCSqGSIb3DQEBCwUA
A4IBAQBoxDzNOf7UFPTqvtqaV/SInhvGxoYmHwzO47hTNfi9aFOf8dC0L9diI27t
0gHXAHsL6haOxxd0uab8abPKo/9X3naUsSeC7R/EdQT1xur0i4L5nxUs1x6pbla9
ux+Sr//t+Cjuf7GQaacR5DNj/Cg1nkuAQa16gol9pRZdvXHnMgtXBd8AEkuGzMIL
XCRzM1EFqZNv2SgTdHVU3fWvok+iXwbqF5sGbAfJNMLShGjYwMztKem91oXHKfME
/uUNINVz1L4vh81g21Hk+iEAb/8oSm1uFz7DcPDzU6PZjnajk8vm1h1Npp8iwkUO
m0qjRMF5qA8tSKFN915yas5ZzgqD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org