Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB2BAAA94FCCDE9657A9B0F67FA7797E0427580B.cer
File:                     EB2BAAA94FCCDE9657A9B0F67FA7797E0427580B.cer (raw, json)
Hash identifier:          XrUlGDRXkxyU+WCTw5R8MCiVjCiDjlTguvGvlQFUYtw=
Subject key identifier:   EB:2B:AA:A9:4F:CC:DE:96:57:A9:B0:F6:7F:A7:79:7E:04:27:58:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FB5A70C553F4139956543D4780712EF02ABACCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/EB2BAAA94FCCDE9657A9B0F67FA7797E0427580B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Dec 2023 20:13:51 +0000
Certificate not after:    Sat 28 Dec 2024 20:18:51 +0000
Subordinate resources:    AS: 270329
                          IP: 201.216.108.0/22
                          IP: 2804:6a54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b5:a7:0c:55:3f:41:39:95:65:43:d4:78:07:12:ef:02:ab:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 30 20:13:51 2023 GMT
            Not After : Dec 28 20:18:51 2024 GMT
        Subject: CN=EB2BAAA94FCCDE9657A9B0F67FA7797E0427580B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:54:1f:55:91:fd:be:c0:af:67:10:e7:73:
                    b5:f6:72:86:f6:51:27:e0:7c:47:ca:1f:b4:13:f2:
                    ce:31:59:d0:06:8b:84:36:aa:fd:b9:4c:b9:d8:94:
                    e0:18:db:40:a6:ed:93:a4:9a:16:03:6b:df:a4:e5:
                    4a:3f:5d:1c:97:ab:f3:4f:13:43:91:32:7d:9e:43:
                    d2:2d:4f:a9:3f:54:d9:d8:ce:bf:3c:8f:53:d8:73:
                    ee:53:39:42:af:26:8c:e5:46:0e:01:71:28:32:da:
                    a5:22:ae:84:be:5e:13:08:3f:7a:9b:29:c7:a1:61:
                    d0:e1:10:56:51:89:50:8a:23:92:e2:0e:71:f8:e3:
                    b5:92:cb:c0:38:95:c8:c7:a6:ba:e0:7a:be:40:51:
                    74:2b:51:58:e5:ff:c8:9c:00:02:7e:41:52:40:97:
                    4f:df:6a:ff:14:8a:b0:ed:d3:d3:5e:a7:ff:79:1b:
                    f2:fe:eb:72:ee:6d:9a:b9:89:7b:9f:2f:61:53:dc:
                    64:bf:ed:eb:ac:fb:63:3b:41:2a:11:eb:38:c9:cd:
                    57:fb:ff:2f:a0:85:8e:b8:d8:d2:ac:39:1c:e7:aa:
                    11:dc:96:c9:6b:ac:8a:e8:15:68:73:51:cf:4f:21:
                    c8:db:59:83:54:c1:d6:35:17:43:19:41:eb:61:0a:
                    66:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:2B:AA:A9:4F:CC:DE:96:57:A9:B0:F6:7F:A7:79:7E:04:27:58:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/EB2BAAA94FCCDE9657A9B0F67FA7797E0427580B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.108.0/22
                IPv6:
                  2804:6a54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270329

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:dd:3c:8d:93:47:0b:35:24:44:0b:89:a0:74:28:60:84:
         d4:df:e1:fd:d0:54:da:07:06:c8:74:b3:03:a1:0c:8c:a9:97:
         d7:fb:dc:1f:55:b5:ff:27:6d:dd:9d:1d:3c:02:cb:dc:e3:61:
         61:67:b2:75:3f:55:f1:5e:c7:d1:d4:81:48:4f:55:46:1a:ed:
         d5:65:a2:97:36:6a:02:4f:77:0c:57:b1:62:f8:47:dd:2d:34:
         09:be:6e:a3:9b:7e:24:58:c0:ec:63:e6:53:7e:62:8a:68:07:
         7b:6f:8d:a2:a9:50:f0:5d:90:e9:d0:89:cb:e1:22:25:3e:66:
         b1:cb:f7:51:f0:b5:bd:3a:51:f1:57:a1:a8:4c:b1:bd:13:b3:
         16:9d:88:13:36:47:04:6c:a7:9c:62:1f:84:ed:41:1c:67:09:
         c3:b7:7e:b6:86:e8:d7:65:a3:04:ff:78:d6:14:8c:a5:15:43:
         e5:fb:4b:ad:d1:94:a0:cb:03:db:21:0b:55:24:35:cb:38:19:
         75:39:b2:67:98:de:27:75:94:77:1a:00:59:1a:dd:0d:9f:a9:
         00:e1:3f:69:ea:71:e2:54:02:fb:1b:25:0a:79:41:3f:38:0d:
         5b:b8:fe:0c:1e:70:8a:a6:11:12:6e:03:f9:f9:07:f9:df:6c:
         55:76:83:0d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUD7WnDFU/QTmVZUPUeAcS7wKrrMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMzAyMDEzNTFaFw0yNDEyMjgyMDE4NTFaMDMxMTAvBgNV
BAMTKEVCMkJBQUE5NEZDQ0RFOTY1N0E5QjBGNjdGQTc3OTdFMDQyNzU4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7s1QfVZH9vsCvZxDnc7X2cob2
USfgfEfKH7QT8s4xWdAGi4Q2qv25TLnYlOAY20Cm7ZOkmhYDa9+k5Uo/XRyXq/NP
E0ORMn2eQ9ItT6k/VNnYzr88j1PYc+5TOUKvJozlRg4BcSgy2qUiroS+XhMIP3qb
KcehYdDhEFZRiVCKI5LiDnH447WSy8A4lcjHprrger5AUXQrUVjl/8icAAJ+QVJA
l0/fav8UirDt09Nep/95G/L+63LubZq5iXufL2FT3GS/7eus+2M7QSoR6zjJzVf7
/y+ghY642NKsORznqhHclslrrIroFWhzUc9PIcjbWYNUwdY1F0MZQethCmZ5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrK6qpT8zellep
sPZ/p3l+BCdYCzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Fb2lWM3h1YkRHYWRWbWFCMXZTWnZCNk5aQ2NRekhISkJI
WlpRVmtBZGFmMS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Fb2lWM3h1YkRHYWRWbWFCMXZTWnZCNk5aQ2NRekhISkJI
WlpRVmtBZGFmMS8wL0VCMkJBQUE5NEZDQ0RFOTY1N0E5QjBGNjdGQTc3OTdFMDQy
NzU4MEIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsnYbDANBAIAAjAHAwUA
KARqVDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH/kwDQYJKoZIhvcNAQELBQAD
ggEBAA0i3TyNk0cLNSREC4mgdChghNTf4f3QVNoHBsh0swOhDIypl9f73B9Vtf8n
bd2dHTwCy9zjYWFnsnU/VfFex9HUgUhPVUYa7dVlopc2agJPdwxXsWL4R90tNAm+
bqObfiRYwOxj5lN+YopoB3tvjaKpUPBdkOnQicvhIiU+ZrHL91Hwtb06UfFXoahM
sb0TsxadiBM2RwRsp5xiH4TtQRxnCcO3fraG6NdlowT/eNYUjKUVQ+X7S63RlKDL
A9shC1UkNcs4GXU5smeY3id1lHcaAFka3Q2fqQDhP2nqceJUAvsbJQp5QT84DVu4
/gwecIqmERJuA/n5B/nfbFV2gw0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org