Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.cer
File:                     EC5EEAF38312D35268F48831F09451672A6BE0DE.cer (raw, json)
Hash identifier:          Vird11HWKqnTo9s2fxg1ePhryhr1hE+556EzgOFaJeg=
Subject key identifier:   EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39F7B043C63815CCEB8AE59DB44B4E6523EC4BA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 18:35:08 +0000
Certificate not after:    Thu 27 Jun 2024 18:40:08 +0000
Subordinate resources:    AS: 267121
                          IP: 45.229.104.0/22
                          IP: 2804:4870::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f7:b0:43:c6:38:15:cc:eb:8a:e5:9d:b4:4b:4e:65:23:ec:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 18:35:08 2023 GMT
            Not After : Jun 27 18:40:08 2024 GMT
        Subject: CN=EC5EEAF38312D35268F48831F09451672A6BE0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:c1:a7:d1:79:17:e3:3b:41:76:2d:4f:11:
                    7c:11:db:43:8b:49:8f:f9:5f:ef:a2:f3:39:44:4d:
                    82:ea:cb:e7:57:18:3f:24:53:39:f3:c2:5e:ae:a8:
                    1a:53:d9:cd:06:55:a8:9c:99:5e:ae:5f:e5:82:51:
                    2f:cb:12:e2:46:47:77:dd:22:30:18:65:8e:36:3a:
                    e5:5b:56:b7:73:2d:eb:c4:37:c6:c1:09:c4:7a:a4:
                    3c:d6:6b:ed:25:a2:44:a4:f6:d4:9c:1d:9b:d8:71:
                    91:d1:62:89:9c:67:69:66:3e:50:bf:67:8a:e1:26:
                    21:62:1e:ab:cd:cb:46:4c:bd:07:62:07:62:b8:81:
                    2b:b2:98:88:8d:37:28:57:57:e1:09:c7:71:6c:1c:
                    0b:12:e1:6e:05:98:cc:6c:0c:85:55:a1:ec:94:ba:
                    0e:22:d9:4b:b1:8e:01:a5:ad:e0:95:19:cf:b0:86:
                    0c:b0:79:9f:c3:d4:c4:7b:f4:1c:63:5b:05:32:1d:
                    a4:4d:3f:36:15:61:2b:b4:91:f5:b1:10:14:35:65:
                    53:74:02:a6:f2:8a:c7:f6:a7:5a:7c:13:15:b5:e9:
                    d7:3d:cb:8c:2c:1d:4d:79:64:36:ca:af:37:e1:52:
                    b4:ea:a4:c1:2d:75:ae:5c:2c:b7:32:16:7e:58:bf:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:5E:EA:F3:83:12:D3:52:68:F4:88:31:F0:94:51:67:2A:6B:E0:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/0/EC5EEAF38312D35268F48831F09451672A6BE0DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.104.0/22
                IPv6:
                  2804:4870::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267121

    Signature Algorithm: sha256WithRSAEncryption
         b3:4b:cb:b8:c4:4c:c6:6f:e3:6b:f9:45:5e:b1:c0:15:b0:ce:
         3a:23:52:9f:80:cf:b8:19:58:31:cf:f2:89:e1:36:5f:3c:84:
         f4:51:45:40:fc:3d:21:ca:f7:3b:48:8f:48:ea:2b:b3:ca:c9:
         b5:90:fe:5c:38:05:e3:e9:cb:85:ed:8d:0c:2c:33:79:a9:01:
         9f:5e:7e:14:82:d9:df:8d:0f:9d:74:0a:d1:ed:95:d9:b0:d2:
         2b:41:64:c0:92:98:79:96:9a:44:f0:e2:e2:04:b4:d5:1f:7f:
         43:d6:37:85:2a:d5:77:fe:d4:79:43:3b:6f:0e:b6:08:b5:7c:
         c2:c0:5b:bb:11:bd:65:d8:d5:f2:6c:17:12:06:6d:80:5d:a2:
         f0:1d:7e:ec:d8:4a:8e:78:5a:fd:a9:f0:25:ce:1d:73:de:1d:
         23:a3:8e:08:60:5d:5a:a7:66:8f:a4:7c:d4:41:d1:f2:7e:e4:
         77:ab:07:82:26:f8:71:a1:d0:f8:ed:36:83:72:56:0c:84:39:
         5d:03:25:72:19:33:3d:2f:0d:e2:74:34:83:33:62:a1:62:d8:
         3e:1e:b5:2e:c9:a0:dd:c4:1f:c3:10:fe:2a:50:b9:82:c9:13:
         1e:77:51:49:a4:d1:74:48:61:bb:2b:1e:1b:e1:d4:60:04:d4:
         a3:4e:39:15
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUOfewQ8Y4FczriuWdtEtOZSPsS6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjkxODM1MDhaFw0yNDA2MjcxODQwMDhaMDMxMTAvBgNV
BAMTKEVDNUVFQUYzODMxMkQzNTI2OEY0ODgzMUYwOTQ1MTY3MkE2QkUwREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32cGn0XkX4ztBdi1PEXwR20OL
SY/5X++i8zlETYLqy+dXGD8kUznzwl6uqBpT2c0GVaicmV6uX+WCUS/LEuJGR3fd
IjAYZY42OuVbVrdzLevEN8bBCcR6pDzWa+0lokSk9tScHZvYcZHRYomcZ2lmPlC/
Z4rhJiFiHqvNy0ZMvQdiB2K4gSuymIiNNyhXV+EJx3FsHAsS4W4FmMxsDIVVoeyU
ug4i2UuxjgGlreCVGc+whgyweZ/D1MR79BxjWwUyHaRNPzYVYSu0kfWxEBQ1ZVN0
Aqbyisf2p1p8ExW16dc9y4wsHU15ZDbKrzfhUrTqpMEtda5cLLcyFn5Yv28JAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsXurzgxLTUmj0
iDHwlFFnKmvg3jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby96VGFteG1pSG1WZDNHYVcyQUsya2tvV2F5Q0g2ZVFTVzR0
RE1QUko1YTg3LzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby96VGFteG1pSG1WZDNHYVcyQUsya2tvV2F5Q0g2ZVFTVzR0
RE1QUko1YTg3LzAvRUM1RUVBRjM4MzEyRDM1MjY4RjQ4ODMxRjA5NDUxNjcyQTZC
RTBERS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeVoMA0EAgACMAcDBQAo
BEhwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQTcTANBgkqhkiG9w0BAQsFAAOC
AQEAs0vLuMRMxm/ja/lFXrHAFbDOOiNSn4DPuBlYMc/yieE2XzyE9FFFQPw9Icr3
O0iPSOors8rJtZD+XDgF4+nLhe2NDCwzeakBn15+FILZ340PnXQK0e2V2bDSK0Fk
wJKYeZaaRPDi4gS01R9/Q9Y3hSrVd/7UeUM7bw62CLV8wsBbuxG9ZdjV8mwXEgZt
gF2i8B1+7NhKjnha/anwJc4dc94dI6OOCGBdWqdmj6R81EHR8n7kd6sHgib4caHQ
+O02g3JWDIQ5XQMlchkzPS8N4nQ0gzNioWLYPh61Lsmg3cQfwxD+KlC5gskTHndR
SaTRdEhhuyseG+HUYATUo045FQ==
-----END CERTIFICATE-----