Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.cer
File:                     EC875FA85A1BEAB5C7B068927C636B5908F78397.cer (raw, json)
Hash identifier:          dcMXfRWcb7MPLyqBpmq1zs5Prt5cPCZ8yfoIfwWQ19k=
Subject key identifier:   EC:87:5F:A8:5A:1B:EA:B5:C7:B0:68:92:7C:63:6B:59:08:F7:83:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       719B52745C3DCB2CFF93FC19904BD0A093A6AA91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Feb 2024 13:32:27 +0000
Certificate not after:    Sat 15 Feb 2025 13:37:27 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9b:52:74:5c:3d:cb:2c:ff:93:fc:19:90:4b:d0:a0:93:a6:aa:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 17 13:32:27 2024 GMT
            Not After : Feb 15 13:37:27 2025 GMT
        Subject: CN=EC875FA85A1BEAB5C7B068927C636B5908F78397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:1d:17:7e:b4:e4:71:b1:68:59:23:4a:45:
                    55:00:ca:f8:26:67:a2:bd:c0:0d:ac:46:55:16:63:
                    e6:f5:45:ea:bb:5b:d4:c9:84:e7:0f:3a:b4:e2:f1:
                    5e:ab:ad:06:a9:ae:38:e1:c7:ac:a5:86:d4:9f:be:
                    17:66:78:eb:c8:65:cc:e2:29:8e:96:69:15:98:ab:
                    c8:f2:20:83:68:f3:52:6d:1e:50:64:ca:fb:41:2d:
                    5a:f4:4d:1f:f3:7a:95:14:1f:df:f7:00:07:76:d2:
                    8e:ae:25:38:78:47:8e:75:a9:48:78:e0:a9:79:c9:
                    26:d6:ff:6e:1e:00:e2:4a:f1:ff:ed:4f:77:e8:7e:
                    9a:41:b6:3a:af:5f:62:48:5a:de:b4:fe:48:a0:f0:
                    ea:77:e5:85:84:dd:d8:fe:69:3c:0c:52:5d:0e:d8:
                    65:a8:80:be:fd:7c:56:ce:a5:45:1c:24:bf:c2:1b:
                    49:2e:e4:71:75:4a:f7:e8:0d:c9:ae:de:80:4b:9e:
                    83:30:27:d0:32:b0:3d:5b:3e:9b:08:3f:c7:3b:75:
                    5c:dd:4e:a7:0d:55:30:80:68:c0:de:7f:0d:30:62:
                    48:ca:0d:e3:cb:1a:9f:42:b0:a7:4a:65:7b:d7:ec:
                    df:eb:84:11:89:37:7a:16:35:e3:f5:be:f5:e3:fc:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:87:5F:A8:5A:1B:EA:B5:C7:B0:68:92:7C:63:6B:59:08:F7:83:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:6a:3c:18:43:46:90:ae:33:6d:b9:09:10:9e:53:e8:2d:
         ce:d4:4c:c6:17:ff:bf:1e:fb:72:c7:6b:45:3f:be:84:57:13:
         f8:0d:95:b8:cf:db:89:2b:c2:7e:b0:63:28:69:9e:7c:dd:8e:
         2a:77:31:ae:f5:46:76:fe:a2:44:7a:22:12:3f:94:01:3c:11:
         7e:04:71:8c:dc:72:22:98:88:16:b7:d9:f4:5d:ef:ba:67:3d:
         bb:51:24:2f:df:06:c2:7b:8d:9e:fb:59:b6:fc:3f:a7:05:0e:
         38:4e:e2:0c:2a:3b:1f:73:ed:78:72:43:d9:50:a7:42:93:36:
         c4:40:1b:80:6b:d4:75:96:4e:40:11:59:76:e9:02:e6:d8:07:
         1d:c0:01:45:5e:17:5e:7e:a5:03:0c:52:bb:d5:c0:12:b3:c5:
         88:1a:16:2d:16:c0:ba:8c:99:5a:e6:3c:17:c4:37:a2:d0:d8:
         4c:27:48:50:e4:bb:da:1e:f3:37:6c:90:2f:ef:17:66:f9:e3:
         7a:32:e4:91:ab:31:ff:f7:a9:8e:2b:10:3b:37:5f:5c:f6:36:
         85:97:58:2f:b0:90:27:f2:61:53:09:4c:6d:d4:e0:71:9a:6c:
         96:38:e2:6b:a9:cb:90:0e:dc:d0:69:61:f2:c2:c0:d8:31:d5:
         53:71:3f:26
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUcZtSdFw9yyz/k/wZkEvQoJOmqpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTcxMzMyMjdaFw0yNTAyMTUxMzM3MjdaMDMxMTAvBgNV
BAMTKEVDODc1RkE4NUExQkVBQjVDN0IwNjg5MjdDNjM2QjU5MDhGNzgzOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgR0XfrTkcbFoWSNKRVUAyvgm
Z6K9wA2sRlUWY+b1Req7W9TJhOcPOrTi8V6rrQaprjjhx6ylhtSfvhdmeOvIZczi
KY6WaRWYq8jyIINo81JtHlBkyvtBLVr0TR/zepUUH9/3AAd20o6uJTh4R451qUh4
4Kl5ySbW/24eAOJK8f/tT3fofppBtjqvX2JIWt60/kig8Op35YWE3dj+aTwMUl0O
2GWogL79fFbOpUUcJL/CG0ku5HF1SvfoDcmu3oBLnoMwJ9AysD1bPpsIP8c7dVzd
TqcNVTCAaMDefw0wYkjKDePLGp9CsKdKZXvX7N/rhBGJN3oWNeP1vvXj/Kr3AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsh1+oWhvqtcew
aJJ8Y2tZCPeDlzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EM3g0cHdyamtIdjgybTFneFRLbnB2OEo1eDRTQ0pmTWJV
S3lOV2lQZHhUZi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1i
VUt5TldpUGR4VGYvMC9FQzg3NUZBODVBMUJFQUI1QzdCMDY4OTI3QzYzNkI1OTA4
Rjc4Mzk3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxJ5wwDQQCAAIwBwMF
ACgEJZwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM4kMA0GCSqGSIb3DQEBCwUA
A4IBAQAbT2o8GENGkK4zbbkJEJ5T6C3O1EzGF/+/Hvtyx2tFP76EVxP4DZW4z9uJ
K8J+sGMoaZ583Y4qdzGu9UZ2/qJEeiISP5QBPBF+BHGM3HIimIgWt9n0Xe+6Zz27
USQv3wbCe42e+1m2/D+nBQ44TuIMKjsfc+14ckPZUKdCkzbEQBuAa9R1lk5AEVl2
6QLm2AcdwAFFXhdefqUDDFK71cASs8WIGhYtFsC6jJla5jwXxDei0NhMJ0hQ5Lva
HvM3bJAv7xdm+eN6MuSRqzH/96mOKxA7N19c9jaFl1gvsJAn8mFTCUxt1OBxmmyW
OOJrqcuQDtzQaWHywsDYMdVTcT8m
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org