Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC8E825704DC36D758198B053349A86E154114C9.cer
File:                     EC8E825704DC36D758198B053349A86E154114C9.cer (raw, json)
Hash identifier:          k2cFT7GChBe80QTmsaVvuN2UGzGbjZjB7GvoL6gUZs8=
Subject key identifier:   EC:8E:82:57:04:DC:36:D7:58:19:8B:05:33:49:A8:6E:15:41:14:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       707D6E81F00A5B1A77FE55B8E26FA9A69DEE5D70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/EC8E825704DC36D758198B053349A86E154114C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 17:43:03 +0000
Certificate not after:    Thu 13 Feb 2025 17:48:03 +0000
Subordinate resources:    AS: 268713
                          IP: 45.170.24.0/22
                          IP: 2804:599c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7d:6e:81:f0:0a:5b:1a:77:fe:55:b8:e2:6f:a9:a6:9d:ee:5d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 17:43:03 2024 GMT
            Not After : Feb 13 17:48:03 2025 GMT
        Subject: CN=EC8E825704DC36D758198B053349A86E154114C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:89:d5:95:6d:11:63:59:5c:78:fd:3f:70:
                    24:f6:55:2e:d0:9d:19:a4:4f:00:aa:f3:4f:96:05:
                    23:82:8f:7b:0e:2d:60:49:f2:bd:89:65:cf:25:6d:
                    3b:6c:ab:06:4c:d6:3f:9b:42:4d:ad:e8:54:74:54:
                    4e:f4:f6:16:b2:1b:26:14:2f:fd:24:6a:cc:35:bb:
                    2d:93:9d:f6:b7:dc:98:40:d2:1b:70:f6:88:16:66:
                    56:c9:92:0f:37:d1:78:75:f6:f0:75:a5:67:16:85:
                    e7:a1:8c:2b:60:e8:9b:ba:15:9b:30:6a:48:ad:a0:
                    d8:66:8e:3e:ed:f4:a9:56:48:ce:77:51:7e:17:55:
                    25:29:40:d2:a8:1a:13:94:a2:2f:30:7f:a4:32:ee:
                    10:3a:e7:3c:c0:e0:2c:8b:cd:3c:71:f0:cd:45:bf:
                    28:4f:d6:02:7b:07:94:3a:5e:13:00:9a:61:67:af:
                    5e:c8:d2:1e:09:32:13:f1:1b:98:c0:2a:47:28:34:
                    58:c9:62:1f:03:92:6f:a0:03:00:de:a8:af:f5:9a:
                    c4:14:78:26:eb:7f:90:5f:1b:5f:a4:cc:2d:09:3a:
                    3f:4b:0f:6f:5a:d9:cf:d4:45:e6:17:e8:29:ea:53:
                    2b:1b:70:4c:11:54:48:cb:38:99:e0:26:c9:3b:02:
                    fa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:8E:82:57:04:DC:36:D7:58:19:8B:05:33:49:A8:6E:15:41:14:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/EC8E825704DC36D758198B053349A86E154114C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.24.0/22
                IPv6:
                  2804:599c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268713

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:ae:3a:1f:a4:c0:a7:b2:8f:4c:35:24:5d:dc:69:4c:b4:
         18:6f:ce:ac:d2:36:cd:d2:a9:0c:05:60:7a:2c:6e:c0:f4:c1:
         27:3a:01:43:70:20:24:da:cb:86:09:50:c1:c3:f7:f3:77:54:
         51:c8:95:75:5a:6a:4e:a4:9f:af:bf:a4:be:c7:8b:fa:6a:7e:
         9b:19:a6:ff:3d:0f:d6:3c:98:1c:4e:bd:f9:87:84:15:d3:cb:
         67:29:45:be:6e:bf:69:d8:03:34:0c:99:9c:21:45:7b:96:0b:
         a5:47:8d:8e:d3:1d:26:62:39:dc:32:fa:fb:ad:71:47:2f:5a:
         3d:59:ba:73:83:01:f8:01:14:96:ae:5c:f1:13:7b:3c:8f:e4:
         48:d5:71:29:cd:57:29:10:c2:3a:3a:49:05:69:17:78:c0:b9:
         1d:05:1a:e2:cf:6e:bd:b5:ec:08:77:e2:7b:1e:bc:1f:62:5d:
         9f:a0:55:39:1b:cb:8c:89:89:5e:13:9e:db:d5:2c:d5:b3:20:
         ba:4b:a8:f5:1a:d8:60:43:a9:64:f8:ab:35:b4:8c:81:fd:f3:
         1f:3a:d3:08:61:a0:4e:89:4b:be:ad:53:2c:c2:94:0f:f6:e0:
         97:9e:06:1a:f8:7c:b7:b9:1f:a4:52:e7:68:06:19:50:21:ca:
         d4:62:52:5d
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUcH1ugfAKWxp3/lW44m+ppp3uXXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxNzQzMDNaFw0yNTAyMTMxNzQ4MDNaMDMxMTAvBgNV
BAMTKEVDOEU4MjU3MDREQzM2RDc1ODE5OEIwNTMzNDlBODZFMTU0MTE0QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjInVlW0RY1lceP0/cCT2VS7Q
nRmkTwCq80+WBSOCj3sOLWBJ8r2JZc8lbTtsqwZM1j+bQk2t6FR0VE709hayGyYU
L/0kasw1uy2Tnfa33JhA0htw9ogWZlbJkg830Xh19vB1pWcWheehjCtg6Ju6FZsw
akitoNhmjj7t9KlWSM53UX4XVSUpQNKoGhOUoi8wf6Qy7hA65zzA4CyLzTxx8M1F
vyhP1gJ7B5Q6XhMAmmFnr17I0h4JMhPxG5jAKkcoNFjJYh8Dkm+gAwDeqK/1msQU
eCbrf5BfG1+kzC0JOj9LD29a2c/UReYX6CnqUysbcEwRVEjLOJngJsk7AvqjAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsjoJXBNw211gZ
iwUzSahuFUEUyTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83U05tMTNCRnR2dDNEWmRLcnBvVkxFeTNRVnB1dzVnZkQ3
SDdId3FwYVhINy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN1NObTEzQkZ0dnQzRFpkS3Jwb1ZMRXkzUVZwdXc1Z2ZE
N0g3SHdxcGFYSDcvMC9FQzhFODI1NzA0REMzNkQ3NTgxOThCMDUzMzQ5QTg2RTE1
NDExNEM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqhgwDQQCAAIwBwMF
ACgEWZwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBmpMA0GCSqGSIb3DQEBCwUA
A4IBAQArZa46H6TAp7KPTDUkXdxpTLQYb86s0jbN0qkMBWB6LG7A9MEnOgFDcCAk
2suGCVDBw/fzd1RRyJV1WmpOpJ+vv6S+x4v6an6bGab/PQ/WPJgcTr35h4QV08tn
KUW+br9p2AM0DJmcIUV7lgulR42O0x0mYjncMvr7rXFHL1o9WbpzgwH4ARSWrlzx
E3s8j+RI1XEpzVcpEMI6OkkFaRd4wLkdBRriz269tewId+J7HrwfYl2foFU5G8uM
iYleE57b1SzVsyC6S6j1GthgQ6lk+Ks1tIyB/fMfOtMIYaBOiUu+rVMswpQP9uCX
ngYa+Hy3uR+kUudoBhlQIcrUYlJd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org