Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.cer
File:                     ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.cer (raw, json)
Hash identifier:          ky4IUj9oMvyeXK5Ol8qdjX4rWCG72ztq2NlFZOZZq94=
Subject key identifier:   ED:5A:DF:FB:66:DF:38:95:99:7A:E1:17:26:37:A6:A3:AF:F7:69:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       072C6BBB75BB404A19858A0B9EDE84EC750A36DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 16:34:23 +0000
Certificate not after:    Mon 17 Mar 2025 16:39:23 +0000
Subordinate resources:    AS: 268222
                          IP: 45.236.20.0/22
                          IP: 2804:4dd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2c:6b:bb:75:bb:40:4a:19:85:8a:0b:9e:de:84:ec:75:0a:36:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 16:34:23 2024 GMT
            Not After : Mar 17 16:39:23 2025 GMT
        Subject: CN=ED5ADFFB66DF3895997AE1172637A6A3AFF769C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:45:b4:d7:13:83:6b:ac:3a:ec:69:16:db:
                    b3:22:8e:ce:d7:41:16:02:49:0a:94:ed:13:b4:d3:
                    2c:4e:94:f0:52:93:0a:33:d1:35:89:ab:ad:bb:a1:
                    d7:05:af:64:06:85:78:4f:2a:c2:9d:05:60:5e:5f:
                    2c:f9:b2:59:65:c9:9a:7a:42:01:33:22:71:ad:b4:
                    51:e7:6e:bb:06:25:10:43:b1:f3:7b:70:64:a0:62:
                    7e:bf:3f:60:9f:7e:23:e0:a6:c0:fa:2f:0e:73:4f:
                    53:69:01:f4:22:c8:9f:44:ea:77:41:a4:e8:da:d6:
                    67:5a:ed:65:d7:4d:8f:c1:ae:60:c9:ae:9b:3c:b1:
                    a1:67:15:c7:89:4a:52:5e:dc:2a:04:46:65:0a:3d:
                    29:bd:cc:f4:25:68:22:24:dd:9f:ac:c9:dd:9b:72:
                    d7:2b:5c:65:f0:78:29:bf:bc:d8:16:7f:bf:4a:1a:
                    22:d8:68:3b:4e:51:be:b3:8e:01:9e:9b:31:a4:d1:
                    b7:f3:91:43:c6:98:5b:de:49:95:87:0e:de:30:15:
                    af:8f:fe:d0:c9:f2:e3:00:34:d8:a1:80:3f:d3:62:
                    7b:0e:4c:9b:e2:fd:92:da:c8:46:c9:9c:47:59:17:
                    b3:f0:fe:57:ac:34:08:a0:15:9e:9b:b5:13:a0:a2:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:5A:DF:FB:66:DF:38:95:99:7A:E1:17:26:37:A6:A3:AF:F7:69:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.20.0/22
                IPv6:
                  2804:4dd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268222

    Signature Algorithm: sha256WithRSAEncryption
         ad:3a:f4:9a:fb:c7:b1:fa:4b:11:2e:1c:df:e6:12:42:85:55:
         cb:cc:0b:2a:ba:f7:c0:bf:15:bd:ec:85:50:ad:8f:eb:7c:b1:
         3c:d8:3e:45:41:7d:19:a7:7d:5e:88:19:b9:8b:d8:c8:08:1d:
         88:db:a0:9d:0d:aa:70:39:fb:9c:e7:df:b9:22:b0:3c:45:f1:
         78:28:9c:b6:3e:4f:97:1d:e9:f7:a3:72:bc:74:1b:80:da:8c:
         5c:26:0b:41:be:4d:19:c6:25:87:61:97:86:1c:96:5a:29:cd:
         ab:01:78:96:b5:53:94:cb:a2:19:bc:ed:64:36:1f:04:a4:5c:
         e7:55:7d:30:37:ed:79:ef:e3:00:a0:1b:a6:85:8d:8e:7e:e7:
         4e:cf:c8:a5:8d:23:10:08:9d:5c:61:2a:aa:72:4d:d6:f8:06:
         74:8d:97:6d:ed:75:e6:ca:72:29:b7:ed:7d:9b:00:83:64:a2:
         c1:c8:68:d9:e4:ea:b1:42:5a:68:e9:a1:f1:75:1d:82:95:d0:
         00:f2:cb:50:7d:8c:c4:f8:a9:25:95:03:59:65:0f:6c:3f:3a:
         99:7b:a9:33:7c:21:ab:c1:96:64:5b:31:c9:ad:a3:c7:b7:eb:
         05:f1:64:55:0e:da:3f:42:37:72:38:60:75:92:13:fb:43:ca:
         d8:da:9e:0f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUByxru3W7QEoZhYoLnt6E7HUKNtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTgxNjM0MjNaFw0yNTAzMTcxNjM5MjNaMDMxMTAvBgNV
BAMTKEVENUFERkZCNjZERjM4OTU5OTdBRTExNzI2MzdBNkEzQUZGNzY5QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gEW01xODa6w67GkW27Mijs7X
QRYCSQqU7RO00yxOlPBSkwoz0TWJq627odcFr2QGhXhPKsKdBWBeXyz5slllyZp6
QgEzInGttFHnbrsGJRBDsfN7cGSgYn6/P2CffiPgpsD6Lw5zT1NpAfQiyJ9E6ndB
pOja1mda7WXXTY/BrmDJrps8saFnFceJSlJe3CoERmUKPSm9zPQlaCIk3Z+syd2b
ctcrXGXweCm/vNgWf79KGiLYaDtOUb6zjgGemzGk0bfzkUPGmFveSZWHDt4wFa+P
/tDJ8uMANNihgD/TYnsOTJvi/ZLayEbJnEdZF7Pw/lesNAigFZ6btROgogYVAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtWt/7Zt84lZl6
4RcmN6ajr/dpyTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zeEV6SGhuQVplYWR6UjhrWWZWc0dtVlp0ZlhLVnBHUVJk
TllkVDdYRGpSSy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FS
ZE5ZZFQ3WERqUksvMC9FRDVBREZGQjY2REYzODk1OTk3QUUxMTcyNjM3QTZBM0FG
Rjc2OUM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7BQwDQQCAAIwBwMF
ACgETdQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBe+MA0GCSqGSIb3DQEBCwUA
A4IBAQCtOvSa+8ex+ksRLhzf5hJChVXLzAsquvfAvxW97IVQrY/rfLE82D5FQX0Z
p31eiBm5i9jICB2I26CdDapwOfuc59+5IrA8RfF4KJy2Pk+XHen3o3K8dBuA2oxc
JgtBvk0ZxiWHYZeGHJZaKc2rAXiWtVOUy6IZvO1kNh8EpFznVX0wN+157+MAoBum
hY2OfudOz8iljSMQCJ1cYSqqck3W+AZ0jZdt7XXmynIpt+19mwCDZKLByGjZ5Oqx
Qlpo6aHxdR2CldAA8stQfYzE+KkllQNZZQ9sPzqZe6kzfCGrwZZkWzHJraPHt+sF
8WRVDto/QjdyOGB1khP7Q8rY2p4P
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org