Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ED89FD6E865685931657B0892F478053FF0ED7D2.cer
File:                     ED89FD6E865685931657B0892F478053FF0ED7D2.cer (raw, json)
Hash identifier:          yQWTJodhxeDnFKKc77ANTti6RWF7gDETcSy5/8ToANo=
Subject key identifier:   ED:89:FD:6E:86:56:85:93:16:57:B0:89:2F:47:80:53:FF:0E:D7:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5234F4F90AE68F7F5AFAE03C4CBBD82A05A554BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/ED89FD6E865685931657B0892F478053FF0ED7D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jan 2024 15:13:50 +0000
Certificate not after:    Wed 01 Jan 2025 15:18:50 +0000
Subordinate resources:    AS: 267456
                          IP: 181.191.240.0/22
                          IP: 2804:41c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:34:f4:f9:0a:e6:8f:7f:5a:fa:e0:3c:4c:bb:d8:2a:05:a5:54:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 15:13:50 2024 GMT
            Not After : Jan  1 15:18:50 2025 GMT
        Subject: CN=ED89FD6E865685931657B0892F478053FF0ED7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:22:8d:56:f9:a8:d1:88:66:35:07:e2:f2:
                    51:92:a8:d3:4f:d5:6b:a4:91:ca:7a:62:48:84:3b:
                    6e:ba:be:27:f8:0b:3f:60:f9:fa:6f:67:4c:c9:33:
                    07:0d:4f:79:9c:58:95:07:eb:0e:f1:41:e4:da:c4:
                    83:62:56:01:9f:29:9f:1c:4f:dc:cf:06:9b:8f:d7:
                    b9:a7:e7:cd:1f:1a:ce:33:6f:60:50:24:65:dd:8d:
                    9b:19:c0:19:52:45:b8:e9:a0:fc:c2:25:00:13:d3:
                    0b:ea:a2:13:37:c3:75:bd:6d:b1:bf:4e:52:55:93:
                    03:17:40:63:fa:2e:54:ee:81:63:7c:b5:33:2a:20:
                    ee:a5:f6:ab:6e:6d:5c:61:8a:41:56:f2:e8:7b:19:
                    d4:8b:ae:4f:bd:fe:96:3a:d8:6a:46:e6:86:33:d3:
                    db:f7:58:a8:25:6f:7b:cc:3a:ad:44:ee:9a:d9:66:
                    6e:23:48:05:d7:94:b6:21:9a:f6:eb:15:31:2b:c6:
                    23:ea:f4:41:c6:f9:5d:1f:b0:79:6b:9a:93:8b:36:
                    c2:37:36:f7:a3:8a:7a:b4:9e:fe:01:a7:03:be:fd:
                    ef:5c:8e:a2:3b:75:53:5f:a4:c4:00:19:af:30:37:
                    24:70:9f:50:28:6e:aa:57:e9:6d:28:e6:25:32:c7:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:89:FD:6E:86:56:85:93:16:57:B0:89:2F:47:80:53:FF:0E:D7:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/ED89FD6E865685931657B0892F478053FF0ED7D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.240.0/22
                IPv6:
                  2804:41c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267456

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:ba:ab:7f:bb:80:be:b0:60:0e:22:f3:71:6c:7a:ea:84:
         eb:ad:7c:ba:67:1b:40:f6:38:59:78:87:96:11:b9:9d:6a:c7:
         c8:64:a8:f3:43:3b:fc:f9:d4:a0:26:e2:ec:36:b9:4b:e4:4d:
         94:31:a8:da:fb:82:7f:8c:c3:ae:3b:a8:b8:35:45:5a:91:cb:
         c1:2c:12:c5:61:54:d2:e7:83:17:e8:05:e0:ed:28:10:03:1d:
         9f:b0:67:a8:2c:8a:76:29:f3:bd:02:ae:c0:d2:b6:6f:80:bb:
         a5:81:28:22:b5:cb:90:c8:bb:f4:0c:21:8c:79:95:5e:9e:e8:
         2a:73:95:e8:dd:91:10:bc:f4:ca:12:c1:27:b2:b5:c6:41:9a:
         c9:28:d5:be:8a:35:05:fe:05:12:7f:b6:b3:3c:98:97:a1:c6:
         06:8f:2e:46:7c:fc:4e:9a:cf:52:5f:c0:60:7a:2c:c9:44:30:
         e1:00:8a:8b:3c:c2:07:f7:3b:bf:fb:90:f6:c9:2f:c2:2c:05:
         98:4e:67:7b:c9:a8:59:81:6b:ce:7d:00:75:24:df:ca:0f:3b:
         04:0d:8a:a9:59:70:1f:63:be:5e:f1:24:ac:ab:e2:d0:21:b8:
         9f:76:4e:3c:cc:76:2b:44:d1:46:f8:37:2c:02:d1:9e:b7:21:
         70:10:54:15
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUUjT0+Qrmj39a+uA8TLvYKgWlVLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDMxNTEzNTBaFw0yNTAxMDExNTE4NTBaMDMxMTAvBgNV
BAMTKEVEODlGRDZFODY1Njg1OTMxNjU3QjA4OTJGNDc4MDUzRkYwRUQ3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGiKNVvmo0YhmNQfi8lGSqNNP
1Wukkcp6YkiEO266vif4Cz9g+fpvZ0zJMwcNT3mcWJUH6w7xQeTaxINiVgGfKZ8c
T9zPBpuP17mn580fGs4zb2BQJGXdjZsZwBlSRbjpoPzCJQAT0wvqohM3w3W9bbG/
TlJVkwMXQGP6LlTugWN8tTMqIO6l9qtubVxhikFW8uh7GdSLrk+9/pY62GpG5oYz
09v3WKglb3vMOq1E7prZZm4jSAXXlLYhmvbrFTErxiPq9EHG+V0fsHlrmpOLNsI3
Nvejinq0nv4BpwO+/e9cjqI7dVNfpMQAGa8wNyRwn1AobqpX6W0o5iUyx2L/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtif1uhlaFkxZX
sIkvR4BT/w7X0jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85dUJkYjV4OEVhalFUOUxOYTF5R3gxSmY1azNuNnZ6YjVu
UFk5b3dwMXNlQi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOXVCZGI1eDhFYWpRVDlMTmExeUd4MUpmNWszbjZ2emI1
blBZOW93cDFzZUIvMC9FRDg5RkQ2RTg2NTY4NTkzMTY1N0IwODkyRjQ3ODA1M0ZG
MEVEN0QyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK1v/AwDQQCAAIwBwMF
ACgEQcgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBTAMA0GCSqGSIb3DQEBCwUA
A4IBAQATrrqrf7uAvrBgDiLzcWx66oTrrXy6ZxtA9jhZeIeWEbmdasfIZKjzQzv8
+dSgJuLsNrlL5E2UMaja+4J/jMOuO6i4NUVakcvBLBLFYVTS54MX6AXg7SgQAx2f
sGeoLIp2KfO9Aq7A0rZvgLulgSgitcuQyLv0DCGMeZVenugqc5Xo3ZEQvPTKEsEn
srXGQZrJKNW+ijUF/gUSf7azPJiXocYGjy5GfPxOms9SX8BgeizJRDDhAIqLPMIH
9zu/+5D2yS/CLAWYTmd7yahZgWvOfQB1JN/KDzsEDYqpWXAfY75e8SSsq+LQIbif
dk48zHYrRNFG+DcsAtGetyFwEFQV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org