Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.cer
File:                     EF08A46E7F0139B6793DF7AE1772FEA66C73E614.cer (raw, json)
Hash identifier:          fOnkSKygp2syYwPjOfHdMzzLcceMNGjq5viLI4qaKrg=
Subject key identifier:   EF:08:A4:6E:7F:01:39:B6:79:3D:F7:AE:17:72:FE:A6:6C:73:E6:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13415DCB6AF9250556966A2D2B826417AEB61092
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Nov 2023 02:21:17 +0000
Certificate not after:    Sat 02 Nov 2024 02:26:17 +0000
Subordinate resources:    AS: 262727
                          IP: 186.192.64.0/20
                          IP: 187.85.48.0/21
                          IP: 189.113.56.0/21
                          IP: 2804:a1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:41:5d:cb:6a:f9:25:05:56:96:6a:2d:2b:82:64:17:ae:b6:10:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  4 02:21:17 2023 GMT
            Not After : Nov  2 02:26:17 2024 GMT
        Subject: CN=EF08A46E7F0139B6793DF7AE1772FEA66C73E614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:2e:fa:80:ec:ea:53:8b:c3:46:8f:1d:73:
                    01:e0:d4:0b:55:96:d5:f0:54:73:cd:bf:06:af:cc:
                    40:13:d2:2c:8e:e4:92:ef:b3:c8:0f:18:35:ef:23:
                    ee:a4:23:7b:ff:f1:61:6e:6c:5a:85:81:a2:4c:29:
                    00:5c:ab:c2:e3:fa:45:7f:d8:89:73:79:7c:7a:11:
                    a3:19:5f:7b:bf:86:0e:71:6e:8e:eb:af:c8:a8:28:
                    c8:0e:0f:59:1a:16:ef:27:90:62:d1:ef:81:71:79:
                    60:6b:2d:c8:75:4e:09:21:85:ce:62:c0:69:cc:10:
                    99:a6:8a:dd:5a:f9:83:36:69:21:82:43:90:99:21:
                    0d:11:ae:07:df:e0:04:78:7d:a8:37:0f:a6:75:f4:
                    46:f0:e7:54:4a:50:d4:cb:4d:11:51:91:0f:34:e1:
                    a6:70:56:30:b8:75:ed:89:10:e8:ca:c1:76:f7:8d:
                    9c:fd:75:08:75:42:7f:6d:1e:bb:13:7a:12:8a:db:
                    e0:3f:22:c4:99:ce:4b:3a:be:36:91:9c:1f:fc:23:
                    62:46:39:eb:37:1b:a4:ff:17:66:92:1b:f6:7a:f0:
                    c7:9a:83:bf:1d:a5:ea:af:bd:50:db:e9:1e:5d:c0:
                    6c:a9:8e:99:04:51:f7:16:28:e5:1f:b1:c2:c1:69:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:08:A4:6E:7F:01:39:B6:79:3D:F7:AE:17:72:FE:A6:6C:73:E6:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.64.0/20
                  187.85.48.0/21
                  189.113.56.0/21
                IPv6:
                  2804:a1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262727

    Signature Algorithm: sha256WithRSAEncryption
         91:1a:e0:85:30:ca:53:6a:6d:ce:40:44:d1:62:68:b1:8a:3b:
         45:01:b4:96:47:ad:66:ba:a9:d1:d8:ab:8e:f9:23:15:a9:8a:
         e0:1f:3b:e8:f1:ff:df:02:88:68:b1:45:bb:d5:96:6a:bd:fd:
         48:e4:ca:42:be:23:d2:5c:04:ec:92:1b:47:ea:61:c1:d4:7f:
         d1:33:0a:2f:17:7b:6f:85:4f:54:4e:93:90:45:2b:79:f6:75:
         d9:e0:fe:2f:43:45:64:03:e7:b5:1e:f8:83:90:d4:47:08:12:
         a9:02:05:48:d7:e4:3f:38:2b:85:f0:90:d9:8d:7f:2e:70:22:
         06:df:f0:b4:88:9e:bc:28:b2:18:f2:72:1d:1a:b4:b3:cf:60:
         5b:36:97:ca:3c:13:df:d1:63:3b:7e:76:cf:8f:2c:d6:9d:72:
         56:7c:7b:5c:c1:84:5d:c1:7e:e6:4f:37:b9:97:46:75:15:9c:
         95:22:17:f4:ab:b7:25:1e:60:cb:7a:e3:22:25:5d:84:35:ce:
         a3:e0:f5:66:15:9e:03:5b:75:17:5a:39:81:31:ba:ed:cb:5f:
         2c:9a:31:59:91:5a:62:bf:66:08:d1:19:fe:7c:f7:fe:94:da:
         94:dc:58:3c:45:4e:a0:04:1c:3b:fc:a4:e9:c0:20:08:6c:16:
         52:ed:8d:74
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUE0Fdy2r5JQVWlmotK4JkF662EJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDQwMjIxMTdaFw0yNDExMDIwMjI2MTdaMDMxMTAvBgNV
BAMTKEVGMDhBNDZFN0YwMTM5QjY3OTNERjdBRTE3NzJGRUE2NkM3M0U2MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXS76gOzqU4vDRo8dcwHg1AtV
ltXwVHPNvwavzEAT0iyO5JLvs8gPGDXvI+6kI3v/8WFubFqFgaJMKQBcq8Lj+kV/
2IlzeXx6EaMZX3u/hg5xbo7rr8ioKMgOD1kaFu8nkGLR74FxeWBrLch1Tgkhhc5i
wGnMEJmmit1a+YM2aSGCQ5CZIQ0Rrgff4AR4fag3D6Z19Ebw51RKUNTLTRFRkQ80
4aZwVjC4de2JEOjKwXb3jZz9dQh1Qn9tHrsTehKK2+A/IsSZzks6vjaRnB/8I2JG
Oes3G6T/F2aSG/Z68Meag78dpeqvvVDb6R5dwGypjpkEUfcWKOUfscLBaQ67AgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvCKRufwE5tnk9
964Xcv6mbHPmFDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GQjNXWDRhQ21MckJoaFF0VEZDVUc3ZDYzanBWa29YNEZr
RERuZ0xLb3JnVC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRkIzV1g0YUNtTHJCaGhRdFRGQ1VHN2Q2M2pwVmtvWDRG
a0REbmdMS29yZ1QvMC9FRjA4QTQ2RTdGMDEzOUI2NzkzREY3QUUxNzcyRkVBNjZD
NzNFNjE0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAS6wEADBAO7VTADBAO9
cTgwDQQCAAIwBwMFACgEChwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAJHMA0G
CSqGSIb3DQEBCwUAA4IBAQCRGuCFMMpTam3OQETRYmixijtFAbSWR61muqnR2KuO
+SMVqYrgHzvo8f/fAohosUW71ZZqvf1I5MpCviPSXATskhtH6mHB1H/RMwovF3tv
hU9UTpOQRSt59nXZ4P4vQ0VkA+e1HviDkNRHCBKpAgVI1+Q/OCuF8JDZjX8ucCIG
3/C0iJ68KLIY8nIdGrSzz2BbNpfKPBPf0WM7fnbPjyzWnXJWfHtcwYRdwX7mTze5
l0Z1FZyVIhf0q7clHmDLeuMiJV2ENc6j4PVmFZ4DW3UXWjmBMbrty18smjFZkVpi
v2YI0Rn+fPf+lNqU3Fg8RU6gBBw7/KTpwCAIbBZS7Y10
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org