Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF2C32F6063E9D4EC4084756C20CF93271DDC5DA.cer
File:                     EF2C32F6063E9D4EC4084756C20CF93271DDC5DA.cer (raw, json)
Hash identifier:          gsIEOlO0Np0e/vjxaKmrgA5n57vYKEvL5p7MaIN78k0=
Subject key identifier:   EF:2C:32:F6:06:3E:9D:4E:C4:08:47:56:C2:0C:F9:32:71:DD:C5:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       058B1B11FD4CB11F2FE6BDF6D0D0A72216627A3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/0/EF2C32F6063E9D4EC4084756C20CF93271DDC5DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Mar 2023 21:39:29 +0000
Certificate not after:    Tue 05 Mar 2024 21:44:29 +0000
Subordinate resources:    AS: 271443
                          IP: 179.0.72.0/22
                          IP: 2804:7ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8b:1b:11:fd:4c:b1:1f:2f:e6:bd:f6:d0:d0:a7:22:16:62:7a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 21:39:29 2023 GMT
            Not After : Mar  5 21:44:29 2024 GMT
        Subject: CN=EF2C32F6063E9D4EC4084756C20CF93271DDC5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:87:3c:81:39:34:b3:56:05:42:bf:83:40:
                    96:c9:b9:ca:9d:90:b5:27:8b:a3:d4:43:0e:74:d6:
                    1f:9f:29:56:c3:d8:1f:d1:5c:50:72:5a:80:f4:18:
                    58:8b:8b:a9:df:4a:1c:f6:78:88:22:51:50:eb:52:
                    39:cb:da:2e:bb:f5:75:3f:2c:41:13:19:cc:9e:c8:
                    95:67:3d:54:9f:7d:7f:29:ad:1b:69:4c:1c:f8:16:
                    ec:b4:cd:1d:42:1f:7e:c6:16:49:1f:88:88:b1:3e:
                    59:75:12:98:05:0b:a5:ee:4a:13:a0:db:c1:a5:63:
                    48:6c:40:f0:82:b1:da:3c:5e:30:7c:12:1d:4f:bb:
                    fe:9a:76:aa:e8:7e:ea:51:1f:3e:84:25:d0:52:84:
                    2b:1d:4a:87:01:bc:41:4c:49:d3:7e:2b:ef:2e:d2:
                    db:6a:e5:9c:d4:89:f3:70:2e:c3:58:ff:ee:23:15:
                    46:da:03:db:e2:17:c3:84:c4:10:86:61:f0:16:9d:
                    09:70:25:19:76:5a:c7:a7:57:ea:37:4a:01:8b:40:
                    c2:e8:eb:17:92:b9:26:7b:98:1e:47:f9:23:16:c4:
                    11:e7:f2:79:fd:af:15:7b:ef:23:c7:ed:ba:5c:56:
                    ae:08:6e:3c:34:ac:12:96:78:aa:95:dc:a6:a6:91:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:2C:32:F6:06:3E:9D:4E:C4:08:47:56:C2:0C:F9:32:71:DD:C5:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/0/EF2C32F6063E9D4EC4084756C20CF93271DDC5DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22
                IPv6:
                  2804:7ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271443

    Signature Algorithm: sha256WithRSAEncryption
         b7:ae:9d:a3:60:28:a1:09:70:79:59:ee:ff:c6:a5:0e:42:6b:
         e4:e2:80:f8:65:eb:33:2b:78:fe:8d:40:39:2a:e2:aa:da:23:
         b5:db:73:16:6c:01:67:48:f6:4e:09:fb:70:0a:4f:b0:76:a6:
         5d:da:b9:25:68:d3:27:ea:24:82:fa:29:76:ed:f4:cf:ef:98:
         7e:a8:c9:74:eb:4d:98:40:bd:d2:1f:39:46:c7:54:e8:7b:50:
         93:7f:5e:19:1f:6b:80:ce:91:37:7d:8b:45:c4:c0:1d:60:b3:
         0c:32:a4:16:db:a8:56:5c:fd:8e:80:d1:a7:55:e9:5c:da:6b:
         58:66:bd:95:cd:38:da:39:59:13:14:83:af:db:ec:62:25:84:
         08:da:d3:4a:2d:9f:03:bf:1b:f4:49:4c:0b:66:ce:93:a1:12:
         86:0a:75:8d:11:39:a2:1f:65:65:b6:df:ef:d4:2c:79:84:a4:
         54:37:dc:47:fd:a9:f4:8c:31:f6:02:2f:f2:82:55:12:52:fe:
         e7:6e:36:58:8d:f4:d9:47:18:d8:15:2e:46:1e:08:89:9c:5f:
         e4:1d:f3:ce:17:b6:ac:59:83:f7:55:c1:09:0d:97:57:e0:a7:
         51:01:fd:61:b8:4e:a3:83:ca:6e:0d:e5:14:ea:0d:98:ce:7f:
         2b:0f:b6:cc
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUBYsbEf1MsR8v5r320NCnIhZiej8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDcyMTM5MjlaFw0yNDAzMDUyMTQ0MjlaMDMxMTAvBgNV
BAMTKEVGMkMzMkY2MDYzRTlENEVDNDA4NDc1NkMyMENGOTMyNzFEREM1REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNIc8gTk0s1YFQr+DQJbJucqd
kLUni6PUQw501h+fKVbD2B/RXFByWoD0GFiLi6nfShz2eIgiUVDrUjnL2i679XU/
LEETGcyeyJVnPVSffX8prRtpTBz4Fuy0zR1CH37GFkkfiIixPll1EpgFC6XuShOg
28GlY0hsQPCCsdo8XjB8Eh1Pu/6adqrofupRHz6EJdBShCsdSocBvEFMSdN+K+8u
0ttq5ZzUifNwLsNY/+4jFUbaA9viF8OExBCGYfAWnQlwJRl2WsenV+o3SgGLQMLo
6xeSuSZ7mB5H+SMWxBHn8nn9rxV77yPH7bpcVq4Ibjw0rBKWeKqV3KamkXPHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvLDL2Bj6dTsQI
R1bCDPkycd3F2jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TEZqeTI2NTJ2cFZCbTZvdXJDdENkWVNrckFjcFhNeGJG
NjZzYTJvZnJyOS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TEZqeTI2NTJ2cFZCbTZvdXJDdENkWVNrckFjcFhNeGJG
NjZzYTJvZnJyOS8wL0VGMkMzMkY2MDYzRTlENEVDNDA4NDc1NkMyMENGOTMyNzFE
REM1REEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArMASDANBAIAAjAHAwUA
KAR7oDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJFMwDQYJKoZIhvcNAQELBQAD
ggEBALeunaNgKKEJcHlZ7v/GpQ5Ca+TigPhl6zMreP6NQDkq4qraI7XbcxZsAWdI
9k4J+3AKT7B2pl3auSVo0yfqJIL6KXbt9M/vmH6oyXTrTZhAvdIfOUbHVOh7UJN/
Xhkfa4DOkTd9i0XEwB1gswwypBbbqFZc/Y6A0adV6Vzaa1hmvZXNONo5WRMUg6/b
7GIlhAja00otnwO/G/RJTAtmzpOhEoYKdY0ROaIfZWW23+/ULHmEpFQ33Ef9qfSM
MfYCL/KCVRJS/uduNliN9NlHGNgVLkYeCImcX+Qd884XtqxZg/dVwQkNl1fgp1EB
/WG4TqODym4N5RTqDZjOfysPtsw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org