Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF3EB08479F25159A5015A0D061108118BC181EC.cer
File:                     EF3EB08479F25159A5015A0D061108118BC181EC.cer (raw, json)
Hash identifier:          xgmJM6trCEqC4EhOj4AULVuxIWpMJMq6exipkNGk8HQ=
Subject key identifier:   EF:3E:B0:84:79:F2:51:59:A5:01:5A:0D:06:11:08:11:8B:C1:81:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29BE90D6DC05396D4F9F941F98798F4FF9DA200D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/EF3EB08479F25159A5015A0D061108118BC181EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Sep 2023 18:43:33 +0000
Certificate not after:    Thu 26 Sep 2024 18:48:33 +0000
Subordinate resources:    AS: 266114
                          IP: 45.5.156.0/22
                          IP: 2804:3adc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:be:90:d6:dc:05:39:6d:4f:9f:94:1f:98:79:8f:4f:f9:da:20:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 28 18:43:33 2023 GMT
            Not After : Sep 26 18:48:33 2024 GMT
        Subject: CN=EF3EB08479F25159A5015A0D061108118BC181EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:40:cc:19:6e:a3:19:6b:6f:75:95:68:71:
                    3a:f5:fe:78:a5:5d:90:10:14:9e:e5:fc:e1:33:f9:
                    9e:ee:33:31:85:0c:37:e9:29:54:fb:cd:6d:24:72:
                    a2:38:c0:83:20:a0:b8:29:1d:7e:77:47:10:c5:24:
                    fd:90:fe:c8:5b:c7:6d:d1:50:3f:c1:fd:0f:2a:3d:
                    45:81:1b:af:b5:6f:db:5f:b0:d1:0e:85:a1:42:16:
                    56:7a:6b:a6:47:7d:b6:32:ac:76:33:0d:c6:b7:11:
                    6f:62:d4:89:a2:98:ea:1a:74:e4:21:71:70:27:82:
                    19:41:ae:dd:2d:13:d0:32:c4:c7:c9:c1:e0:f7:c1:
                    10:26:c9:ae:2b:26:57:52:44:69:37:92:29:da:de:
                    81:64:60:37:fe:35:54:ef:54:f7:f0:66:a4:8a:c3:
                    43:69:8a:56:72:64:4d:34:4b:4f:ff:a6:49:4e:ac:
                    14:66:c4:ef:d6:67:9a:5d:1c:ad:b7:8c:29:22:06:
                    70:ad:0e:37:1a:12:a7:69:5b:23:3d:6b:79:1f:78:
                    07:1b:33:67:53:4c:dc:54:7e:b6:77:e8:58:63:c0:
                    d5:47:bc:f3:69:da:1e:f4:4e:15:83:15:7c:a4:d8:
                    02:1e:ec:29:84:16:0b:75:77:47:8b:b3:8f:9a:9e:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:3E:B0:84:79:F2:51:59:A5:01:5A:0D:06:11:08:11:8B:C1:81:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/EF3EB08479F25159A5015A0D061108118BC181EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.156.0/22
                IPv6:
                  2804:3adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266114

    Signature Algorithm: sha256WithRSAEncryption
         29:05:27:59:2d:50:13:fa:e7:a1:b5:39:b0:ef:5c:3a:bb:b3:
         ec:24:79:8d:fe:a6:98:53:06:af:77:2f:a3:2b:40:a9:36:71:
         2a:23:fc:01:68:4c:fe:1d:a3:2a:55:28:05:72:1b:62:ba:2d:
         e6:52:3e:b6:a2:8b:d1:80:2e:bc:ab:72:8d:f7:19:63:2a:c3:
         2e:1e:cb:62:23:53:45:03:89:ff:66:a4:9a:92:1d:9a:93:09:
         7e:36:58:e6:1f:5b:4c:35:d8:7f:f6:65:f4:37:9f:58:81:ca:
         4a:2e:97:3a:27:ad:a8:b8:a1:bd:f9:10:af:14:42:43:32:ee:
         8d:2f:5c:ea:04:eb:51:5c:71:90:16:2b:96:52:8d:a7:93:b0:
         dd:20:18:30:ae:08:63:f7:26:08:9e:b1:9b:fd:9c:9f:7b:bc:
         d1:64:ba:c0:96:2a:9e:77:2a:01:ba:c3:ae:26:52:4d:34:11:
         d6:cf:2d:da:5f:19:7b:5b:71:4c:4b:1d:f4:7d:5b:13:7c:41:
         22:3e:42:2f:3f:3c:e1:5e:3c:5f:0e:bb:b4:37:4f:4f:59:ef:
         f0:7d:3e:ff:c0:99:d5:2a:85:89:9f:80:49:4f:cd:47:31:6a:
         dd:c3:cc:33:cb:51:ea:41:b9:23:6d:01:90:b9:bf:03:bb:c2:
         6b:ed:f0:3d
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUKb6Q1twFOW1Pn5QfmHmPT/naIA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjgxODQzMzNaFw0yNDA5MjYxODQ4MzNaMDMxMTAvBgNV
BAMTKEVGM0VCMDg0NzlGMjUxNTlBNTAxNUEwRDA2MTEwODExOEJDMTgxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdEDMGW6jGWtvdZVocTr1/nil
XZAQFJ7l/OEz+Z7uMzGFDDfpKVT7zW0kcqI4wIMgoLgpHX53RxDFJP2Q/shbx23R
UD/B/Q8qPUWBG6+1b9tfsNEOhaFCFlZ6a6ZHfbYyrHYzDca3EW9i1ImimOoadOQh
cXAnghlBrt0tE9AyxMfJweD3wRAmya4rJldSRGk3kina3oFkYDf+NVTvVPfwZqSK
w0NpilZyZE00S0//pklOrBRmxO/WZ5pdHK23jCkiBnCtDjcaEqdpWyM9a3kfeAcb
M2dTTNxUfrZ36FhjwNVHvPNp2h70ThWDFXyk2AIe7CmEFgt1d0eLs4+anuVrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvPrCEefJRWaUB
Wg0GEQgRi8GB7DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CYWl6Y2R3ZEZyamZnMXRrRlE1d25XQlJGOWtpMkxOb3dz
ZUdkTEg0U1UxVC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQmFpemNkd2RGcmpmZzF0a0ZRNXduV0JSRjlraTJMTm93
c2VHZExINFNVMVQvMC9FRjNFQjA4NDc5RjI1MTU5QTUwMTVBMEQwNjExMDgxMThC
QzE4MUVDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBZwwDQQCAAIwBwMF
ACgEOtwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA+CMA0GCSqGSIb3DQEBCwUA
A4IBAQApBSdZLVAT+uehtTmw71w6u7PsJHmN/qaYUwavdy+jK0CpNnEqI/wBaEz+
HaMqVSgFchtiui3mUj62oovRgC68q3KN9xljKsMuHstiI1NFA4n/ZqSakh2akwl+
NljmH1tMNdh/9mX0N59YgcpKLpc6J62ouKG9+RCvFEJDMu6NL1zqBOtRXHGQFiuW
Uo2nk7DdIBgwrghj9yYInrGb/Zyfe7zRZLrAliqedyoBusOuJlJNNBHWzy3aXxl7
W3FMSx30fVsTfEEiPkIvPzzhXjxfDru0N09PWe/wfT7/wJnVKoWJn4BJT81HMWrd
w8wzy1HqQbkjbQGQub8Du8Jr7fA9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org