Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.cer
File:                     EF8A59B19C1985F636BF3722F71EFE157CB13D39.cer (raw, json)
Hash identifier:          ucI2zx87o6+qI+HSIVv0nlRou5Ij79rfMn0nwio7hFI=
Subject key identifier:   EF:8A:59:B1:9C:19:85:F6:36:BF:37:22:F7:1E:FE:15:7C:B1:3D:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       094066C0E0846C17AC50005E13EF881AEA74C94F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 23:07:42 +0000
Certificate not after:    Mon 09 Dec 2024 23:12:42 +0000
Subordinate resources:    AS: 28638
                          IP: 138.118.160.0/22
                          IP: 186.209.216.0/22
                          IP: 2804:dcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:40:66:c0:e0:84:6c:17:ac:50:00:5e:13:ef:88:1a:ea:74:c9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 23:07:42 2023 GMT
            Not After : Dec  9 23:12:42 2024 GMT
        Subject: CN=EF8A59B19C1985F636BF3722F71EFE157CB13D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:69:97:d6:d9:de:e3:a8:66:7d:b5:b5:cf:
                    f6:3b:45:0d:8c:b0:38:87:35:9f:50:b2:f1:1b:8b:
                    10:96:bc:a0:99:a2:8e:21:38:c4:8c:21:11:33:3b:
                    6b:9d:ef:a7:6e:ae:ba:d2:fe:cb:b5:5f:59:b5:08:
                    74:56:39:f0:07:97:ee:30:78:91:f0:e3:b2:1f:6b:
                    05:47:66:63:37:d0:94:eb:e7:44:89:d5:7e:0a:4b:
                    3a:cf:de:bc:b2:10:8c:13:fb:6e:d9:f9:5d:71:69:
                    66:d4:3e:e8:0e:45:f7:43:47:37:05:95:96:ce:fe:
                    9e:9c:5e:45:8f:1c:b2:e5:30:95:09:95:89:f6:c1:
                    91:82:83:ad:73:1a:c0:90:46:02:95:eb:f0:c9:e0:
                    87:05:36:fe:5c:5a:2e:f5:e3:21:38:cb:3b:7f:f0:
                    bc:a5:5e:c1:3f:39:b8:ff:04:29:50:b8:15:0c:4e:
                    2f:1d:34:a0:b9:74:2e:46:91:a4:09:ef:b0:81:66:
                    5b:14:49:17:97:46:eb:f0:d1:5f:75:7a:04:b6:fe:
                    38:23:9d:6b:b6:6e:45:21:40:7a:67:57:ee:3d:2e:
                    75:4b:75:50:d8:99:a9:54:9b:2e:58:33:3d:7e:fd:
                    73:b9:a6:41:00:45:19:b0:7a:8f:45:01:8e:67:cf:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:8A:59:B1:9C:19:85:F6:36:BF:37:22:F7:1E:FE:15:7C:B1:3D:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.160.0/22
                  186.209.216.0/22
                IPv6:
                  2804:dcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28638

    Signature Algorithm: sha256WithRSAEncryption
         9d:04:3a:d0:69:05:46:d6:e4:8f:0d:91:57:96:bb:4e:32:10:
         11:73:7c:42:dc:b6:6e:39:0d:48:5d:f6:f9:d9:9e:42:a5:66:
         77:69:f1:e0:6f:9c:a3:29:06:da:84:05:99:44:48:cc:b3:c3:
         6f:81:2f:ef:ff:3c:ce:a9:75:da:fb:94:d4:b4:04:b9:61:ff:
         54:a7:5b:90:c4:38:c0:e4:f4:0b:29:59:f8:f7:ed:54:c2:30:
         db:bb:be:a7:e5:dc:a9:75:18:a7:d1:09:42:0e:7f:e5:93:33:
         d2:1d:7f:cf:57:d6:fe:b4:38:5b:73:e4:9c:8f:9b:ae:95:f9:
         d8:a0:4b:8e:e7:95:f5:35:6e:a1:7d:ca:31:d7:a1:b8:0c:3a:
         8e:9e:77:79:b6:fb:a2:48:89:64:93:b8:f8:3b:17:b2:58:a1:
         17:e0:4b:07:6f:51:d1:fd:55:f8:bf:3a:91:05:44:46:92:6e:
         8f:75:18:33:07:ca:f9:e0:db:0e:34:7b:3b:0c:35:22:ba:b4:
         4f:83:3f:b0:f9:46:29:f2:47:88:69:68:a1:a2:6e:12:0c:80:
         d1:6d:f3:86:62:97:5a:5b:b5:35:58:ff:be:ea:3f:74:6b:9b:
         60:3e:2c:54:9d:b3:0f:32:d0:52:f2:cf:52:f0:0f:be:c3:a9:
         b4:d9:4a:61
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUCUBmwOCEbBesUABeE++IGup0yU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTEyMzA3NDJaFw0yNDEyMDkyMzEyNDJaMDMxMTAvBgNV
BAMTKEVGOEE1OUIxOUMxOTg1RjYzNkJGMzcyMkY3MUVGRTE1N0NCMTNEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZrmmX1tne46hmfbW1z/Y7RQ2M
sDiHNZ9QsvEbixCWvKCZoo4hOMSMIREzO2ud76durrrS/su1X1m1CHRWOfAHl+4w
eJHw47IfawVHZmM30JTr50SJ1X4KSzrP3ryyEIwT+27Z+V1xaWbUPugORfdDRzcF
lZbO/p6cXkWPHLLlMJUJlYn2wZGCg61zGsCQRgKV6/DJ4IcFNv5cWi714yE4yzt/
8LylXsE/Obj/BClQuBUMTi8dNKC5dC5GkaQJ77CBZlsUSReXRuvw0V91egS2/jgj
nWu2bkUhQHpnV+49LnVLdVDYmalUmy5YMz1+/XO5pkEARRmweo9FAY5nz3wzAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvilmxnBmF9ja/
NyL3Hv4VfLE9OTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yNlU2Um1pWGZjNVlGMWRKSnMySnIybWIxaWJYdnh6Qkd0
aXlKSkFvNmE4Zy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMjZVNlJtaVhmYzVZRjFkSkpzMkpyMm1iMWliWHZ4ekJH
dGl5SkpBbzZhOGcvMC9FRjhBNTlCMTlDMTk4NUY2MzZCRjM3MjJGNzFFRkUxNTdD
QjEzRDM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKKdqADBAK60dgwDQQC
AAIwBwMFACgEDcwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICb94wDQYJKoZIhvcN
AQELBQADggEBAJ0EOtBpBUbW5I8NkVeWu04yEBFzfELctm45DUhd9vnZnkKlZndp
8eBvnKMpBtqEBZlESMyzw2+BL+//PM6pddr7lNS0BLlh/1SnW5DEOMDk9AspWfj3
7VTCMNu7vqfl3Kl1GKfRCUIOf+WTM9Idf89X1v60OFtz5JyPm66V+digS47nlfU1
bqF9yjHXobgMOo6ed3m2+6JIiWSTuPg7F7JYoRfgSwdvUdH9Vfi/OpEFREaSbo91
GDMHyvng2w40ezsMNSK6tE+DP7D5RinyR4hpaKGibhIMgNFt84Zil1pbtTVY/77q
P3Rrm2A+LFSdsw8y0FLyz1LwD77DqbTZSmE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org