Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/09E4B213FD64B67EB450ED5292DE55A3A771D60C.cer
File:                     09E4B213FD64B67EB450ED5292DE55A3A771D60C.cer (raw, json)
Hash identifier:          HlXNGWIc9Qncq9b5/lfC6Z29OjgliuoinFUU5RXahzI=
Subject key identifier:   09:E4:B2:13:FD:64:B6:7E:B4:50:ED:52:92:DE:55:A3:A7:71:D6:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C81B2355D479E3E49807CF760B84EC9321B7F57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/09E4B213FD64B67EB450ED5292DE55A3A771D60C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Feb 2022 13:15:56 +0000
Certificate not after:    Mon 20 Feb 2023 13:20:56 +0000
Subordinate resources:    AS: 263321
                          IP: 138.117.24.0/22
                          IP: 168.90.24.0/22
                          IP: 170.233.204.0/22
                          IP: 191.7.136.0/21
                          IP: 2804:1440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:81:b2:35:5d:47:9e:3e:49:80:7c:f7:60:b8:4e:c9:32:1b:7f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 13:15:56 2022 GMT
            Not After : Feb 20 13:20:56 2023 GMT
        Subject: CN=09E4B213FD64B67EB450ED5292DE55A3A771D60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:7b:02:c7:07:d6:14:6e:44:3b:97:89:49:
                    9c:2e:7d:58:2f:8b:df:c3:9c:15:71:1e:4d:47:de:
                    56:22:6c:ab:bb:ab:f3:86:de:31:ef:52:bf:73:75:
                    5a:b8:d2:e9:42:a5:a5:1a:f8:c3:d7:f1:f0:9f:d4:
                    fd:42:51:96:ed:46:5c:3f:66:a6:68:e5:8d:ad:c4:
                    0e:0f:12:03:db:a0:3b:70:97:80:63:ed:b6:61:02:
                    5c:f1:e2:79:ed:02:c0:48:ce:8d:13:c3:6a:08:67:
                    fb:8b:46:f2:a9:0c:f7:d1:26:24:d1:8a:b1:69:94:
                    d2:77:9e:0a:17:5f:42:99:20:fe:1e:26:c8:93:18:
                    8a:27:a8:f6:89:c3:58:16:28:59:d0:55:5e:34:f8:
                    da:78:1e:ff:15:e4:9a:ae:10:08:d1:9d:90:6f:6e:
                    6b:91:55:ad:fc:df:67:83:85:b6:36:5e:04:e8:46:
                    3d:3c:95:18:45:54:e8:eb:27:29:3a:15:af:1d:da:
                    de:33:cb:89:20:4f:9e:5f:cf:73:32:49:53:b5:c4:
                    84:ad:d7:59:3a:81:c1:c1:15:22:75:1b:0b:3d:6d:
                    63:dc:eb:9c:1d:c5:e0:57:6c:6b:a9:0a:a8:ec:b3:
                    d8:49:f3:68:41:d3:64:02:c2:d1:f7:5b:18:ce:11:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:E4:B2:13:FD:64:B6:7E:B4:50:ED:52:92:DE:55:A3:A7:71:D6:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/09E4B213FD64B67EB450ED5292DE55A3A771D60C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22
                  168.90.24.0/22
                  170.233.204.0/22
                  191.7.136.0/21
                IPv6:
                  2804:1440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263321

    Signature Algorithm: sha256WithRSAEncryption
         9c:2b:2a:42:25:14:01:31:11:d9:8d:bc:44:b3:21:a0:44:c9:
         95:3d:0d:cf:5a:84:2e:a6:09:96:c0:99:88:38:fa:4a:88:d9:
         68:ba:ee:2c:d7:2c:6b:36:67:71:38:f2:cb:9c:b6:19:97:91:
         f5:80:0a:3b:48:1b:e8:7e:ea:37:2b:15:54:85:70:26:12:b6:
         01:1b:fd:35:0c:3d:1c:82:ee:7b:f1:57:6b:a8:e0:7a:b1:b2:
         31:87:39:32:2a:97:7c:aa:40:f1:72:75:19:1a:bc:b9:2f:5c:
         ff:76:73:07:2e:09:27:e9:3e:85:be:d6:99:f2:52:fd:26:2d:
         dd:da:84:49:53:4b:56:2f:89:b6:14:ca:60:dc:06:e8:73:b8:
         1e:a1:86:83:3b:df:41:43:13:ae:db:3c:b8:92:77:81:8b:59:
         3d:bb:38:37:15:63:2b:ec:77:e0:a2:37:e7:cd:e9:9d:b2:61:
         7f:4e:de:3b:89:6b:4a:10:8f:73:32:56:23:6a:3c:ca:68:50:
         e5:8f:c3:1b:bd:1a:8c:a2:d6:c2:8a:13:8d:ef:2c:bb:8f:93:
         b6:db:f9:93:39:eb:98:b7:33:e5:e7:d8:12:f5:f8:08:eb:e1:
         f7:5e:ff:dd:66:c1:24:86:76:41:cf:56:81:27:88:d0:7f:8f:
         c2:6c:09:b6
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUPIGyNV1Hnj5JgHz3YLhOyTIbf1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAyMjExMzE1NTZaFw0yMzAyMjAxMzIwNTZaMDMxMTAvBgNV
BAMTKDA5RTRCMjEzRkQ2NEI2N0VCNDUwRUQ1MjkyREU1NUEzQTc3MUQ2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvunsCxwfWFG5EO5eJSZwufVgv
i9/DnBVxHk1H3lYibKu7q/OG3jHvUr9zdVq40ulCpaUa+MPX8fCf1P1CUZbtRlw/
ZqZo5Y2txA4PEgPboDtwl4Bj7bZhAlzx4nntAsBIzo0Tw2oIZ/uLRvKpDPfRJiTR
irFplNJ3ngoXX0KZIP4eJsiTGIonqPaJw1gWKFnQVV40+Np4Hv8V5JquEAjRnZBv
bmuRVa3832eDhbY2XgToRj08lRhFVOjrJyk6Fa8d2t4zy4kgT55fz3MySVO1xISt
11k6gcHBFSJ1Gws9bWPc65wdxeBXbGupCqjss9hJ82hB02QCwtH3WxjOEW67AgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ5LIT/WS2frRQ
7VKS3lWjp3HWDDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83MjhLbTl0Rm84ajlMbjYxNVlra2tnNlQ4ckJuYmdQZ3dz
aGIzZ2hzUGpIcS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3
c2hiM2doc1BqSHEvMC8wOUU0QjIxM0ZENjRCNjdFQjQ1MEVENTI5MkRFNTVBM0E3
NzFENjBDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKKdRgDBAKoWhgDBAKq
6cwDBAO/B4gwDQQCAAIwBwMFACgEFEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BASZMA0GCSqGSIb3DQEBCwUAA4IBAQCcKypCJRQBMRHZjbxEsyGgRMmVPQ3PWoQu
pgmWwJmIOPpKiNlouu4s1yxrNmdxOPLLnLYZl5H1gAo7SBvofuo3KxVUhXAmErYB
G/01DD0cgu578VdrqOB6sbIxhzkyKpd8qkDxcnUZGry5L1z/dnMHLgkn6T6FvtaZ
8lL9Ji3d2oRJU0tWL4m2FMpg3Aboc7geoYaDO99BQxOu2zy4kneBi1k9uzg3FWMr
7HfgojfnzemdsmF/Tt47iWtKEI9zMlYjajzKaFDlj8MbvRqMotbCihON7yy7j5O2
2/mTOeuYtzPl59gS9fgI6+H3Xv/dZsEkhnZBz1aBJ4jQf4/CbAm2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org