Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.cer
File:                     6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.cer (raw, json)
Hash identifier:          A2SRiLqd2pyY0NI4ftMetQ5oxP72DzP+d/dWnsohKFA=
Subject key identifier:   65:09:C1:AC:3A:C2:E9:13:FD:B1:2B:8E:9D:88:E6:04:26:28:6F:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F932853419BE9213A2147D11A82822A10304232
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 16:55:15 +0000
Certificate not after:    Tue 22 Oct 2024 17:00:15 +0000
Subordinate resources:    AS: 268991
                          IP: 45.177.116.0/22
                          IP: 2804:5dc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:93:28:53:41:9b:e9:21:3a:21:47:d1:1a:82:82:2a:10:30:42:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 16:55:15 2023 GMT
            Not After : Oct 22 17:00:15 2024 GMT
        Subject: CN=6509C1AC3AC2E913FDB12B8E9D88E60426286FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:23:da:13:5a:d8:70:f7:f2:4b:f9:b1:00:
                    0a:63:88:bd:0e:3b:fe:ce:49:cc:a8:fb:95:52:19:
                    27:9f:c8:51:da:56:f3:a8:77:81:4f:35:00:59:f8:
                    92:e1:90:85:61:b8:29:45:0a:43:99:d5:07:03:5e:
                    64:ab:51:17:4f:9d:13:f9:4a:f2:1e:20:61:9f:e6:
                    0a:58:31:f8:b5:ea:81:22:30:78:c7:0b:0d:7f:56:
                    b8:d6:17:54:b8:9b:1f:34:7d:12:ff:54:3f:7b:88:
                    bb:2f:49:30:17:b0:f7:1d:e5:5c:67:a5:81:07:00:
                    91:3c:6b:a4:00:e3:2b:0c:6f:73:f0:69:ad:98:b5:
                    95:ab:c3:38:e4:5c:27:95:5c:ba:f2:0c:ad:06:e8:
                    87:42:20:24:ec:42:a6:1f:ce:42:de:08:1f:69:f6:
                    6c:b9:73:28:8c:b7:b6:60:78:ca:17:17:c8:e3:8c:
                    6d:bd:3b:62:2b:1f:ae:be:c1:c1:83:da:e7:c9:b0:
                    ec:58:4e:a1:28:88:53:a0:d9:a5:f1:99:a3:e3:3a:
                    44:d1:8d:50:5d:bd:da:f3:13:29:b4:5e:7e:25:a9:
                    24:c3:a9:22:1d:0b:c4:12:72:b8:93:6c:92:72:ce:
                    f2:50:f8:c1:c0:17:99:97:b7:7b:2c:fc:23:64:7e:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:09:C1:AC:3A:C2:E9:13:FD:B1:2B:8E:9D:88:E6:04:26:28:6F:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/6509C1AC3AC2E913FDB12B8E9D88E60426286FC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.116.0/22
                IPv6:
                  2804:5dc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268991

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:66:02:2d:25:91:f0:7d:44:3c:49:09:f0:65:72:52:fa:
         63:5b:80:94:2d:22:4d:2d:0d:8b:f8:cb:d8:6a:c0:9b:b4:c4:
         17:e4:04:84:84:a1:93:b3:f4:eb:74:c6:05:0d:48:23:30:35:
         23:7c:fd:f4:8b:31:86:f8:1d:ff:5f:ff:33:79:c0:6b:bb:47:
         53:25:01:57:7e:19:19:cd:6c:27:b4:3b:81:cd:46:2b:1a:59:
         ed:85:01:64:80:bb:0b:53:ca:19:f0:33:bf:9f:3d:e6:f7:9c:
         a5:91:4b:4a:fb:81:93:1f:7b:b9:c8:1f:28:9a:0c:e8:f3:de:
         fc:53:de:fd:9b:20:37:da:d2:1a:ea:ed:aa:6d:2a:7e:45:53:
         92:cf:f1:48:09:d0:8c:ea:76:5e:21:d6:78:b9:58:73:97:c0:
         8e:e4:e9:78:c6:db:d6:ba:63:9d:49:ac:45:e4:36:14:ea:9e:
         10:f3:6f:87:c4:29:e7:b5:d5:b9:5d:43:8e:4e:83:38:37:32:
         a5:e8:02:a8:5d:ef:2e:d4:b5:f0:bd:06:e8:3a:df:f8:91:95:
         52:a8:00:a7:dc:a4:35:bb:69:1d:54:b0:e4:9c:08:80:bb:e8:
         6a:03:d3:55:54:53:5f:6f:42:cf:9f:3e:3d:46:5f:88:6c:40:
         89:93:69:3b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUD5MoU0Gb6SE6IUfRGoKCKhAwQjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjQxNjU1MTVaFw0yNDEwMjIxNzAwMTVaMDMxMTAvBgNV
BAMTKDY1MDlDMUFDM0FDMkU5MTNGREIxMkI4RTlEODhFNjA0MjYyODZGQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmiPaE1rYcPfyS/mxAApjiL0O
O/7OScyo+5VSGSefyFHaVvOod4FPNQBZ+JLhkIVhuClFCkOZ1QcDXmSrURdPnRP5
SvIeIGGf5gpYMfi16oEiMHjHCw1/VrjWF1S4mx80fRL/VD97iLsvSTAXsPcd5Vxn
pYEHAJE8a6QA4ysMb3Pwaa2YtZWrwzjkXCeVXLryDK0G6IdCICTsQqYfzkLeCB9p
9my5cyiMt7ZgeMoXF8jjjG29O2IrH66+wcGD2ufJsOxYTqEoiFOg2aXxmaPjOkTR
jVBdvdrzEym0Xn4lqSTDqSIdC8QScriTbJJyzvJQ+MHAF5mXt3ss/CNkfoPTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlCcGsOsLpE/2x
K46diOYEJihvyTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EZG1zTG5ITm5OZXFOQm1RR3Z3TllHa3o2UmtvdU5vWUFa
V0ZlWlFlajdtci8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRGRtc0xuSE5uTmVxTkJtUUd2d05ZR2t6NlJrb3VOb1lB
WldGZVpRZWo3bXIvMC82NTA5QzFBQzNBQzJFOTEzRkRCMTJCOEU5RDg4RTYwNDI2
Mjg2RkM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItsXQwDQQCAAIwBwMF
ACgEXcQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBq/MA0GCSqGSIb3DQEBCwUA
A4IBAQCiHmYCLSWR8H1EPEkJ8GVyUvpjW4CULSJNLQ2L+MvYasCbtMQX5ASEhKGT
s/TrdMYFDUgjMDUjfP30izGG+B3/X/8zecBru0dTJQFXfhkZzWwntDuBzUYrGlnt
hQFkgLsLU8oZ8DO/nz3m95ylkUtK+4GTH3u5yB8omgzo8978U979myA32tIa6u2q
bSp+RVOSz/FICdCM6nZeIdZ4uVhzl8CO5Ol4xtvWumOdSaxF5DYU6p4Q82+HxCnn
tdW5XUOOToM4NzKl6AKoXe8u1LXwvQboOt/4kZVSqACn3KQ1u2kdVLDknAiAu+hq
A9NVVFNfb0LPnz49Rl+IbECJk2k7
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org