Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9AB6294CF30737621977F665E43F7808BE2BAEF2.cer
File:                     9AB6294CF30737621977F665E43F7808BE2BAEF2.cer (raw, json)
Hash identifier:          /bIJRvYcmoaaDPCEoBknReB7Qe+wRkUxghfJeNkNAwU=
Subject key identifier:   9A:B6:29:4C:F3:07:37:62:19:77:F6:65:E4:3F:78:08:BE:2B:AE:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EFE29356E3CBE405EF8CF699F109E1D1D621EA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/9AB6294CF30737621977F665E43F7808BE2BAEF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 14:11:52 +0000
Certificate not after:    Fri 21 Feb 2025 14:16:52 +0000
Subordinate resources:    AS: 271573
                          IP: 200.0.179.0/24
                          IP: 200.6.134.0/23
                          IP: 201.131.106.0/24
                          IP: 2804:7da0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fe:29:35:6e:3c:be:40:5e:f8:cf:69:9f:10:9e:1d:1d:62:1e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 14:11:52 2024 GMT
            Not After : Feb 21 14:16:52 2025 GMT
        Subject: CN=9AB6294CF30737621977F665E43F7808BE2BAEF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:3d:eb:c2:45:ed:d3:8e:ea:68:66:47:22:
                    41:cb:a7:2d:05:0d:37:bc:a5:36:08:61:22:5e:39:
                    54:83:02:de:df:ac:73:34:d6:f8:b9:6c:dd:c7:e5:
                    63:f4:ec:f1:f7:56:c8:0e:28:19:73:9d:b7:8b:42:
                    ff:19:19:ae:5a:66:f2:e9:73:0b:97:03:67:4d:9a:
                    5a:9f:92:e3:d8:aa:7f:16:7a:28:99:fd:48:d6:8f:
                    5b:f0:f8:10:80:85:0f:e7:c4:dc:a5:f2:72:c5:8b:
                    d9:c2:c5:0c:ee:16:5d:34:f0:49:7d:1e:1e:fb:b6:
                    94:a3:18:e3:5e:02:c8:10:3a:03:a8:b3:9a:62:ae:
                    63:0f:16:e7:61:2e:59:7f:6f:21:fd:10:37:61:e3:
                    95:e4:93:44:17:75:5b:ea:fd:05:1f:b3:04:b6:07:
                    b8:5f:09:e3:49:f0:12:3e:5e:8a:64:dc:43:fe:22:
                    11:8c:de:7b:dd:74:81:2a:70:c2:10:d9:c3:b7:e1:
                    29:58:37:8c:34:07:e2:29:7b:40:23:d7:3c:be:52:
                    ed:6c:2e:ea:c8:fc:11:02:d5:1b:77:82:58:b5:65:
                    6b:3a:e3:00:43:82:aa:59:18:40:08:cf:46:d7:51:
                    4f:f1:3d:71:1b:42:19:dd:22:43:09:e8:b5:ac:1d:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:B6:29:4C:F3:07:37:62:19:77:F6:65:E4:3F:78:08:BE:2B:AE:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/9AB6294CF30737621977F665E43F7808BE2BAEF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24
                  200.6.134.0/23
                  201.131.106.0/24
                IPv6:
                  2804:7da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271573

    Signature Algorithm: sha256WithRSAEncryption
         18:40:63:55:19:2c:d4:a5:b0:88:08:09:0d:a1:6e:d0:12:75:
         c4:26:03:12:70:85:8d:63:a3:a3:7d:58:c4:25:47:60:54:11:
         8e:7a:ed:5f:ab:cd:69:85:88:f5:32:6d:2f:ec:9d:9b:c2:51:
         b2:fd:17:0d:85:b4:2e:9e:42:7d:cc:e9:be:ef:0b:9e:9a:ae:
         40:d0:cf:c7:92:7b:ce:15:fa:44:0c:93:76:9f:c3:50:3f:14:
         7d:b3:70:7b:ad:51:e5:43:a6:57:44:13:8a:ef:d0:6d:95:2c:
         c6:78:c9:bb:07:52:87:7c:8d:78:f7:07:cf:fa:12:d0:91:57:
         93:b9:84:0a:60:0b:2a:54:c9:d2:25:ef:84:da:a2:79:08:96:
         9b:8e:78:0b:97:94:fb:67:86:08:ec:ae:a1:ae:b9:bf:d1:6f:
         93:66:e3:b5:7b:dc:4e:d0:6c:6c:18:fb:29:1d:50:bd:f6:7f:
         40:c0:4b:92:53:12:71:63:5b:76:f9:96:bc:29:5b:89:7d:54:
         20:ab:5f:8d:09:93:24:05:1c:46:19:76:06:9f:99:cd:35:52:
         e7:0c:4c:70:0d:bf:d4:7e:cc:5a:86:52:eb:19:8b:24:0c:cb:
         4c:6a:53:9a:45:9e:88:2f:7b:d7:2b:c8:3c:32:5e:3f:50:d5:
         75:d2:5b:0b
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUDv4pNW48vkBe+M9pnxCeHR1iHqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjMxNDExNTJaFw0yNTAyMjExNDE2NTJaMDMxMTAvBgNV
BAMTKDlBQjYyOTRDRjMwNzM3NjIxOTc3RjY2NUU0M0Y3ODA4QkUyQkFFRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbvz3rwkXt047qaGZHIkHLpy0F
DTe8pTYIYSJeOVSDAt7frHM01vi5bN3H5WP07PH3VsgOKBlznbeLQv8ZGa5aZvLp
cwuXA2dNmlqfkuPYqn8WeiiZ/UjWj1vw+BCAhQ/nxNyl8nLFi9nCxQzuFl008El9
Hh77tpSjGONeAsgQOgOos5pirmMPFudhLll/byH9EDdh45Xkk0QXdVvq/QUfswS2
B7hfCeNJ8BI+Xopk3EP+IhGM3nvddIEqcMIQ2cO34SlYN4w0B+Ipe0Aj1zy+Uu1s
LurI/BEC1Rt3gli1ZWs64wBDgqpZGEAIz0bXUU/xPXEbQhndIkMJ6LWsHVy9AgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSatilM8wc3Yhl3
9mXkP3gIviuu8jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaEJzcVVUS1U3Vkt6a0JjSlFScEROQ2lnclRnY2JWWFpw
dld6TjNuYTUzcC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRmhCc3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlha
cHZXek4zbmE1M3AvMC85QUI2Mjk0Q0YzMDczNzYyMTk3N0Y2NjVFNDNGNzgwOEJF
MkJBRUYyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBADIALMDBAHIBoYDBADJ
g2owDQQCAAIwBwMFACgEfaAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCTVMA0G
CSqGSIb3DQEBCwUAA4IBAQAYQGNVGSzUpbCICAkNoW7QEnXEJgMScIWNY6OjfVjE
JUdgVBGOeu1fq81phYj1Mm0v7J2bwlGy/RcNhbQunkJ9zOm+7wuemq5A0M/HknvO
FfpEDJN2n8NQPxR9s3B7rVHlQ6ZXRBOK79BtlSzGeMm7B1KHfI149wfP+hLQkVeT
uYQKYAsqVMnSJe+E2qJ5CJabjngLl5T7Z4YI7K6hrrm/0W+TZuO1e9xO0GxsGPsp
HVC99n9AwEuSUxJxY1t2+Za8KVuJfVQgq1+NCZMkBRxGGXYGn5nNNVLnDExwDb/U
fsxahlLrGYskDMtMalOaRZ6IL3vXK8g8Ml4/UNV10lsL
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:04:00 2025 by rpki-client