Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
File:                     0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer (raw, json)
Hash identifier:          JKKs1AbHDF39mrQwEUdY0EP4E54QhoBSh7VX1QJTeas=
Subject key identifier:   0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5869E268F701B62CE91DC0589340D59C8CEBEF37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 01:03:27 +0000
Certificate not after:    Tue 08 Oct 2024 01:08:27 +0000
Subordinate resources:    AS: 265229
                          IP: 168.0.52.0/22
                          IP: 170.247.208.0/22
                          IP: 2804:2c98::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:69:e2:68:f7:01:b6:2c:e9:1d:c0:58:93:40:d5:9c:8c:eb:ef:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 01:03:27 2023 GMT
            Not After : Oct  8 01:08:27 2024 GMT
        Subject: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:75:4c:d5:72:a1:0e:89:cf:6e:1a:e0:54:3e:
                    f5:36:8a:72:25:7d:aa:69:e1:27:fb:d5:b9:4c:06:
                    ad:70:52:12:22:0a:80:3e:fc:96:4c:52:49:4f:33:
                    8e:e5:99:7d:53:b2:38:b0:f8:14:6f:67:c1:27:02:
                    18:4e:fc:9f:6a:1b:f9:06:b4:10:2b:7d:9c:36:6d:
                    de:67:4f:5b:3d:6f:3a:31:cf:54:fb:d2:b6:c6:e3:
                    c4:03:6d:ea:79:27:52:6a:c2:98:6a:e9:5d:89:82:
                    14:c1:74:37:e2:c8:1b:90:8d:56:7a:ed:34:dc:44:
                    a0:51:d4:73:b9:b0:12:fa:4f:0d:14:bd:a7:47:2c:
                    b5:e6:eb:3f:9c:c3:6c:a3:7a:c7:48:91:cc:b8:01:
                    c2:00:6f:d9:49:4a:65:54:4e:5a:f2:12:7d:b2:e8:
                    b0:f6:e5:7c:13:11:fc:db:34:35:43:e0:89:d1:b6:
                    79:1b:bb:2a:ef:43:4e:1d:cc:64:82:4e:37:21:bc:
                    eb:30:a9:d1:f2:a5:7a:83:dd:09:92:35:c9:28:49:
                    75:1f:11:a0:70:ce:0f:30:4c:b0:d4:86:3a:b1:58:
                    26:da:9d:3a:27:64:e6:8c:89:54:bc:6b:08:e8:e3:
                    8c:f6:c4:3c:1a:7f:0c:54:1c:48:d4:19:5d:42:01:
                    db:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.52.0/22
                  170.247.208.0/22
                IPv6:
                  2804:2c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265229

    Signature Algorithm: sha256WithRSAEncryption
         6e:aa:27:41:e2:2d:20:4c:60:42:e9:70:7b:2e:c7:e3:77:0e:
         ed:1a:a0:a8:fb:5c:22:b1:1f:bf:cb:f1:6c:63:23:9a:01:2d:
         f9:99:b3:d2:2f:b2:1e:05:8c:8c:b8:b4:42:bb:52:b6:56:dc:
         ce:28:31:2e:28:10:14:10:54:ca:19:5a:1d:81:e1:8d:10:43:
         37:4c:5e:57:f2:1d:a0:50:2f:dc:1e:cb:b6:a6:d3:ed:a9:72:
         30:fd:f6:58:ea:a8:03:ee:8a:61:8c:18:0e:51:95:8b:7c:89:
         8c:62:ea:ae:a6:df:a3:60:bc:2f:1d:20:ab:5d:57:22:0f:46:
         76:74:9d:4d:64:5d:15:f5:87:ba:92:62:2c:cf:55:5a:88:71:
         3c:47:96:b2:19:c3:ad:ff:95:30:2f:dc:22:c6:c3:73:de:8a:
         13:06:bc:37:ee:91:d4:99:d2:2c:57:68:7e:58:0f:b8:de:b4:
         b6:eb:d3:64:6f:1a:f3:12:40:f8:b2:7f:8f:48:03:4a:68:67:
         00:57:3b:ea:12:99:04:e8:b8:04:2c:fb:41:37:e0:90:ea:29:
         5a:3d:e8:58:bd:73:bb:d9:c9:b9:f4:b6:0c:c3:83:ac:74:a8:
         85:4c:cf:53:61:9a:0e:74:a1:88:04:80:34:11:ba:ec:4e:4e:
         a6:cd:f6:cb
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIUWGniaPcBtizpHcBYk0DVnIzr7zcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTAwMTAzMjdaFw0yNDEwMDgwMTA4MjdaMDMxMTAvBgNV
BAMTKDBGOUIyMUNBOTQxOURBRkRGNjYzRkZBQzVEODE1ODk3MUI4OEE5QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdUzVcqEOic9uGuBUPvU2inIl
fapp4Sf71blMBq1wUhIiCoA+/JZMUklPM47lmX1Tsjiw+BRvZ8EnAhhO/J9qG/kG
tBArfZw2bd5nT1s9bzoxz1T70rbG48QDbep5J1Jqwphq6V2JghTBdDfiyBuQjVZ6
7TTcRKBR1HO5sBL6Tw0UvadHLLXm6z+cw2yjesdIkcy4AcIAb9lJSmVUTlryEn2y
6LD25XwTEfzbNDVD4InRtnkbuyrvQ04dzGSCTjchvOswqdHypXqD3QmSNckoSXUf
EaBwzg8wTLDUhjqxWCbanTonZOaMiVS8awjo44z2xDwafwxUHEjUGV1CAdtnAgMB
AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPmyHKlBna/fZj
/6xdgViXG4ipyTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9rQTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0
Ykw5eE54aDRVLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL2tBNmJpSmRvSnlxQndRTnJ1YlhnVjRnWjIyZkZCeGtHVXRi
TDl4TnhoNFUvMC8wRjlCMjFDQTk0MTlEQUZERjY2M0ZGQUM1RDgxNTg5NzFCODhB
OUM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKoADQDBAKq99AwDQQCAAIw
BwMFACgELJgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAwNMA0GCSqGSIb3DQEB
CwUAA4IBAQBuqidB4i0gTGBC6XB7Lsfjdw7tGqCo+1wisR+/y/FsYyOaAS35mbPS
L7IeBYyMuLRCu1K2VtzOKDEuKBAUEFTKGVodgeGNEEM3TF5X8h2gUC/cHsu2ptPt
qXIw/fZY6qgD7ophjBgOUZWLfImMYuqupt+jYLwvHSCrXVciD0Z2dJ1NZF0V9Ye6
kmIsz1VaiHE8R5ayGcOt/5UwL9wixsNz3ooTBrw37pHUmdIsV2h+WA+43rS269Nk
bxrzEkD4sn+PSANKaGcAVzvqEpkE6LgELPtBN+CQ6ilaPehYvXO72cm59LYMw4Os
dKiFTM9TYZoOdKGIBIA0EbrsTk6mzfbL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org