Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.cer
File:                     32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.cer (raw, json)
Hash identifier:          h/OYVYzOaiU8QbTlwXsh3PEQ2SGgHXzTqCRPeqKidlQ=
Subject key identifier:   32:E9:E1:0E:22:7A:54:5A:9E:90:5D:79:01:D9:BA:92:A9:F7:C7:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39FB7DE75CB4EF0277EE6AA4EE2B6B7491AE1290
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 17:41:26 +0000
Certificate not after:    Tue 29 Oct 2024 17:46:26 +0000
Subordinate resources:    AS: 273616
                          IP: 2804:89a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fb:7d:e7:5c:b4:ef:02:77:ee:6a:a4:ee:2b:6b:74:91:ae:12:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 31 17:41:26 2023 GMT
            Not After : Oct 29 17:46:26 2024 GMT
        Subject: CN=32E9E10E227A545A9E905D7901D9BA92A9F7C7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:b1:eb:39:94:6e:6b:fe:5e:13:48:3c:4f:
                    95:f5:08:88:78:af:a4:af:f9:92:64:fa:9c:7d:5a:
                    17:10:94:9f:a6:be:ac:c4:e3:da:73:4c:0b:50:47:
                    8d:fd:c3:ca:76:a3:20:5f:30:03:68:86:5a:05:bf:
                    34:53:a7:b2:7f:0f:4c:ac:17:e0:08:28:31:42:b2:
                    73:02:cb:10:99:7a:3e:72:db:36:b0:7e:67:14:a2:
                    22:0c:23:59:d2:05:2e:5c:c3:38:b4:7d:af:dd:1c:
                    a0:60:75:b5:fc:62:7b:9c:3e:47:65:94:91:ca:45:
                    04:bc:55:67:72:eb:96:05:56:0b:72:81:c4:44:63:
                    ee:70:21:03:82:a0:7a:bb:99:d2:09:b7:11:54:16:
                    78:34:a8:80:b6:c4:b2:0a:a3:e7:d6:e0:18:eb:6f:
                    65:53:e9:79:b4:a1:b2:2f:92:3f:d4:53:60:86:0a:
                    64:a5:b2:72:15:f7:9c:41:79:51:c0:fc:5e:a2:a9:
                    fb:df:63:64:64:af:45:90:66:c1:a1:0e:1e:a4:63:
                    49:5d:0b:93:c0:ae:2d:f4:e5:06:0c:eb:8e:0d:80:
                    c8:f8:44:70:37:98:63:fa:0e:7a:da:a3:d2:29:99:
                    94:c5:0c:df:16:66:ad:4f:26:d7:1b:39:a0:90:c9:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:E9:E1:0E:22:7A:54:5A:9E:90:5D:79:01:D9:BA:92:A9:F7:C7:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/0/32E9E10E227A545A9E905D7901D9BA92A9F7C7E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273616

    Signature Algorithm: sha256WithRSAEncryption
         af:a5:09:cf:10:de:4d:65:e6:d8:f0:cf:90:fd:d0:e2:7a:e5:
         74:90:67:aa:65:6d:cb:12:aa:56:b6:6d:48:dc:91:30:4c:ee:
         48:5a:5c:a9:5b:8b:b0:a8:1d:4d:2e:ad:5c:31:4c:ec:33:04:
         ba:dd:21:8e:02:74:04:69:f6:b5:79:91:4b:e4:26:2d:0f:1e:
         39:63:fd:d9:e8:9b:0c:85:52:e8:13:33:30:11:99:d2:7c:c2:
         e0:c2:8e:41:2a:75:ce:cb:30:a6:bd:9b:29:c9:c5:72:cf:6d:
         8f:45:e0:87:c5:6f:ff:a1:16:22:53:c4:37:60:31:e2:f9:63:
         fe:d7:28:4a:0d:ea:0b:70:1a:9c:76:83:ae:15:6d:64:7c:fc:
         62:e5:98:98:73:45:e8:2d:11:4c:83:cb:ba:d8:05:fc:2f:24:
         54:4f:01:f5:88:f8:1b:21:9b:70:2c:d3:17:c2:02:78:5b:7d:
         5b:ad:2a:ac:b4:e1:7c:b2:8f:44:de:3e:24:01:38:5f:07:ea:
         c6:98:af:23:43:50:6c:da:9a:3b:ab:8c:54:e3:1c:a9:0e:4f:
         86:ef:6e:ba:a8:9b:d9:9b:88:65:1b:07:b2:cd:74:a3:c3:0a:
         9a:6a:96:a4:2a:15:86:32:b6:08:3e:db:6c:8c:d2:57:89:51:
         d9:b6:b1:85
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIUOft951y07wJ37mqk7itrdJGuEpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMzExNzQxMjZaFw0yNDEwMjkxNzQ2MjZaMDMxMTAvBgNV
BAMTKDMyRTlFMTBFMjI3QTU0NUE5RTkwNUQ3OTAxRDlCQTkyQTlGN0M3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CbHrOZRua/5eE0g8T5X1CIh4
r6Sv+ZJk+px9WhcQlJ+mvqzE49pzTAtQR439w8p2oyBfMANohloFvzRTp7J/D0ys
F+AIKDFCsnMCyxCZej5y2zawfmcUoiIMI1nSBS5cwzi0fa/dHKBgdbX8YnucPkdl
lJHKRQS8VWdy65YFVgtygcREY+5wIQOCoHq7mdIJtxFUFng0qIC2xLIKo+fW4Bjr
b2VT6Xm0obIvkj/UU2CGCmSlsnIV95xBeVHA/F6iqfvfY2Rkr0WQZsGhDh6kY0ld
C5PAri305QYM644NgMj4RHA3mGP6Dnrao9IpmZTFDN8WZq1PJtcbOaCQyemFAgMB
AAGjggMLMIIDBzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQy6eEOInpUWp6Q
XXkB2bqSqffH4DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9QWjg1UU5vempQOVN2aExIOXRvazJTV1FjbXZqUFJEc3Rt
emVZNE1zdFpCLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9QWjg1UU5vempQOVN2aExIOXRvazJTV1FjbXZqUFJEc3Rt
emVZNE1zdFpCLzAvMzJFOUUxMEUyMjdBNTQ1QTlFOTA1RDc5MDFEOUJBOTJBOUY3
QzdFMC5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKASJoDAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMELNAwDQYJKoZIhvcNAQELBQADggEBAK+lCc8Q3k1l5tjw
z5D90OJ65XSQZ6plbcsSqla2bUjckTBM7khaXKlbi7CoHU0urVwxTOwzBLrdIY4C
dARp9rV5kUvkJi0PHjlj/dnomwyFUugTMzARmdJ8wuDCjkEqdc7LMKa9mynJxXLP
bY9F4IfFb/+hFiJTxDdgMeL5Y/7XKEoN6gtwGpx2g64VbWR8/GLlmJhzRegtEUyD
y7rYBfwvJFRPAfWI+Bshm3As0xfCAnhbfVutKqy04Xyyj0TePiQBOF8H6saYryND
UGzamjurjFTjHKkOT4bvbrqom9mbiGUbB7LNdKPDCppqlqQqFYYytgg+22yM0leJ
Udm2sYU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org