Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/895CE9CC028EB09A717FF63AB3D6805F54210796.cer
File:                     895CE9CC028EB09A717FF63AB3D6805F54210796.cer (raw, json)
Hash identifier:          fZhQ6BjQdvKKjMshNCsUtmDhnP1TKB6swOe5n2DaOXI=
Subject key identifier:   89:5C:E9:CC:02:8E:B0:9A:71:7F:F6:3A:B3:D6:80:5F:54:21:07:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D6F4EA3698F74AD3FA214631355928082A108C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/895CE9CC028EB09A717FF63AB3D6805F54210796.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 15:18:57 +0000
Certificate not after:    Wed 12 Feb 2025 15:23:57 +0000
Subordinate resources:    AS: 61785
                          IP: 201.131.152.0/22
                          IP: 2804:194c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6f:4e:a3:69:8f:74:ad:3f:a2:14:63:13:55:92:80:82:a1:08:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 15:18:57 2024 GMT
            Not After : Feb 12 15:23:57 2025 GMT
        Subject: CN=895CE9CC028EB09A717FF63AB3D6805F54210796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:b2:ad:8c:a4:27:2c:69:eb:6f:19:94:27:
                    c1:7d:c8:de:bb:df:ee:f9:f4:08:bd:98:86:89:6d:
                    fd:e2:f9:84:ef:c2:af:1d:fe:ea:f9:8b:ca:ef:74:
                    86:33:d6:a0:98:62:0f:67:43:52:ae:06:95:d0:34:
                    0b:c5:a6:99:36:06:07:e5:a1:c8:ef:aa:29:7a:29:
                    36:e4:c9:64:99:9c:a2:da:ec:51:69:bb:54:85:1a:
                    eb:e4:da:a2:a9:6f:10:ee:b0:16:28:80:1a:dd:65:
                    6d:82:5b:11:e7:da:94:9f:3f:9d:30:e3:39:4b:81:
                    c7:6e:36:a3:fb:55:8b:3e:40:c3:42:ef:36:e4:c1:
                    68:3f:d2:af:12:97:ab:53:5a:cc:1a:73:ec:32:4e:
                    c0:32:4c:07:cc:f0:d2:21:8b:dd:86:f6:ca:56:c4:
                    45:c0:5a:30:a1:ef:77:18:77:f7:d6:12:52:25:ff:
                    5d:6a:ac:39:98:52:37:d1:3d:9e:4a:aa:46:21:35:
                    d1:ce:c1:59:0c:42:cd:fe:9f:ea:fd:30:85:3e:09:
                    a2:7c:30:b3:86:19:72:6a:cc:d9:31:02:c9:79:df:
                    5d:7f:8c:fb:13:7e:98:ab:95:e9:d7:3d:c0:5c:55:
                    15:f1:0a:79:d7:5a:3f:77:8e:a6:8c:d8:47:8d:06:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:5C:E9:CC:02:8E:B0:9A:71:7F:F6:3A:B3:D6:80:5F:54:21:07:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/895CE9CC028EB09A717FF63AB3D6805F54210796.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22
                IPv6:
                  2804:194c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61785

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:e7:d4:93:e6:9b:77:54:59:68:bf:0a:5c:13:1d:e2:43:
         ad:d8:71:b0:46:5d:8c:b7:e6:4b:d3:b3:1d:f1:a7:d2:40:ad:
         0f:30:7f:78:36:60:43:68:1b:55:0e:30:3f:93:d0:4e:02:95:
         57:83:4a:1d:84:a5:8b:3c:17:40:c3:05:e6:33:77:2a:3f:84:
         22:82:6d:cd:c2:67:b6:2a:13:b8:fe:29:c8:49:47:8b:a2:50:
         f3:49:bf:53:d0:c4:d3:0e:f1:b0:c3:d3:c3:d9:03:e2:5c:b5:
         5b:e7:42:ea:3a:83:60:7d:92:dc:bb:41:5e:84:cb:87:b2:ce:
         68:03:84:cd:18:b9:69:49:b6:c2:06:d3:e4:06:cf:6e:ba:e2:
         a1:33:b1:f9:f5:5c:3b:ed:cd:77:0a:31:d1:0e:2a:7b:95:bd:
         3e:e7:9e:93:37:f0:9a:8c:54:52:70:e6:27:a1:59:d0:81:7f:
         00:dc:f9:8a:b8:e6:2e:95:f7:4d:49:58:eb:a5:2d:00:51:4c:
         b6:8f:11:80:97:10:fc:e5:4d:6f:93:7a:f7:e8:8e:4c:d1:7b:
         19:20:7d:a8:e2:87:6c:e2:3e:1d:d0:b0:e0:10:15:d9:8a:ba:
         da:2f:8f:cd:ed:96:1b:2c:dc:0a:d3:9b:43:b9:a2:6a:e4:8c:
         50:f0:d1:4b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTW9Oo2mPdK0/ohRjE1WSgIKhCMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTQxNTE4NTdaFw0yNTAyMTIxNTIzNTdaMDMxMTAvBgNV
BAMTKDg5NUNFOUNDMDI4RUIwOUE3MTdGRjYzQUIzRDY4MDVGNTQyMTA3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvC7KtjKQnLGnrbxmUJ8F9yN67
3+759Ai9mIaJbf3i+YTvwq8d/ur5i8rvdIYz1qCYYg9nQ1KuBpXQNAvFppk2Bgfl
ocjvqil6KTbkyWSZnKLa7FFpu1SFGuvk2qKpbxDusBYogBrdZW2CWxHn2pSfP50w
4zlLgcduNqP7VYs+QMNC7zbkwWg/0q8Sl6tTWswac+wyTsAyTAfM8NIhi92G9spW
xEXAWjCh73cYd/fWElIl/11qrDmYUjfRPZ5KqkYhNdHOwVkMQs3+n+r9MIU+CaJ8
MLOGGXJqzNkxAsl5311/jPsTfpirlenXPcBcVRXxCnnXWj93jqaM2EeNBjKzAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJXOnMAo6wmnF/
9jqz1oBfVCEHljAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CNHJQTkJYN3NwS3c5VkVGR3RzNWJHcmdNaGdZZ21wUTNT
NlFVZmRON3Y0NS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQjRyUE5CWDdzcEt3OVZFRkd0czViR3JnTWhnWWdtcFEz
UzZRVWZkTjd2NDUvMC84OTVDRTlDQzAyOEVCMDlBNzE3RkY2M0FCM0Q2ODA1RjU0
MjEwNzk2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALJg5gwDQQCAAIwBwMF
ACgEGUwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPFZMA0GCSqGSIb3DQEBCwUA
A4IBAQA59ufUk+abd1RZaL8KXBMd4kOt2HGwRl2Mt+ZL07Md8afSQK0PMH94NmBD
aBtVDjA/k9BOApVXg0odhKWLPBdAwwXmM3cqP4Qigm3Nwme2KhO4/inISUeLolDz
Sb9T0MTTDvGww9PD2QPiXLVb50LqOoNgfZLcu0FehMuHss5oA4TNGLlpSbbCBtPk
Bs9uuuKhM7H59Vw77c13CjHRDip7lb0+556TN/CajFRScOYnoVnQgX8A3PmKuOYu
lfdNSVjrpS0AUUy2jxGAlxD85U1vk3r36I5M0XsZIH2o4ods4j4d0LDgEBXZirra
L4/N7ZYbLNwK05tDuaJq5IxQ8NFL
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org