Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.cer
File:                     8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.cer (raw, json)
Hash identifier:          QKMNKUhk8VqQPjmbuHF+xIQaXy3/J0zjySDApEHuzX0=
Subject key identifier:   8D:9B:44:97:46:24:12:C0:58:5C:F6:E4:DC:68:BB:81:9B:6D:1E:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E57B8CC07257C848258D7407367449310401A41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 18:35:11 +0000
Certificate not after:    Wed 18 Sep 2024 18:40:11 +0000
Subordinate resources:    AS: 265097
                          IP: 170.233.252.0/22
                          IP: 2804:32c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:57:b8:cc:07:25:7c:84:82:58:d7:40:73:67:44:93:10:40:1a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 18:35:11 2023 GMT
            Not After : Sep 18 18:40:11 2024 GMT
        Subject: CN=8D9B4497462412C0585CF6E4DC68BB819B6D1E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c8:28:67:ea:8d:64:5d:79:03:2b:a9:8d:35:
                    d6:93:1c:65:55:2d:e7:2a:12:c9:87:0b:2f:c4:cc:
                    54:96:6c:4e:ff:01:8f:54:ec:2f:e4:5f:d1:bf:0c:
                    33:06:c9:bc:26:41:cd:d7:79:6d:4d:26:c4:73:32:
                    71:36:67:ac:c1:b2:09:5f:4b:af:17:a0:f2:e5:13:
                    a0:70:61:0b:82:c1:bd:ad:71:39:b6:c1:77:4c:a4:
                    c4:41:be:73:90:ff:5b:be:53:cb:43:a3:07:7c:79:
                    14:40:8e:27:77:80:c5:c3:95:2a:81:ea:76:b1:cb:
                    f0:86:47:7f:10:40:06:59:f4:b2:81:f6:15:dc:bb:
                    3d:3f:58:5b:4c:cf:38:21:c8:79:20:7d:5c:1f:0a:
                    d0:69:53:c4:09:21:a2:c2:38:68:ca:8f:ea:b1:4a:
                    88:19:91:61:4e:30:4e:51:e4:9c:be:73:f5:04:69:
                    50:fe:d0:af:b9:8c:0f:08:03:1f:28:15:fa:9c:77:
                    23:be:ba:96:42:a2:70:a4:e3:6e:75:4c:7d:bf:71:
                    60:95:e7:a2:c6:62:da:57:62:75:22:e5:d3:ae:a2:
                    99:88:cd:6a:ca:75:2f:a8:19:cb:7b:4b:de:3f:42:
                    7f:46:a9:5d:b7:b4:8b:a7:3e:ad:03:a9:1b:46:63:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:9B:44:97:46:24:12:C0:58:5C:F6:E4:DC:68:BB:81:9B:6D:1E:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.252.0/22
                IPv6:
                  2804:32c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265097

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:cd:0e:ad:c3:40:b7:4b:43:7e:4d:6e:ce:57:38:8f:e2:
         d8:a1:68:ff:94:6b:f8:01:ee:17:5b:3f:c4:c2:39:f6:ee:93:
         01:2d:82:a5:8a:b7:81:05:7b:3b:2a:5d:43:19:27:24:e1:de:
         85:70:c1:00:0e:5b:66:0e:57:56:f7:47:9b:df:ff:b8:8e:75:
         1d:99:3a:05:d1:d8:ab:ef:6c:bd:94:2a:1b:f6:90:f6:0e:48:
         15:85:ec:84:0b:a1:d1:63:66:2b:90:67:34:dc:9d:a3:93:45:
         36:c9:07:27:48:74:b2:6c:41:4d:9a:18:a3:fd:10:db:82:80:
         ad:1f:44:ad:6e:b9:53:82:00:ee:02:e0:69:76:04:22:4e:6a:
         ac:2c:17:31:20:13:f1:d8:e3:dc:ff:c9:21:85:03:a0:7d:22:
         22:ca:08:ef:e7:ad:14:c3:85:02:ad:77:62:95:e0:ea:50:ba:
         8c:81:29:fe:e9:ca:3b:65:58:43:7c:a0:f6:c5:8c:c6:1d:a0:
         31:e6:cb:07:13:c5:ac:1f:8c:5c:3c:88:5d:97:64:c9:b2:24:
         aa:c5:7f:31:6c:77:2e:8d:b1:4d:b7:67:e1:49:14:62:a5:e2:
         2b:ba:68:b5:de:46:94:64:4a:1d:ad:d3:dd:30:dd:d8:67:42:
         1f:e7:78:5e
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUDle4zAclfISCWNdAc2dEkxBAGkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjAxODM1MTFaFw0yNDA5MTgxODQwMTFaMDMxMTAvBgNV
BAMTKDhEOUI0NDk3NDYyNDEyQzA1ODVDRjZFNERDNjhCQjgxOUI2RDFFMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1yChn6o1kXXkDK6mNNdaTHGVV
LecqEsmHCy/EzFSWbE7/AY9U7C/kX9G/DDMGybwmQc3XeW1NJsRzMnE2Z6zBsglf
S68XoPLlE6BwYQuCwb2tcTm2wXdMpMRBvnOQ/1u+U8tDowd8eRRAjid3gMXDlSqB
6naxy/CGR38QQAZZ9LKB9hXcuz0/WFtMzzghyHkgfVwfCtBpU8QJIaLCOGjKj+qx
SogZkWFOME5R5Jy+c/UEaVD+0K+5jA8IAx8oFfqcdyO+upZConCk4251TH2/cWCV
56LGYtpXYnUi5dOuopmIzWrKdS+oGct7S94/Qn9GqV23tIunPq0DqRtGY5K3AgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNm0SXRiQSwFhc
9uTcaLuBm20eDTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IWVFoNm12UHNBVHFNZ1BSS1ZXMnN4SHhkWXk5NWJ0aEtw
TW9UV3FtUFVxLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IWVFoNm12UHNBVHFNZ1BSS1ZXMnN4SHhkWXk5NWJ0aEtw
TW9UV3FtUFVxLzAvOEQ5QjQ0OTc0NjI0MTJDMDU4NUNGNkU0REM2OEJCODE5QjZE
MUUwRC5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqun8MA0EAgACMAcDBQAo
BDLAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQLiTANBgkqhkiG9w0BAQsFAAOC
AQEAqXXNDq3DQLdLQ35Nbs5XOI/i2KFo/5Rr+AHuF1s/xMI59u6TAS2CpYq3gQV7
OypdQxknJOHehXDBAA5bZg5XVvdHm9//uI51HZk6BdHYq+9svZQqG/aQ9g5IFYXs
hAuh0WNmK5BnNNydo5NFNskHJ0h0smxBTZoYo/0Q24KArR9ErW65U4IA7gLgaXYE
Ik5qrCwXMSAT8djj3P/JIYUDoH0iIsoI7+etFMOFAq13YpXg6lC6jIEp/unKO2VY
Q3yg9sWMxh2gMebLBxPFrB+MXDyIXZdkybIkqsV/MWx3Lo2xTbdn4UkUYqXiK7po
td5GlGRKHa3T3TDd2GdCH+d4Xg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org