Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/909FE779ECD4DD20FE330FB466BF49482B50B00C.cer
File:                     909FE779ECD4DD20FE330FB466BF49482B50B00C.cer (raw, json)
Hash identifier:          w4/+t6S7oRaxAe7FY1W1//Z+MUgTnsPWGvnVNUaFb5g=
Subject key identifier:   90:9F:E7:79:EC:D4:DD:20:FE:33:0F:B4:66:BF:49:48:2B:50:B0:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F2A9DB6EB7841DC354FA39AC215612FC08CF346
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/909FE779ECD4DD20FE330FB466BF49482B50B00C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Oct 2021 20:33:42 +0000
Certificate not after:    Wed 26 Oct 2022 20:38:42 +0000
Subordinate resources:    AS: 268670
                          IP: 45.163.132.0/22
                          IP: 2804:54cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2a:9d:b6:eb:78:41:dc:35:4f:a3:9a:c2:15:61:2f:c0:8c:f3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 20:33:42 2021 GMT
            Not After : Oct 26 20:38:42 2022 GMT
        Subject: CN=909FE779ECD4DD20FE330FB466BF49482B50B00C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:a2:ff:ab:d6:3b:52:5f:91:17:d2:d2:c5:
                    ca:e7:e5:18:62:3f:77:d8:f0:ee:96:48:53:37:ce:
                    4a:e3:11:48:32:6b:90:d8:f5:eb:8c:d0:93:4c:1a:
                    11:6e:13:c9:05:ab:18:7a:21:22:b8:01:67:ef:cb:
                    6f:72:b4:66:14:01:aa:13:a2:20:c1:22:be:76:fc:
                    c5:63:84:99:2d:47:cd:f5:7b:d0:0b:d5:ff:31:9b:
                    63:22:f6:71:cf:6d:57:98:bf:8f:f6:44:3f:24:db:
                    bd:63:56:2a:ff:59:ae:2b:1c:b2:59:22:73:5b:e2:
                    92:d9:1c:c4:7c:09:37:a9:d7:d3:e0:47:9b:23:17:
                    ea:8b:e8:19:4f:74:2d:f6:1b:b0:95:53:fd:88:3b:
                    ae:eb:e9:69:65:ba:72:a0:fc:fd:5d:fd:51:b6:9c:
                    41:71:ae:ba:39:ee:ca:e3:c2:65:bb:e6:e9:0c:07:
                    91:19:11:53:c8:26:19:32:7f:14:d7:70:a3:65:df:
                    55:b5:8d:e6:89:d6:aa:8e:38:3f:df:d6:dc:02:57:
                    0e:4b:d7:ea:4b:05:7c:5f:a4:94:bf:b4:1d:ef:d9:
                    54:fd:db:2c:ac:84:fc:91:68:75:a3:45:93:c1:df:
                    61:b7:24:68:11:0e:df:45:ab:c4:86:91:9f:b1:55:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:9F:E7:79:EC:D4:DD:20:FE:33:0F:B4:66:BF:49:48:2B:50:B0:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/909FE779ECD4DD20FE330FB466BF49482B50B00C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.132.0/22
                IPv6:
                  2804:54cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268670

    Signature Algorithm: sha256WithRSAEncryption
         a1:45:83:69:31:a9:38:95:bf:dd:44:65:45:d8:f8:fb:3f:91:
         04:83:36:8d:d1:dc:6b:ea:48:3d:42:40:82:0c:57:ed:66:f8:
         d8:34:36:f4:58:3b:bf:00:e9:5a:41:01:1f:83:4b:84:e2:c0:
         85:f3:55:56:73:d9:49:9d:fd:89:40:9c:f7:2f:4a:23:18:36:
         c0:82:62:3e:84:9a:54:d1:b4:b3:2f:66:53:00:14:d0:72:19:
         11:95:d9:9c:50:9b:14:0a:26:82:6d:24:e8:40:a3:a3:eb:1d:
         ca:2c:cc:68:5d:76:44:13:87:c0:e4:8a:ff:f0:ec:c3:40:6c:
         02:63:80:ac:9e:77:47:24:f3:f3:d8:9c:90:ad:42:ed:c7:e5:
         dd:a9:f1:56:3f:97:dd:93:ff:8b:9d:68:aa:87:31:e6:15:af:
         d9:d9:1b:87:b9:cf:81:c0:e3:f1:4e:52:7d:11:0c:3c:00:84:
         75:d0:ea:86:9d:70:bd:c7:bf:2c:c3:a0:68:b3:59:e3:05:ec:
         45:92:05:7e:ed:e7:72:a3:65:44:ab:37:10:fc:df:d4:84:2a:
         f0:89:08:ea:58:7f:70:4e:dc:ce:e8:95:6f:24:6e:9b:85:40:
         57:84:f7:ef:8f:d1:5e:af:ae:2e:f7:06:13:f9:b1:ca:2e:3f:
         ad:c5:8b:9a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUfyqdtut4Qdw1T6OawhVhL8CM80YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEwMjcyMDMzNDJaFw0yMjEwMjYyMDM4NDJaMDMxMTAvBgNV
BAMTKDkwOUZFNzc5RUNENEREMjBGRTMzMEZCNDY2QkY0OTQ4MkI1MEIwMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7KL/q9Y7Ul+RF9LSxcrn5Rhi
P3fY8O6WSFM3zkrjEUgya5DY9euM0JNMGhFuE8kFqxh6ISK4AWfvy29ytGYUAaoT
oiDBIr52/MVjhJktR831e9AL1f8xm2Mi9nHPbVeYv4/2RD8k271jVir/Wa4rHLJZ
InNb4pLZHMR8CTep19PgR5sjF+qL6BlPdC32G7CVU/2IO67r6WllunKg/P1d/VG2
nEFxrro57srjwmW75ukMB5EZEVPIJhkyfxTXcKNl31W1jeaJ1qqOOD/f1twCVw5L
1+pLBXxfpJS/tB3v2VT92yyshPyRaHWjRZPB32G3JGgRDt9Fq8SGkZ+xVU+3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQn+d57NTdIP4z
D7Rmv0lIK1CwDDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BOXJGYktveWN5OXc2eUIyZkt2S21Va3VHUlIzdkRwa05O
OXF4dTRvZkZUOS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BOXJGYktveWN5OXc2eUIyZkt2S21Va3VHUlIzdkRwa05O
OXF4dTRvZkZUOS8wLzkwOUZFNzc5RUNENEREMjBGRTMzMEZCNDY2QkY0OTQ4MkI1
MEIwMEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2jhDANBAIAAjAHAwUA
KARUzDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGX4wDQYJKoZIhvcNAQELBQAD
ggEBAKFFg2kxqTiVv91EZUXY+Ps/kQSDNo3R3GvqSD1CQIIMV+1m+Ng0NvRYO78A
6VpBAR+DS4TiwIXzVVZz2Umd/YlAnPcvSiMYNsCCYj6EmlTRtLMvZlMAFNByGRGV
2ZxQmxQKJoJtJOhAo6PrHcoszGhddkQTh8Dkiv/w7MNAbAJjgKyed0ck8/PYnJCt
Qu3H5d2p8VY/l92T/4udaKqHMeYVr9nZG4e5z4HA4/FOUn0RDDwAhHXQ6oadcL3H
vyzDoGizWeMF7EWSBX7t53KjZUSrNxD839SEKvCJCOpYf3BO3M7olW8kbpuFQFeE
9++P0V6vri73BhP5scouP63Fi5o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org