Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.cer
File:                     9153E8AC57500B9F6FAD7507DD47F690C821A068.cer (raw, json)
Hash identifier:          UWeuK15iaakSS0aF5q1XLjjks7Z55emKgDwyI737jL0=
Subject key identifier:   91:53:E8:AC:57:50:0B:9F:6F:AD:75:07:DD:47:F6:90:C8:21:A0:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17BCDDDC19F28F13E42436C592A932A08313CC0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 18:09:39 +0000
Certificate not after:    Thu 06 Mar 2025 18:14:39 +0000
Subordinate resources:    AS: 270437
                          IP: 200.11.104.0/22
                          IP: 2804:6bf8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bc:dd:dc:19:f2:8f:13:e4:24:36:c5:92:a9:32:a0:83:13:cc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 18:09:39 2024 GMT
            Not After : Mar  6 18:14:39 2025 GMT
        Subject: CN=9153E8AC57500B9F6FAD7507DD47F690C821A068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:14:b1:b7:1b:19:d7:d4:24:08:4e:09:18:
                    aa:23:ea:e0:3c:3b:83:f7:17:88:14:b9:8e:05:ea:
                    0e:fc:ee:18:f3:a4:19:24:b5:50:9a:e2:02:d5:74:
                    6c:d0:cb:ec:46:92:ad:80:61:35:f2:03:e8:77:cb:
                    56:a2:cd:93:9b:36:e7:d6:da:62:ea:b0:80:f6:ce:
                    97:f3:d9:65:96:2a:4c:48:e4:e6:f3:10:bd:7a:48:
                    b7:f7:c1:22:c9:c5:67:0b:4b:21:20:87:9e:43:0d:
                    77:e2:86:1c:d6:8c:23:8d:52:0d:65:8a:f9:e1:35:
                    47:81:c2:ed:7c:f3:a7:f0:25:61:72:de:42:c4:91:
                    27:c1:3a:c6:78:50:c3:e7:01:f2:60:0d:41:e3:a6:
                    5f:0e:aa:77:e8:b7:d2:b0:a0:eb:33:86:fe:25:67:
                    b7:9e:a3:4b:e8:2b:4a:3f:9e:7c:c1:58:56:92:0e:
                    71:db:93:44:be:48:78:db:94:1b:f3:cf:f6:45:f3:
                    d8:1c:6b:9c:38:36:f3:b0:72:bc:85:9b:6f:34:15:
                    79:eb:ad:28:7c:4d:6e:84:72:82:2c:d0:2f:98:ee:
                    aa:17:b3:d1:4f:5e:de:47:a2:ed:6c:b9:3a:fe:b5:
                    d6:06:d2:0e:8e:09:f1:68:30:74:69:96:15:37:7c:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:53:E8:AC:57:50:0B:9F:6F:AD:75:07:DD:47:F6:90:C8:21:A0:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.104.0/22
                IPv6:
                  2804:6bf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270437

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:e4:e1:a4:05:e6:36:17:8a:b1:28:62:63:ef:d6:8a:42:
         f7:4e:44:1e:af:c0:d6:29:3b:51:f7:9e:d9:5c:d8:6f:fe:8f:
         e3:12:4e:20:84:a2:47:11:12:ec:f4:36:d1:51:43:0c:a8:53:
         a6:ea:e3:96:dd:d4:79:ad:8e:3a:e2:ca:98:77:24:46:b1:97:
         31:de:b9:65:4c:c6:b0:37:96:58:ed:0d:c9:36:39:5c:60:cd:
         cc:88:ed:f0:63:ac:33:48:bd:60:6d:0e:3d:86:3d:c2:be:cd:
         50:b7:e2:22:74:0a:35:71:ae:cf:fd:c3:df:ea:c3:38:94:9e:
         1d:39:47:f3:9c:1d:c3:86:3d:ec:71:36:a9:fe:4d:bf:1a:16:
         0a:ca:fe:95:ce:31:af:c1:36:09:2e:39:b5:8c:f4:31:85:9b:
         21:ef:34:a2:74:3c:67:0e:7c:0a:cb:34:58:34:ce:a6:75:85:
         cd:50:9e:69:46:af:48:61:73:50:15:ff:f5:27:e4:f9:dc:f7:
         00:8f:1c:fb:57:71:29:1b:64:f8:7e:9f:be:25:ad:6b:be:a3:
         90:72:8a:1d:14:b0:2f:18:20:7e:41:2d:be:d8:70:0b:89:00:
         65:2f:e0:a5:b3:a3:40:a4:6f:39:14:b0:ad:73:af:f2:43:01:
         f5:eb:87:6c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUF7zd3BnyjxPkJDbFkqkyoIMTzA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDcxODA5MzlaFw0yNTAzMDYxODE0MzlaMDMxMTAvBgNV
BAMTKDkxNTNFOEFDNTc1MDBCOUY2RkFENzUwN0RENDdGNjkwQzgyMUEwNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizRSxtxsZ19QkCE4JGKoj6uA8
O4P3F4gUuY4F6g787hjzpBkktVCa4gLVdGzQy+xGkq2AYTXyA+h3y1aizZObNufW
2mLqsID2zpfz2WWWKkxI5ObzEL16SLf3wSLJxWcLSyEgh55DDXfihhzWjCONUg1l
ivnhNUeBwu1886fwJWFy3kLEkSfBOsZ4UMPnAfJgDUHjpl8Oqnfot9KwoOszhv4l
Z7eeo0voK0o/nnzBWFaSDnHbk0S+SHjblBvzz/ZF89gca5w4NvOwcryFm280FXnr
rSh8TW6EcoIs0C+Y7qoXs9FPXt5Hou1suTr+tdYG0g6OCfFoMHRplhU3fDMhAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRU+isV1ALn2+t
dQfdR/aQyCGgaDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82UzYxYzdxZnE3c0JHeHZxYTQ0N2huVTJma21tTXdLNkpS
SEFrNlpnckhrdS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNlM2MWM3cWZxN3NCR3h2cWE0NDdoblUyZmttbU13SzZK
UkhBazZaZ3JIa3UvMC85MTUzRThBQzU3NTAwQjlGNkZBRDc1MDdERDQ3RjY5MEM4
MjFBMDY4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIC2gwDQQCAAIwBwMF
ACgEa/gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCBlMA0GCSqGSIb3DQEBCwUA
A4IBAQBUOuThpAXmNheKsShiY+/WikL3TkQer8DWKTtR957ZXNhv/o/jEk4ghKJH
ERLs9DbRUUMMqFOm6uOW3dR5rY464sqYdyRGsZcx3rllTMawN5ZY7Q3JNjlcYM3M
iO3wY6wzSL1gbQ49hj3Cvs1Qt+IidAo1ca7P/cPf6sM4lJ4dOUfznB3Dhj3scTap
/k2/GhYKyv6VzjGvwTYJLjm1jPQxhZsh7zSidDxnDnwKyzRYNM6mdYXNUJ5pRq9I
YXNQFf/1J+T53PcAjxz7V3EpG2T4fp++Ja1rvqOQcoodFLAvGCB+QS2+2HALiQBl
L+Cls6NApG85FLCtc6/yQwH164ds
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org