Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91A109306203E9750B3E069A581DA2CCB36E009F.cer
File:                     91A109306203E9750B3E069A581DA2CCB36E009F.cer (raw, json)
Hash identifier:          Q0Ed6ozuesQdToYIRrsGLApcD9w9hDq63pSCghYfByg=
Subject key identifier:   91:A1:09:30:62:03:E9:75:0B:3E:06:9A:58:1D:A2:CC:B3:6E:00:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       338C200C950353C9CAF1F9D450B9A9963983914B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1/91A109306203E9750B3E069A581DA2CCB36E009F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Feb 2023 23:47:28 +0000
Certificate not after:    Mon 12 Feb 2024 23:52:28 +0000
Subordinate resources:    AS: 53097
                          IP: 187.63.208.0/20
                          IP: 2804:3190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8c:20:0c:95:03:53:c9:ca:f1:f9:d4:50:b9:a9:96:39:83:91:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 23:47:28 2023 GMT
            Not After : Feb 12 23:52:28 2024 GMT
        Subject: CN=91A109306203E9750B3E069A581DA2CCB36E009F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:79:23:1e:cf:e5:bf:8a:c2:90:50:b7:ff:
                    ae:b7:a0:f5:a9:fe:15:ed:70:2c:5f:d5:aa:52:a9:
                    44:a8:d7:cb:af:95:70:2d:f0:f7:d4:ca:f0:44:6a:
                    72:cb:9b:8a:6a:e2:59:27:6b:53:e9:f2:8a:74:a0:
                    0e:17:6c:79:9b:75:e0:d0:d2:76:14:77:e4:db:a2:
                    83:67:21:0f:4b:bf:d4:c6:0e:b0:e3:a3:ae:3e:95:
                    a9:2c:17:f5:37:f3:ed:b7:b2:f9:af:f7:8f:58:23:
                    08:6e:0b:b5:ce:15:d7:65:6b:9f:80:e5:9b:18:5f:
                    9f:0f:4a:9e:ff:49:5a:4f:a5:cf:2a:ea:07:45:f2:
                    c0:f6:87:11:92:6c:76:de:4e:a7:ce:87:85:ea:fd:
                    c1:02:cd:42:c5:f4:ed:cd:27:00:b8:39:ac:18:d7:
                    f6:06:5d:2d:68:4f:d6:c9:5a:d2:08:b6:83:78:79:
                    02:2c:67:34:83:de:79:ac:3a:f6:8b:b5:49:3e:5f:
                    e4:93:13:05:17:4c:e1:70:71:06:f6:b7:80:0a:2f:
                    65:fe:a8:5a:fa:79:31:ae:0d:f4:9c:94:68:e9:31:
                    d3:88:7a:c2:9e:53:a9:be:ab:14:4d:17:44:e6:1f:
                    cb:a4:d7:96:c0:aa:7f:03:ed:82:f9:09:bf:d4:49:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:A1:09:30:62:03:E9:75:0B:3E:06:9A:58:1D:A2:CC:B3:6E:00:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/1/91A109306203E9750B3E069A581DA2CCB36E009F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.208.0/20
                IPv6:
                  2804:3190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53097

    Signature Algorithm: sha256WithRSAEncryption
         90:01:e2:3b:bc:85:8a:aa:91:8c:bf:22:d4:52:63:5e:68:a2:
         63:09:bc:aa:22:a4:cd:1e:dc:48:e0:19:58:f5:55:00:49:90:
         aa:1f:56:ca:9e:1e:ce:59:dd:d3:8c:aa:37:1b:10:ce:3b:1d:
         f5:1b:4e:38:92:4c:21:92:c7:50:9f:31:80:9c:4f:ed:70:25:
         30:24:d5:08:45:79:46:9f:0e:6c:f6:91:cd:7f:71:6d:28:3d:
         54:b2:65:9a:00:7a:f4:73:9c:91:02:07:55:0e:a8:66:9a:34:
         62:a9:be:2c:06:fa:d4:56:7b:e1:91:11:6b:f0:87:53:1c:e9:
         9c:64:bb:91:95:f4:32:8b:db:22:68:20:78:3b:be:0e:67:97:
         76:3e:21:08:79:a3:61:84:ce:df:e7:e9:da:47:41:50:75:b0:
         45:75:eb:e3:12:68:04:a5:d5:83:42:fc:8f:11:5c:03:4c:47:
         29:3b:22:63:27:61:81:f0:5c:91:d9:e3:66:c6:b2:3b:81:0c:
         a9:1e:c2:9c:1d:85:26:80:ad:3c:63:de:0c:85:9c:bb:96:08:
         03:af:c2:bd:21:86:ee:36:40:67:d5:1f:8f:dc:35:2b:ed:be:
         38:64:81:f6:0d:d4:c7:30:dd:29:b7:67:a2:c2:24:b9:54:88:
         fe:7b:be:74
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUM4wgDJUDU8nK8fnUULmpljmDkUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMTMyMzQ3MjhaFw0yNDAyMTIyMzUyMjhaMDMxMTAvBgNV
BAMTKDkxQTEwOTMwNjIwM0U5NzUwQjNFMDY5QTU4MURBMkNDQjM2RTAwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92XkjHs/lv4rCkFC3/663oPWp
/hXtcCxf1apSqUSo18uvlXAt8PfUyvBEanLLm4pq4lkna1Pp8op0oA4XbHmbdeDQ
0nYUd+TbooNnIQ9Lv9TGDrDjo64+laksF/U38+23svmv949YIwhuC7XOFddla5+A
5ZsYX58PSp7/SVpPpc8q6gdF8sD2hxGSbHbeTqfOh4Xq/cECzULF9O3NJwC4OawY
1/YGXS1oT9bJWtIItoN4eQIsZzSD3nmsOvaLtUk+X+STEwUXTOFwcQb2t4AKL2X+
qFr6eTGuDfSclGjpMdOIesKeU6m+qxRNF0TmH8uk15bAqn8D7YL5Cb/USeBNAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRoQkwYgPpdQs+
BppYHaLMs24AnzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CRFJjVVdOYXlHUTl0N01uUkJUVkFZVFJrM2M0Vm1kTFNh
NEg3S2dYYWhQci8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CRFJjVVdOYXlHUTl0N01uUkJUVkFZVFJrM2M0Vm1kTFNh
NEg3S2dYYWhQci8xLzkxQTEwOTMwNjIwM0U5NzUwQjNFMDY5QTU4MURBMkNDQjM2
RTAwOUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLs/0DANBAIAAjAHAwUA
KAQxkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAz2kwDQYJKoZIhvcNAQELBQAD
ggEBAJAB4ju8hYqqkYy/ItRSY15oomMJvKoipM0e3EjgGVj1VQBJkKofVsqeHs5Z
3dOMqjcbEM47HfUbTjiSTCGSx1CfMYCcT+1wJTAk1QhFeUafDmz2kc1/cW0oPVSy
ZZoAevRznJECB1UOqGaaNGKpviwG+tRWe+GREWvwh1Mc6Zxku5GV9DKL2yJoIHg7
vg5nl3Y+IQh5o2GEzt/n6dpHQVB1sEV16+MSaASl1YNC/I8RXANMRyk7ImMnYYHw
XJHZ42bGsjuBDKkewpwdhSaArTxj3gyFnLuWCAOvwr0hhu42QGfVH4/cNSvtvjhk
gfYN1Mcw3Sm3Z6LCJLlUiP57vnQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org