Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9409D35187AB6857D56CCFDE92B1C5258C57CC03.cer
File:                     9409D35187AB6857D56CCFDE92B1C5258C57CC03.cer (raw, json)
Hash identifier:          ajGpD7OeyfTgl0qvVNnbwF/93tzyw6bUv9BeoMtU/3A=
Subject key identifier:   94:09:D3:51:87:AB:68:57:D5:6C:CF:DE:92:B1:C5:25:8C:57:CC:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7990E80081B8CABD35B50EA4329E5899D1FE4161
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79HkdRaMcjGrrNx7hFU5qAMhVKSETRMYsa5GsJfrCqjQ/0/9409D35187AB6857D56CCFDE92B1C5258C57CC03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79HkdRaMcjGrrNx7hFU5qAMhVKSETRMYsa5GsJfrCqjQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Sep 2023 08:28:37 +0000
Certificate not after:    Sat 28 Sep 2024 08:33:37 +0000
Subordinate resources:    AS: 52624
                          IP: 177.124.140.0/22
                          IP: 186.251.92.0/22
                          IP: 2804:d68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:90:e8:00:81:b8:ca:bd:35:b5:0e:a4:32:9e:58:99:d1:fe:41:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 30 08:28:37 2023 GMT
            Not After : Sep 28 08:33:37 2024 GMT
        Subject: CN=9409D35187AB6857D56CCFDE92B1C5258C57CC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a6:f3:65:e0:eb:60:db:0f:cc:97:84:3b:d8:
                    37:bc:76:0b:09:d3:26:8f:5b:27:ee:9a:ce:e8:20:
                    6a:f4:67:8e:29:da:28:c0:a6:dc:3b:38:6c:c5:1b:
                    c8:c9:17:c7:cb:5c:cb:d6:f7:f2:d9:ec:b0:45:74:
                    51:5b:79:69:32:e2:8a:37:9b:f3:c8:61:67:61:08:
                    28:57:76:7a:e5:e8:63:76:a9:36:e6:a1:ea:5c:e8:
                    f2:af:b3:03:13:6d:78:60:2d:b0:33:d5:44:e0:76:
                    7a:cb:7a:d0:31:2b:91:b7:2d:88:0f:84:12:e4:14:
                    de:77:19:e3:7a:3b:ff:5e:da:6e:21:21:5e:72:42:
                    2f:55:69:79:83:00:3f:af:65:c9:ea:b4:8d:fd:8d:
                    60:48:05:bb:e3:07:be:4e:39:f3:88:62:58:53:0a:
                    0d:8c:6c:a1:70:92:a0:56:12:44:b3:c3:b9:c0:02:
                    23:15:19:f2:cb:85:a2:de:41:de:ad:6f:70:30:c8:
                    a0:b5:68:73:31:3b:ad:b0:4c:60:fe:00:47:77:78:
                    8c:21:72:f9:a9:e8:9a:a0:00:7b:ba:b0:c8:a2:0c:
                    18:69:f3:2f:b8:bd:04:95:bd:8b:89:15:14:12:57:
                    a1:88:1a:80:22:1d:8c:9c:b4:89:0f:79:18:57:20:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:09:D3:51:87:AB:68:57:D5:6C:CF:DE:92:B1:C5:25:8C:57:CC:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79HkdRaMcjGrrNx7hFU5qAMhVKSETRMYsa5GsJfrCqjQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79HkdRaMcjGrrNx7hFU5qAMhVKSETRMYsa5GsJfrCqjQ/0/9409D35187AB6857D56CCFDE92B1C5258C57CC03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.140.0/22
                  186.251.92.0/22
                IPv6:
                  2804:d68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52624

    Signature Algorithm: sha256WithRSAEncryption
         3e:5c:cd:66:f4:66:98:cd:be:fd:4f:6a:19:0a:81:32:aa:30:
         3f:a6:39:8b:61:57:df:34:de:1b:68:e3:71:52:10:01:b2:9f:
         f3:59:76:f4:e5:c3:3e:25:ed:d2:b4:d1:34:c9:3e:df:30:12:
         ec:4e:42:b6:df:63:a2:7a:13:35:d5:dd:a0:06:0f:7d:e6:b8:
         e3:69:56:69:54:5c:52:af:4f:fd:d5:78:b1:f6:a9:a6:0f:3e:
         d4:6c:e3:13:02:34:bf:fd:b6:ad:dd:49:d2:8a:24:0d:27:cd:
         b4:89:ac:98:84:5c:7a:19:b3:0b:f4:83:b3:2f:50:a0:36:fa:
         85:00:c1:52:02:16:49:8c:72:fe:ad:d9:15:8a:8d:75:29:1c:
         be:ed:7f:e4:75:b4:0e:68:ff:bd:96:2c:ee:44:7a:0f:27:a2:
         75:9b:70:1e:c9:95:1b:b4:85:26:52:17:fb:2a:b0:b7:6e:7b:
         58:78:61:7a:17:2f:76:f7:cd:f4:04:55:53:b3:ad:c6:87:41:
         5c:c9:8e:08:71:b1:97:8d:cd:34:5b:b7:8d:35:57:e2:56:45:
         3b:49:27:72:53:27:a6:91:98:62:9e:ae:34:33:21:bd:43:38:
         7a:f5:77:14:e8:6b:8a:8c:7d:a4:65:2d:cf:35:4e:b2:d1:0e:
         4e:3f:e8:86
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUeZDoAIG4yr01tQ6kMp5YmdH+QWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MzAwODI4MzdaFw0yNDA5MjgwODMzMzdaMDMxMTAvBgNV
BAMTKDk0MDlEMzUxODdBQjY4NTdENTZDQ0ZERTkyQjFDNTI1OEM1N0NDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopvNl4Otg2w/Ml4Q72De8dgsJ
0yaPWyfums7oIGr0Z44p2ijAptw7OGzFG8jJF8fLXMvW9/LZ7LBFdFFbeWky4oo3
m/PIYWdhCChXdnrl6GN2qTbmoepc6PKvswMTbXhgLbAz1UTgdnrLetAxK5G3LYgP
hBLkFN53GeN6O/9e2m4hIV5yQi9VaXmDAD+vZcnqtI39jWBIBbvjB75OOfOIYlhT
Cg2MbKFwkqBWEkSzw7nAAiMVGfLLhaLeQd6tb3AwyKC1aHMxO62wTGD+AEd3eIwh
cvmp6JqgAHu6sMiiDBhp8y+4vQSVvYuJFRQSV6GIGoAiHYyctIkPeRhXINvdAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUCdNRh6toV9Vs
z96SscUljFfMAzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83OUhrZFJhTWNqR3JyTng3aEZVNXFBTWhWS1NFVFJNWXNh
NUdzSmZyQ3FqUS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83OUhrZFJhTWNqR3JyTng3aEZVNXFBTWhWS1NFVFJNWXNh
NUdzSmZyQ3FqUS8wLzk0MDlEMzUxODdBQjY4NTdENTZDQ0ZERTkyQjFDNTI1OEM1
N0NDMDMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArF8jAMEArr7XDANBAIA
AjAHAwUAKAQNaDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzZAwDQYJKoZIhvcN
AQELBQADggEBAD5czWb0ZpjNvv1PahkKgTKqMD+mOYthV9803hto43FSEAGyn/NZ
dvTlwz4l7dK00TTJPt8wEuxOQrbfY6J6EzXV3aAGD33muONpVmlUXFKvT/3VeLH2
qaYPPtRs4xMCNL/9tq3dSdKKJA0nzbSJrJiEXHoZswv0g7MvUKA2+oUAwVICFkmM
cv6t2RWKjXUpHL7tf+R1tA5o/72WLO5Eeg8nonWbcB7JlRu0hSZSF/sqsLdue1h4
YXoXL3b3zfQEVVOzrcaHQVzJjghxsZeNzTRbt401V+JWRTtJJ3JTJ6aRmGKerjQz
Ib1DOHr1dxToa4qMfaRlLc81TrLRDk4/6IY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org