Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.cer
File:                     94E9EBE9869C286286ECD79575BCB63D45B3F9D5.cer (raw, json)
Hash identifier:          9fvrnnx7be6BoYmfJcslEgFrDOJdJWZFiz2AQx4/jVU=
Subject key identifier:   94:E9:EB:E9:86:9C:28:62:86:EC:D7:95:75:BC:B6:3D:45:B3:F9:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E449CD09A453DC5BF2EA34DB413058E1D2A6793
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Apr 2022 00:12:31 +0000
Certificate not after:    Mon 10 Apr 2023 00:17:31 +0000
Subordinate resources:    AS: 262740
                          IP: 179.97.32.0/20
                          IP: 186.208.64.0/20
                          IP: 2804:2bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:44:9c:d0:9a:45:3d:c5:bf:2e:a3:4d:b4:13:05:8e:1d:2a:67:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 00:12:31 2022 GMT
            Not After : Apr 10 00:17:31 2023 GMT
        Subject: CN=94E9EBE9869C286286ECD79575BCB63D45B3F9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:89:bc:f3:9a:9e:d8:3f:1f:76:2b:ce:16:
                    15:6c:7f:c0:64:6e:a0:61:d9:a9:31:f7:2f:fc:da:
                    1d:55:84:6f:f8:fd:67:d5:9d:f5:0e:6a:b6:4d:72:
                    e7:9d:f7:fd:34:f1:c2:54:2e:ea:e6:a8:6a:48:9c:
                    13:a2:96:c8:c2:cb:bb:b4:20:fb:3f:cd:ce:eb:22:
                    0c:9e:ea:9b:f3:17:25:e2:73:19:7c:e9:dc:0d:eb:
                    71:a0:8e:34:91:89:bf:0a:b1:bf:43:43:83:e4:39:
                    cb:66:8c:3b:dd:3f:4e:80:cc:d9:f0:e7:6c:67:6b:
                    4e:9f:f6:d4:b8:57:05:78:fc:2f:83:62:cc:b3:7a:
                    35:77:db:11:8e:22:3a:71:44:71:55:a3:4e:dd:e5:
                    23:a5:8e:fd:e1:6a:92:0b:fc:6b:ea:04:92:eb:cf:
                    50:bd:fd:a8:c1:b1:89:8e:43:52:58:14:e8:3a:b2:
                    b7:4d:b7:cd:94:7c:f6:fd:58:a6:ce:c7:6f:58:65:
                    39:a9:05:39:ee:42:98:33:d1:68:d1:0c:6c:53:61:
                    61:ed:c9:1f:b8:c0:04:2e:97:b2:c2:ba:7b:5e:61:
                    74:e2:74:de:95:97:48:54:6d:1c:bd:ad:d0:50:b0:
                    87:1d:d2:26:bc:4a:dd:46:04:3e:b9:95:34:8d:6b:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:E9:EB:E9:86:9C:28:62:86:EC:D7:95:75:BC:B6:3D:45:B3:F9:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.32.0/20
                  186.208.64.0/20
                IPv6:
                  2804:2bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262740

    Signature Algorithm: sha256WithRSAEncryption
         ab:8a:3f:bf:18:8c:c3:0d:7a:9e:8a:c9:a9:23:1b:e0:6f:db:
         e2:21:ca:be:05:d4:bc:fd:9b:42:8c:f4:76:06:e7:d7:2e:dd:
         ba:3d:6e:42:cb:52:de:7b:42:5a:24:3e:62:3e:79:b8:ce:4a:
         db:1d:64:c7:cc:40:22:3a:fe:f7:49:4e:91:e6:63:f4:a5:77:
         61:58:e2:07:9f:4e:b7:db:a7:31:da:a5:3e:7d:f9:0a:b8:24:
         1c:35:11:12:80:5f:69:05:a5:f9:9e:71:52:45:e4:08:0b:dd:
         75:85:2c:bc:3f:76:53:ab:16:31:35:c8:79:a2:c1:1f:ac:b2:
         2b:97:4d:10:59:18:7a:90:6e:0f:da:9a:7e:f4:0d:9c:c1:49:
         94:75:a4:3a:db:77:30:db:f0:b5:9b:22:27:94:9f:ce:a8:5d:
         84:bc:47:64:a1:e9:85:37:bd:08:78:14:bc:0b:e1:80:65:51:
         ac:51:8d:14:2a:a3:d6:13:3a:d3:90:c0:e1:49:61:a5:83:ad:
         9d:52:45:b9:aa:a1:bb:ea:1d:60:7c:cc:7a:c8:ff:d4:b5:fa:
         39:68:ca:08:91:7b:34:54:bf:aa:a3:88:6b:5d:80:e9:89:49:
         00:f7:45:2e:7a:ad:d6:df:92:9c:bc:63:49:89:09:05:fc:d5:
         f0:7c:9b:09
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUTkSc0JpFPcW/LqNNtBMFjh0qZ5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA0MTEwMDEyMzFaFw0yMzA0MTAwMDE3MzFaMDMxMTAvBgNV
BAMTKDk0RTlFQkU5ODY5QzI4NjI4NkVDRDc5NTc1QkNCNjNENDVCM0Y5RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaVom885qe2D8fdivOFhVsf8Bk
bqBh2akx9y/82h1VhG/4/WfVnfUOarZNcued9/008cJULurmqGpInBOilsjCy7u0
IPs/zc7rIgye6pvzFyXicxl86dwN63GgjjSRib8Ksb9DQ4PkOctmjDvdP06AzNnw
52xna06f9tS4VwV4/C+DYsyzejV32xGOIjpxRHFVo07d5SOljv3hapIL/GvqBJLr
z1C9/ajBsYmOQ1JYFOg6srdNt82UfPb9WKbOx29YZTmpBTnuQpgz0WjRDGxTYWHt
yR+4wAQul7LCunteYXTidN6Vl0hUbRy9rdBQsIcd0ia8St1GBD65lTSNa00fAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSU6evphpwoYobs
15V1vLY9RbP51TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zbXJkaUxzUUJrTEppMVNDbll2NVFRczQxUFNpRGZSaVBN
U1VCaVhZb3dtTi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zbXJkaUxzUUJrTEppMVNDbll2NVFRczQxUFNpRGZSaVBN
U1VCaVhZb3dtTi8wLzk0RTlFQkU5ODY5QzI4NjI4NkVDRDc5NTc1QkNCNjNENDVC
M0Y5RDUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLNhIAMEBLrQQDANBAIA
AjAHAwUAKAQr8DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAlQwDQYJKoZIhvcN
AQELBQADggEBAKuKP78YjMMNep6KyakjG+Bv2+Ihyr4F1Lz9m0KM9HYG59cu3bo9
bkLLUt57QlokPmI+ebjOStsdZMfMQCI6/vdJTpHmY/Sld2FY4gefTrfbpzHapT59
+Qq4JBw1ERKAX2kFpfmecVJF5AgL3XWFLLw/dlOrFjE1yHmiwR+ssiuXTRBZGHqQ
bg/amn70DZzBSZR1pDrbdzDb8LWbIieUn86oXYS8R2Sh6YU3vQh4FLwL4YBlUaxR
jRQqo9YTOtOQwOFJYaWDrZ1SRbmqobvqHWB8zHrI/9S1+jloygiRezRUv6qjiGtd
gOmJSQD3RS56rdbfkpy8Y0mJCQX81fB8mwk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org