Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.cer
File:                     95014102BD8657004DEB7C9626B734A3EEAB7ECB.cer (raw, json)
Hash identifier:          Rhu7s8NVkKMErUX+ShXuJQpZXksuS4fXaoXZZvFi8L4=
Subject key identifier:   95:01:41:02:BD:86:57:00:4D:EB:7C:96:26:B7:34:A3:EE:AB:7E:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39CEFB2E737831D7DDFA8F3F2AFD58F7954107BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 13:35:13 +0000
Certificate not after:    Tue 18 Jun 2024 13:40:13 +0000
Subordinate resources:    AS: 272744
                          IP: 2804:87fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ce:fb:2e:73:78:31:d7:dd:fa:8f:3f:2a:fd:58:f7:95:41:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 20 13:35:13 2023 GMT
            Not After : Jun 18 13:40:13 2024 GMT
        Subject: CN=95014102BD8657004DEB7C9626B734A3EEAB7ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:0b:c1:ab:44:3e:90:db:05:19:e9:51:51:
                    7d:53:68:a5:ff:3a:04:c2:2f:c8:1a:1c:48:7e:9e:
                    86:44:de:8c:08:dd:47:66:97:a4:3f:a9:5a:4a:e2:
                    ce:55:45:1c:36:de:3e:a0:c3:3f:ae:c5:c1:20:ac:
                    ef:e7:16:f4:ea:3f:86:98:8d:de:3f:0e:b2:07:3d:
                    60:91:70:25:e6:9c:b6:7d:42:08:c7:7c:80:88:28:
                    57:92:ef:81:d8:ac:af:c8:8d:b4:95:00:b7:7b:a6:
                    de:e9:08:37:a6:8d:f7:d2:d3:18:bb:c2:b7:94:a9:
                    3b:16:a2:bf:89:67:3c:45:6d:ab:88:1c:8c:f6:20:
                    5f:32:97:f7:6d:70:99:24:71:c8:ea:9d:21:ad:fa:
                    0f:80:cb:b3:27:4b:ce:96:c0:3c:14:48:79:92:4d:
                    88:eb:a7:71:44:a9:52:52:9d:00:b2:69:29:26:0b:
                    33:3f:f8:1d:b9:4e:fe:4b:cf:95:7c:9d:09:24:86:
                    aa:6b:1e:80:63:ae:dd:41:e7:cf:0b:b7:69:03:e9:
                    b5:be:21:bc:2e:c1:31:0a:d9:49:9a:38:41:c0:82:
                    b6:a1:bf:13:24:2e:07:d2:25:ed:35:bf:0c:00:77:
                    94:e1:c8:13:2d:89:17:59:06:20:d8:82:c0:a2:9c:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:01:41:02:BD:86:57:00:4D:EB:7C:96:26:B7:34:A3:EE:AB:7E:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272744

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:2a:c9:df:9d:fd:d2:07:ed:9a:ea:6e:e7:e5:24:00:94:
         e0:32:79:77:b7:3e:b8:7c:ac:2e:d4:8a:4b:bd:b7:2c:f6:36:
         0a:20:ff:26:66:d4:0b:ea:40:fe:84:f3:fc:67:8c:77:ed:ac:
         5c:bf:28:e5:c0:45:95:95:5b:eb:4f:7c:3e:d7:97:a1:62:fb:
         81:5c:2e:17:46:b0:ad:ea:e0:2d:12:bc:67:c9:2e:6a:0e:d4:
         37:93:78:f6:a3:33:ed:09:d1:2d:fa:65:ec:40:54:bb:7a:66:
         34:7f:9d:77:48:fa:2e:a0:2c:2c:38:cb:1c:18:6e:c0:98:43:
         08:59:9e:71:38:33:db:f6:c8:cd:68:48:eb:c2:a5:d1:da:8d:
         74:d8:be:59:c4:a2:91:0d:64:fa:51:f2:2c:d6:e3:82:8a:b0:
         3a:97:27:51:6c:59:03:80:ff:1b:6a:36:24:d5:e1:20:52:e3:
         0c:a9:1c:0e:29:67:22:f7:fa:10:eb:cd:8b:18:1a:2b:da:a1:
         b4:51:6d:0e:63:96:cc:0a:33:45:70:a6:9b:e2:df:2f:27:2b:
         dd:98:25:56:e5:7d:e9:c9:09:04:bb:3d:49:31:0d:f0:62:42:
         0b:78:cf:18:eb:25:51:ff:84:41:a2:24:51:02:2e:c3:c8:6b:
         dd:b5:4d:08
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUOc77LnN4Mdfd+o8/Kv1Y95VBB7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjAxMzM1MTNaFw0yNDA2MTgxMzQwMTNaMDMxMTAvBgNV
BAMTKDk1MDE0MTAyQkQ4NjU3MDA0REVCN0M5NjI2QjczNEEzRUVBQjdFQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCwvBq0Q+kNsFGelRUX1TaKX/
OgTCL8gaHEh+noZE3owI3Udml6Q/qVpK4s5VRRw23j6gwz+uxcEgrO/nFvTqP4aY
jd4/DrIHPWCRcCXmnLZ9QgjHfICIKFeS74HYrK/IjbSVALd7pt7pCDemjffS0xi7
wreUqTsWor+JZzxFbauIHIz2IF8yl/dtcJkkccjqnSGt+g+Ay7MnS86WwDwUSHmS
TYjrp3FEqVJSnQCyaSkmCzM/+B25Tv5Lz5V8nQkkhqprHoBjrt1B588Lt2kD6bW+
IbwuwTEK2UmaOEHAgrahvxMkLgfSJe01vwwAd5ThyBMtiRdZBiDYgsCinMANAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVAUECvYZXAE3r
fJYmtzSj7qt+yzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DNFlCbzlHYnZZMUNIbmF5RnZiVkI3Q1VodU1ZMlRaeHNQ
Rjk3RW9HM3F4Qi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DNFlCbzlHYnZZMUNIbmF5RnZiVkI3Q1VodU1ZMlRaeHNQ
Rjk3RW9HM3F4Qi8wLzk1MDE0MTAyQkQ4NjU3MDA0REVCN0M5NjI2QjczNEEzRUVB
QjdFQ0IubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEh/wwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCloMA0GCSqGSIb3DQEBCwUAA4IBAQBfiCrJ35390gft
mupu5+UkAJTgMnl3tz64fKwu1IpLvbcs9jYKIP8mZtQL6kD+hPP8Z4x37axcvyjl
wEWVlVvrT3w+15ehYvuBXC4XRrCt6uAtErxnyS5qDtQ3k3j2ozPtCdEt+mXsQFS7
emY0f513SPouoCwsOMscGG7AmEMIWZ5xODPb9sjNaEjrwqXR2o102L5ZxKKRDWT6
UfIs1uOCirA6lydRbFkDgP8bajYk1eEgUuMMqRwOKWci9/oQ682LGBor2qG0UW0O
Y5bMCjNFcKab4t8vJyvdmCVW5X3pyQkEuz1JMQ3wYkILeM8Y6yVR/4RBoiRRAi7D
yGvdtU0I
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org