Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/952CD1E79D78E32C6969AB3F0ACCE6C5C76379C0.cer
File:                     952CD1E79D78E32C6969AB3F0ACCE6C5C76379C0.cer (raw, json)
Hash identifier:          rfxqNrxlVl+Rf4H3QaFMPFuwaPud5rmp7wDs6+TBIGA=
Subject key identifier:   95:2C:D1:E7:9D:78:E3:2C:69:69:AB:3F:0A:CC:E6:C5:C7:63:79:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69068555376128DE040E9612C074554D8586DAD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/952CD1E79D78E32C6969AB3F0ACCE6C5C76379C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 14:22:40 +0000
Certificate not after:    Wed 25 Sep 2024 14:27:40 +0000
Subordinate resources:    AS: 273316
                          IP: 45.71.42.0/23
                          IP: 2804:8cd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:06:85:55:37:61:28:de:04:0e:96:12:c0:74:55:4d:85:86:da:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 14:22:40 2023 GMT
            Not After : Sep 25 14:27:40 2024 GMT
        Subject: CN=952CD1E79D78E32C6969AB3F0ACCE6C5C76379C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:e2:6e:7e:f0:2a:da:b6:5a:89:77:4e:07:
                    92:c3:93:5a:87:43:0d:c7:21:85:96:35:96:46:12:
                    1e:67:8f:70:b7:5e:91:b3:11:c6:24:d8:4b:56:db:
                    e7:e4:3c:6c:9b:42:ac:32:00:35:81:93:4e:da:67:
                    87:bd:ab:93:7a:32:58:28:23:ad:99:f9:df:b9:1b:
                    26:e8:73:9d:cf:f2:38:dd:22:2b:c7:f3:04:91:cf:
                    ed:36:c2:03:7c:d0:3b:2c:e6:bc:f0:23:b5:b0:4b:
                    4e:c1:1e:06:ba:72:c7:77:47:30:59:9a:9d:d5:41:
                    33:4f:22:b0:49:38:a6:3c:8d:11:4f:c2:2f:a6:8b:
                    14:17:66:f8:e1:68:38:ac:99:24:52:c8:bd:4e:6e:
                    00:68:4c:1b:fe:60:2f:c3:92:65:9a:c5:60:d7:14:
                    fb:b0:f9:8c:1e:5c:19:92:30:5a:de:4b:56:60:55:
                    c5:80:eb:05:8e:6f:55:b9:ee:80:56:70:31:26:18:
                    0b:26:98:da:a4:e6:51:8e:6b:7a:c3:16:ff:cd:b2:
                    c0:28:9f:a9:b4:cc:05:09:ff:f9:0c:27:2a:c5:a3:
                    00:3e:be:d3:b8:15:52:3d:49:e8:48:88:83:4a:9c:
                    12:b7:91:9a:1b:35:ac:e2:a2:28:8a:3f:55:90:12:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:2C:D1:E7:9D:78:E3:2C:69:69:AB:3F:0A:CC:E6:C5:C7:63:79:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/0/952CD1E79D78E32C6969AB3F0ACCE6C5C76379C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.42.0/23
                IPv6:
                  2804:8cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273316

    Signature Algorithm: sha256WithRSAEncryption
         75:39:ae:2e:56:2b:3a:3c:29:3c:27:e8:59:30:04:f7:fc:ad:
         9e:38:8c:40:5e:4e:c3:96:f9:4a:e7:3c:f7:7c:57:46:54:4f:
         0e:63:81:68:7c:17:f4:10:e3:ac:b9:ee:ed:60:97:fa:23:44:
         c2:e6:66:8a:04:ff:fe:c8:4a:55:6f:10:53:df:c0:e0:32:f6:
         ee:17:af:be:af:56:a4:e9:13:37:89:08:6f:b4:01:c3:68:92:
         92:ea:d9:f2:c4:d6:33:0b:65:f6:f8:90:ea:d3:42:b4:ea:e8:
         f4:ff:7c:5f:dd:f6:ed:51:b7:d8:97:bc:9b:5b:f2:21:32:6a:
         62:41:74:01:2c:8d:31:97:0d:6e:10:eb:04:b9:d6:da:eb:d8:
         02:46:ea:1e:cb:8e:74:8f:09:fb:66:79:25:94:1c:57:f4:58:
         df:c0:15:32:a6:37:85:83:59:a9:ba:82:fb:78:72:30:7b:60:
         46:6d:a3:07:c5:87:f2:9f:52:35:b4:79:32:2c:cd:46:ad:60:
         a5:cf:37:a9:62:98:b9:dd:9c:88:7a:a3:51:38:49:4e:17:9c:
         c4:26:e3:64:aa:46:44:3e:d5:7e:f9:43:7c:34:fc:42:6d:af:
         97:4f:16:2f:0b:8f:5d:db:03:f7:be:f8:f3:a4:19:ae:b6:6c:
         5f:f9:c9:55
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaQaFVTdhKN4EDpYSwHRVTYWG2tUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjcxNDIyNDBaFw0yNDA5MjUxNDI3NDBaMDMxMTAvBgNV
BAMTKDk1MkNEMUU3OUQ3OEUzMkM2OTY5QUIzRjBBQ0NFNkM1Qzc2Mzc5QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GuJufvAq2rZaiXdOB5LDk1qH
Qw3HIYWWNZZGEh5nj3C3XpGzEcYk2EtW2+fkPGybQqwyADWBk07aZ4e9q5N6Mlgo
I62Z+d+5Gyboc53P8jjdIivH8wSRz+02wgN80Dss5rzwI7WwS07BHga6csd3RzBZ
mp3VQTNPIrBJOKY8jRFPwi+mixQXZvjhaDismSRSyL1ObgBoTBv+YC/DkmWaxWDX
FPuw+YweXBmSMFreS1ZgVcWA6wWOb1W57oBWcDEmGAsmmNqk5lGOa3rDFv/NssAo
n6m0zAUJ//kMJyrFowA+vtO4FVI9SehIiINKnBK3kZobNazioiiKP1WQEpcXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVLNHnnXjjLGlp
qz8KzObFx2N5wDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IckFNZjNHMW92cFRRaDV6ZVBDZExGcHFWdHVMcFpBd2hG
U0dKbkF4NGliOC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSHJBTWYzRzFvdnBUUWg1emVQQ2RMRnBxVnR1THBaQXdo
RlNHSm5BeDRpYjgvMC85NTJDRDFFNzlENzhFMzJDNjk2OUFCM0YwQUNDRTZDNUM3
NjM3OUMwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAEtRyowDQQCAAIwBwMF
ACgEjNQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCukMA0GCSqGSIb3DQEBCwUA
A4IBAQB1Oa4uVis6PCk8J+hZMAT3/K2eOIxAXk7DlvlK5zz3fFdGVE8OY4FofBf0
EOOsue7tYJf6I0TC5maKBP/+yEpVbxBT38DgMvbuF6++r1ak6RM3iQhvtAHDaJKS
6tnyxNYzC2X2+JDq00K06uj0/3xf3fbtUbfYl7ybW/IhMmpiQXQBLI0xlw1uEOsE
udba69gCRuoey450jwn7ZnkllBxX9FjfwBUypjeFg1mpuoL7eHIwe2BGbaMHxYfy
n1I1tHkyLM1GrWClzzepYpi53ZyIeqNROElOF5zEJuNkqkZEPtV++UN8NPxCba+X
TxYvC49d2wP3vvjzpBmutmxf+clV
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org