Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
File:                     9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer (raw, json)
Hash identifier:          RSQTZ6Wdu0QHh34VVvnM6rAy7qwLS10N8LCk+Fty8iM=
Subject key identifier:   95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38276FEA8721E7E680AB603858E302B28BA441A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 22:05:09 +0000
Certificate not after:    Thu 20 Feb 2025 22:10:09 +0000
Subordinate resources:    AS: 267334
                          IP: 45.233.252.0/22
                          IP: 2804:4be0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:27:6f:ea:87:21:e7:e6:80:ab:60:38:58:e3:02:b2:8b:a4:41:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 22:05:09 2024 GMT
            Not After : Feb 20 22:10:09 2025 GMT
        Subject: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:ce:bc:6d:f9:c2:ec:cf:5c:bd:62:dd:a3:
                    a4:5f:1b:26:28:24:7c:1c:da:cf:ba:38:bf:fd:4a:
                    a9:e6:28:55:57:6e:83:fe:e0:71:d6:3a:1d:e3:95:
                    30:03:1b:22:29:30:d7:60:c1:fc:14:e5:1c:ac:9c:
                    79:e1:c1:37:3a:99:44:0c:16:e2:a3:18:a5:30:fd:
                    fb:8b:17:ae:b1:b4:c1:35:24:97:50:eb:a0:21:9e:
                    98:61:87:70:33:72:12:eb:34:04:7e:1c:26:5b:84:
                    13:a0:82:82:f3:27:36:76:c0:7e:08:6c:97:df:71:
                    d8:23:89:0e:1e:5e:ff:16:55:00:35:9d:59:1a:6f:
                    33:cd:ed:c1:89:53:9d:4d:7b:7f:8e:a3:31:f3:4d:
                    be:15:64:9e:c4:03:40:5b:32:0e:c7:67:68:f4:ec:
                    05:b4:f6:e7:e0:d5:66:65:fc:cc:c9:05:b5:99:b1:
                    7a:6b:fc:e1:3b:d0:1b:69:8e:32:73:84:c5:87:f5:
                    a3:ae:b1:53:33:57:b2:c5:99:27:77:d4:8e:84:ed:
                    29:42:b1:3d:d6:30:27:ea:a0:92:9a:24:b6:dd:b6:
                    83:31:fb:f9:68:a5:9b:75:69:1a:dd:06:c1:f9:3a:
                    65:00:53:b0:40:3b:1f:b4:9d:14:e3:d3:6e:a1:bd:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/22
                IPv6:
                  2804:4be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267334

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:09:02:16:35:3a:7c:52:1f:28:21:2a:e7:96:84:dd:c9:
         45:8e:ca:8b:db:97:c2:5e:46:6e:7b:dd:93:06:59:53:ba:93:
         d9:c4:cf:a7:da:63:be:84:3b:29:62:20:e4:77:8a:07:a6:92:
         ed:b2:15:e0:e3:de:80:3a:1c:61:25:9f:82:eb:a1:07:9b:b4:
         0e:08:76:3f:92:cc:ab:a9:e6:c5:d1:3d:b0:82:25:65:22:f9:
         bc:75:c4:b8:35:92:43:3b:5f:24:52:ff:8c:ad:7f:2d:7b:5b:
         8e:70:9c:94:d5:52:0f:5e:59:f0:6a:c0:8d:7e:2a:f6:ab:09:
         36:4b:99:e5:c9:c8:dd:ca:5a:0a:a3:e7:77:73:06:2c:4d:05:
         72:8e:f7:1c:2e:40:84:d9:26:11:28:d8:ac:ae:b5:cb:99:76:
         5f:30:df:a2:a0:d6:60:6c:d4:6c:0c:40:73:bd:ef:ba:bb:da:
         80:74:b1:87:cf:9d:dd:3c:59:5d:98:68:2c:04:5a:70:b5:3c:
         60:16:a8:77:12:3a:54:90:c6:c5:d2:45:de:9e:88:fb:34:4e:
         bf:b4:2e:89:af:c3:82:3e:f8:f0:06:94:1b:5a:13:e3:5d:49:
         f7:9e:a2:42:28:0b:ae:32:a6:50:47:33:18:4e:11:8d:08:45:
         a9:db:6a:70
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUOCdv6och5+aAq2A4WOMCsoukQaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjIyMjA1MDlaFw0yNTAyMjAyMjEwMDlaMDMxMTAvBgNV
BAMTKDk1MzIwODlCNzEwNkZEQ0VBMEEyREM0MTFEQkQ3RjNDQTkzNjhDODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jc68bfnC7M9cvWLdo6RfGyYo
JHwc2s+6OL/9SqnmKFVXboP+4HHWOh3jlTADGyIpMNdgwfwU5RysnHnhwTc6mUQM
FuKjGKUw/fuLF66xtME1JJdQ66Ahnphhh3AzchLrNAR+HCZbhBOggoLzJzZ2wH4I
bJffcdgjiQ4eXv8WVQA1nVkabzPN7cGJU51Ne3+OozHzTb4VZJ7EA0BbMg7HZ2j0
7AW09ufg1WZl/MzJBbWZsXpr/OE70BtpjjJzhMWH9aOusVMzV7LFmSd31I6E7SlC
sT3WMCfqoJKaJLbdtoMx+/lopZt1aRrdBsH5OmUAU7BAOx+0nRTj026hvULPAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVMgibcQb9zqCi
3EEdvX88qTaMiTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CZk13eTROcXdlajRVY1U4RUwza25aMmt5dEZvMTlnRjZ5
UFQxUkVpMk1vdi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CZk13eTROcXdlajRVY1U4RUwza25aMmt5dEZvMTlnRjZ5
UFQxUkVpMk1vdi8wLzk1MzIwODlCNzEwNkZEQ0VBMEEyREM0MTFEQkQ3RjNDQTkz
NjhDODkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3p/DANBAIAAjAHAwUA
KARL4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFEYwDQYJKoZIhvcNAQELBQAD
ggEBACbCCQIWNTp8Uh8oISrnloTdyUWOyovbl8JeRm573ZMGWVO6k9nEz6faY76E
OyliIOR3igemku2yFeDj3oA6HGEln4LroQebtA4Idj+SzKup5sXRPbCCJWUi+bx1
xLg1kkM7XyRS/4ytfy17W45wnJTVUg9eWfBqwI1+KvarCTZLmeXJyN3KWgqj53dz
BixNBXKO9xwuQITZJhEo2KyutcuZdl8w36Kg1mBs1GwMQHO977q72oB0sYfPnd08
WV2YaCwEWnC1PGAWqHcSOlSQxsXSRd6eiPs0Tr+0Lomvw4I++PAGlBtaE+NdSfee
okIoC64yplBHMxhOEY0IRanbanA=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org