Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.cer
File:                     9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.cer (raw, json)
Hash identifier:          Pd9oOvU++URscQqiktSG+z15cBwQCX9U/tVXGR/Z4ks=
Subject key identifier:   97:30:BD:C6:3C:D0:A7:6C:9A:7D:3D:8F:A6:CB:D9:69:24:AC:BD:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D1229948DFEB1B83FE27E7F13231499238FA848
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 21:19:06 +0000
Certificate not after:    Tue 20 Aug 2024 21:24:06 +0000
Subordinate resources:    AS: 265406
                          IP: 168.195.4.0/22
                          IP: 2804:3398::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:12:29:94:8d:fe:b1:b8:3f:e2:7e:7f:13:23:14:99:23:8f:a8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 21:19:06 2023 GMT
            Not After : Aug 20 21:24:06 2024 GMT
        Subject: CN=9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:24:ae:24:84:5f:51:8c:ee:cf:8a:b7:69:
                    71:9b:c4:90:e0:5c:2e:ff:60:5d:0a:59:85:47:49:
                    06:eb:37:58:f8:89:f9:c4:36:87:42:46:75:be:60:
                    d5:5f:b0:1e:e5:62:c2:8d:3f:51:46:b2:30:52:b9:
                    dd:f1:89:81:48:18:f9:6d:5d:cc:ea:aa:d5:6a:6e:
                    2b:ee:ab:86:e2:57:f9:56:63:2e:51:76:2d:db:21:
                    e0:05:22:8b:0b:7f:d9:fd:34:fc:ab:ac:2c:52:84:
                    38:b2:17:2d:9a:5c:94:de:0f:8d:51:48:50:02:06:
                    35:90:e9:38:9c:cc:e1:88:62:19:7f:3d:af:ae:f4:
                    ec:f5:08:99:86:b5:63:42:ca:e7:72:af:f2:7b:13:
                    92:7f:8f:b6:26:e2:2e:7e:19:c7:f0:fd:15:b0:9a:
                    d6:d8:6e:5d:0c:1f:fb:2a:f9:5e:b4:cf:fd:f6:71:
                    08:50:c2:c3:66:67:bc:bd:a1:71:34:01:48:4b:b5:
                    f8:06:f2:ff:db:21:62:4b:31:eb:7c:bf:02:99:67:
                    af:38:a6:e0:0a:56:68:ec:0a:03:b4:95:41:33:42:
                    a9:f7:8c:31:09:a3:e8:4a:90:96:17:c1:e8:1e:2a:
                    54:0c:13:5f:54:1e:db:ca:3a:46:a3:c5:42:0c:72:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:30:BD:C6:3C:D0:A7:6C:9A:7D:3D:8F:A6:CB:D9:69:24:AC:BD:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/9730BDC63CD0A76C9A7D3D8FA6CBD96924ACBD67.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.4.0/22
                IPv6:
                  2804:3398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265406

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:1e:9e:0f:bc:85:7f:9a:e4:45:bf:1e:28:4f:c9:2d:9c:
         f4:65:3e:a1:16:78:fc:fa:c3:15:0d:a0:29:5b:45:fd:0a:6d:
         e7:73:08:cc:34:d3:5e:a3:87:b9:40:76:b9:9d:a9:9f:14:9f:
         3f:fe:89:da:de:6d:3a:e8:08:83:62:a6:2e:26:7d:db:a8:eb:
         1d:5c:2a:03:73:2e:66:31:c8:08:9d:26:05:6a:06:e7:1d:13:
         f3:d9:c5:1a:7b:b2:08:a3:1b:a7:93:fd:7e:e8:4b:e4:f5:15:
         26:28:ee:ee:99:30:a3:47:cb:9c:f9:a0:f1:f2:8e:c5:53:50:
         63:73:03:81:45:5f:d7:9b:39:7d:bd:f9:84:e9:4f:66:58:59:
         d0:da:8e:5f:4d:34:56:98:d6:7c:11:fc:05:21:77:fd:70:53:
         e6:af:9b:57:70:cb:8a:65:ef:0d:12:6c:9e:0f:87:23:11:da:
         b8:08:c5:f3:80:de:91:db:50:c6:e8:53:fa:21:71:0d:3c:bf:
         eb:ab:e4:cd:7b:98:f8:06:de:87:ff:ce:c9:6d:6c:d5:e3:7d:
         90:73:40:5e:1d:3f:2c:f1:6c:0b:98:31:9e:fd:d8:99:30:69:
         69:5e:1c:71:40:b7:76:b1:1d:b8:53:f4:78:19:39:45:86:57:
         e4:26:1e:e7
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUfRIplI3+sbg/4n5/EyMUmSOPqEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjIyMTE5MDZaFw0yNDA4MjAyMTI0MDZaMDMxMTAvBgNV
BAMTKDk3MzBCREM2M0NEMEE3NkM5QTdEM0Q4RkE2Q0JEOTY5MjRBQ0JENjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlSSuJIRfUYzuz4q3aXGbxJDg
XC7/YF0KWYVHSQbrN1j4ifnENodCRnW+YNVfsB7lYsKNP1FGsjBSud3xiYFIGPlt
XczqqtVqbivuq4biV/lWYy5Rdi3bIeAFIosLf9n9NPyrrCxShDiyFy2aXJTeD41R
SFACBjWQ6TiczOGIYhl/Pa+u9Oz1CJmGtWNCyudyr/J7E5J/j7Ym4i5+Gcfw/RWw
mtbYbl0MH/sq+V60z/32cQhQwsNmZ7y9oXE0AUhLtfgG8v/bIWJLMet8vwKZZ684
puAKVmjsCgO0lUEzQqn3jDEJo+hKkJYXwegeKlQME19UHtvKOkajxUIMcrnJAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXML3GPNCnbJp9
PY+my9lpJKy9ZzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yUzlTUk1YNE1nUXRHWHNoZUpXTnJ2WjJKV0Z2SzRMSnFR
VkJXckdjMk43VC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMlM5U1JNWDRNZ1F0R1hzaGVKV05ydloySldGdks0TEpx
UVZCV3JHYzJON1QvMC85NzMwQkRDNjNDRDBBNzZDOUE3RDNEOEZBNkNCRDk2OTI0
QUNCRDY3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKowwQwDQQCAAIwBwMF
ACgEM5gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAy+MA0GCSqGSIb3DQEBCwUA
A4IBAQBbSh6eD7yFf5rkRb8eKE/JLZz0ZT6hFnj8+sMVDaApW0X9Cm3ncwjMNNNe
o4e5QHa5namfFJ8//ona3m066AiDYqYuJn3bqOsdXCoDcy5mMcgInSYFagbnHRPz
2cUae7IIoxunk/1+6Evk9RUmKO7umTCjR8uc+aDx8o7FU1BjcwOBRV/Xmzl9vfmE
6U9mWFnQ2o5fTTRWmNZ8EfwFIXf9cFPmr5tXcMuKZe8NEmyeD4cjEdq4CMXzgN6R
21DG6FP6IXENPL/rq+TNe5j4Bt6H/87JbWzV432Qc0BeHT8s8WwLmDGe/diZMGlp
XhxxQLd2sR24U/R4GTlFhlfkJh7n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org