Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/973F6A4A45C193554E33DEDC138FE388BED07FD5.cer
File:                     973F6A4A45C193554E33DEDC138FE388BED07FD5.cer (raw, json)
Hash identifier:          rdgSV3XM9ZUAoUn3CpG1OORGHhI2ilQYsPPbopj9mkE=
Subject key identifier:   97:3F:6A:4A:45:C1:93:55:4E:33:DE:DC:13:8F:E3:88:BE:D0:7F:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11744F5E0E110A62F596AF0DE04D44EACEF0B63B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/1/973F6A4A45C193554E33DEDC138FE388BED07FD5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:15 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:15 +0000
Subordinate resources:    AS: 61609
                          IP: 2804:87bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:74:4f:5e:0e:11:0a:62:f5:96:af:0d:e0:4d:44:ea:ce:f0:b6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:15 2023 GMT
            Not After : Sep 16 17:53:15 2024 GMT
        Subject: CN=973F6A4A45C193554E33DEDC138FE388BED07FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:bd:38:88:aa:ca:84:4d:da:7d:e9:d7:0e:
                    76:40:db:37:c2:cc:58:10:6b:75:e7:81:3f:90:8b:
                    14:fc:e8:cc:b5:4a:3c:7f:ed:02:3d:4e:6b:66:c6:
                    31:85:e1:6f:b3:bf:36:41:be:f3:ef:57:09:1d:db:
                    e9:20:0c:41:90:79:d7:0d:38:04:64:27:50:63:ba:
                    6b:43:f7:e1:29:3b:f4:6d:2a:0d:f0:b9:6d:f8:95:
                    49:e7:14:ec:4d:e2:b0:0c:54:82:06:af:cf:6e:82:
                    30:3c:17:3c:51:a0:1c:c1:fd:0d:82:3e:8c:02:48:
                    16:c8:ce:4b:11:b8:9f:a4:06:e1:76:75:76:5c:f5:
                    72:4e:a1:b8:f6:56:f5:93:21:7c:d4:4e:84:75:81:
                    87:43:38:c5:28:db:d6:29:16:52:16:94:fb:bc:29:
                    ad:5c:14:e4:be:ee:f4:b5:1f:ea:a9:52:89:fa:b3:
                    66:d8:5c:0a:82:67:47:59:74:2d:0c:fe:c0:f9:ac:
                    50:89:27:c1:bd:37:07:cb:7a:ec:8d:12:bf:9b:1e:
                    73:70:63:e0:23:c2:3d:5a:9d:7e:d3:b3:dd:7c:38:
                    55:6c:4e:f0:8b:0b:66:78:af:6b:a2:9d:de:01:5b:
                    46:cc:6a:40:2b:3d:f1:94:f4:10:a2:df:d7:07:19:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:3F:6A:4A:45:C1:93:55:4E:33:DE:DC:13:8F:E3:88:BE:D0:7F:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/1/973F6A4A45C193554E33DEDC138FE388BED07FD5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61609

    Signature Algorithm: sha256WithRSAEncryption
         82:25:30:93:2c:41:98:4b:89:ce:24:b8:fb:0b:80:e5:a0:be:
         93:a0:7f:0b:5d:f4:84:bc:8f:c6:a9:f4:c2:64:fe:7a:74:80:
         ea:37:d3:a8:67:0b:bd:7b:37:d3:4d:0f:2a:54:5b:d5:9f:9b:
         e9:61:96:a7:2e:2b:74:68:ac:1c:21:0f:ce:a1:e8:aa:89:6a:
         de:ea:f5:28:80:93:31:d1:ab:e6:dd:7e:d6:fb:12:f7:0c:ca:
         46:d0:31:42:2a:45:18:42:66:75:e4:9f:fe:67:09:c2:b4:13:
         40:34:df:a1:40:5b:2b:d4:35:96:8e:a9:a7:9d:e3:88:52:d4:
         be:f7:c1:f6:d7:7a:8c:09:e8:6a:09:a8:74:9d:73:20:b4:f3:
         f8:a2:ad:39:7b:94:4c:18:c2:ce:ba:32:91:0c:91:50:86:b3:
         8d:57:47:be:24:7d:c5:98:f7:44:7a:5b:7f:75:2b:02:7e:f5:
         db:2f:da:34:ae:9f:be:5a:60:06:fd:2a:55:99:24:ac:d7:79:
         7d:96:c7:aa:aa:de:a8:40:e9:01:a5:a9:e6:1e:f2:84:f0:b3:
         81:b6:56:b9:d1:00:05:5b:d8:3f:8d:d7:35:af:b2:3b:b4:de:
         e6:ed:2e:6a:12:7e:8c:ba:fd:e1:96:17:d4:29:c4:ee:98:18:
         e4:fe:7d:3a
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUEXRPXg4RCmL1lq8N4E1E6s7wtjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTgxNzQ4MTVaFw0yNDA5MTYxNzUzMTVaMDMxMTAvBgNV
BAMTKDk3M0Y2QTRBNDVDMTkzNTU0RTMzREVEQzEzOEZFMzg4QkVEMDdGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgb04iKrKhE3afenXDnZA2zfC
zFgQa3XngT+QixT86My1Sjx/7QI9TmtmxjGF4W+zvzZBvvPvVwkd2+kgDEGQedcN
OARkJ1BjumtD9+EpO/RtKg3wuW34lUnnFOxN4rAMVIIGr89ugjA8FzxRoBzB/Q2C
PowCSBbIzksRuJ+kBuF2dXZc9XJOobj2VvWTIXzUToR1gYdDOMUo29YpFlIWlPu8
Ka1cFOS+7vS1H+qpUon6s2bYXAqCZ0dZdC0M/sD5rFCJJ8G9NwfLeuyNEr+bHnNw
Y+Ajwj1anX7Ts918OFVsTvCLC2Z4r2uind4BW0bMakArPfGU9BCi39cHGdMrAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXP2pKRcGTVU4z
3twTj+OIvtB/1TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HQVRTSm9qODRrYlZ2RThBV1BEUG95SnEydUdwb0w2aW5O
OTh5WTNqZmhjRS8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR0FUU0pvajg0a2JWdkU4QVdQRFBveUpxMnVHcG9MNmlu
Tjk4eVkzamZoY0UvMS85NzNGNkE0QTQ1QzE5MzU1NEUzM0RFREMxMzhGRTM4OEJF
RDA3RkQ1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIe8MBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDwqTANBgkqhkiG9w0BAQsFAAOCAQEAgiUwkyxBmEuJ
ziS4+wuA5aC+k6B/C130hLyPxqn0wmT+enSA6jfTqGcLvXs3000PKlRb1Z+b6WGW
py4rdGisHCEPzqHoqolq3ur1KICTMdGr5t1+1vsS9wzKRtAxQipFGEJmdeSf/mcJ
wrQTQDTfoUBbK9Q1lo6pp53jiFLUvvfB9td6jAnoagmodJ1zILTz+KKtOXuUTBjC
zroykQyRUIazjVdHviR9xZj3RHpbf3UrAn712y/aNK6fvlpgBv0qVZkkrNd5fZbH
qqreqEDpAaWp5h7yhPCzgbZWudEABVvYP43XNa+yO7Te5u0uahJ+jLr94ZYX1CnE
7pgY5P59Og==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org