Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9785BC9E1E57094D562A68347E6CF29E221281E5.cer
File:                     9785BC9E1E57094D562A68347E6CF29E221281E5.cer (raw, json)
Hash identifier:          Q398d3DTwPfsnjS5qaZm5NuiEhy6lue00T+kamSka/8=
Subject key identifier:   97:85:BC:9E:1E:57:09:4D:56:2A:68:34:7E:6C:F2:9E:22:12:81:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FBB783B6E865756DB1FA12F84835D31A2C82AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/9785BC9E1E57094D562A68347E6CF29E221281E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Mar 2023 07:43:02 +0000
Certificate not after:    Wed 28 Feb 2024 07:48:02 +0000
Subordinate resources:    AS: 266546
                          IP: 160.238.196.0/22
                          IP: 2804:3dac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bb:78:3b:6e:86:57:56:db:1f:a1:2f:84:83:5d:31:a2:c8:2a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 07:43:02 2023 GMT
            Not After : Feb 28 07:48:02 2024 GMT
        Subject: CN=9785BC9E1E57094D562A68347E6CF29E221281E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:2b:52:47:e6:b5:33:dc:07:98:2d:ec:8b:
                    f2:80:d6:c5:ff:3e:90:dc:74:85:83:1c:4a:ff:30:
                    bd:bb:a1:7e:26:58:81:25:c9:6c:c4:86:6d:3c:a2:
                    27:c8:2f:a5:39:71:64:56:26:a4:6c:de:22:52:88:
                    6c:4b:80:23:1b:53:51:21:95:2d:1f:2c:e5:d2:0c:
                    6e:b5:10:d6:30:4d:4b:2f:85:ca:6f:79:44:d2:28:
                    80:32:0c:9f:5a:cd:e0:12:45:21:4f:35:8d:7e:77:
                    13:66:40:93:e0:68:a1:6c:1a:d9:ed:36:5f:af:45:
                    ba:c1:f2:17:43:64:69:9e:0d:65:1d:b9:04:c8:8b:
                    54:2b:c2:c8:69:0b:de:7c:ab:56:65:e9:2c:73:ff:
                    78:01:2e:8c:dc:15:c2:8d:74:d6:d4:f3:3d:36:d4:
                    25:d9:33:8e:33:bf:7e:70:db:1d:c3:18:78:80:82:
                    49:6c:2e:ee:7c:b1:f5:6a:a5:b7:30:cd:14:0f:e1:
                    59:58:1d:83:e5:05:f8:7c:00:3e:78:1c:ca:c1:4b:
                    7c:32:02:81:85:0c:62:02:d6:6a:18:4e:cb:35:4d:
                    c5:9e:81:d5:32:23:aa:31:54:3b:ec:be:d6:35:da:
                    7a:b5:0f:0d:7f:e1:84:ac:e0:04:67:72:c2:c9:54:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:85:BC:9E:1E:57:09:4D:56:2A:68:34:7E:6C:F2:9E:22:12:81:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/9785BC9E1E57094D562A68347E6CF29E221281E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.196.0/22
                IPv6:
                  2804:3dac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266546

    Signature Algorithm: sha256WithRSAEncryption
         46:74:11:07:04:d3:60:3f:f8:8a:e6:31:eb:c7:e4:4d:8e:bf:
         44:8e:3f:ab:b3:f4:25:b6:61:2b:b9:da:08:7b:b7:3f:48:5e:
         54:bc:c7:66:ac:af:aa:b5:8b:cd:40:3c:4c:ff:c8:20:fb:cc:
         e6:1d:ca:48:25:f1:d4:23:e4:84:f4:fb:b9:28:ff:5a:15:fa:
         63:ec:db:f0:18:f2:d4:e9:10:23:8a:c5:bd:01:b6:3f:41:5b:
         11:be:18:6a:87:41:9f:c4:28:0a:09:8a:ac:8c:d9:a2:c7:66:
         0f:e6:ab:7a:05:4c:e5:44:0f:f4:18:43:bf:aa:a7:a5:eb:2c:
         39:37:9b:08:97:e6:91:03:39:7b:08:c9:22:b0:63:af:52:fd:
         56:27:e7:52:1a:e7:2a:54:68:45:17:61:2f:4b:5b:e2:52:b7:
         c6:43:be:f1:5a:ca:1a:49:0b:9b:1a:62:80:fa:f2:ba:3a:33:
         0a:f7:e5:56:c5:7e:b6:e3:6b:37:89:24:b9:29:d6:70:ab:65:
         97:9a:a2:58:f6:e9:16:36:c4:1a:34:94:36:e4:27:b1:b0:23:
         94:b6:de:1b:2a:cf:0a:16:7c:15:d4:95:a0:35:ea:cc:cf:80:
         f5:f6:39:ef:59:50:23:63:38:2c:bf:97:bf:e9:7b:a5:c4:ec:
         54:e8:b1:11
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUL7t4O26GV1bbH6EvhINdMaLIKsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDEwNzQzMDJaFw0yNDAyMjgwNzQ4MDJaMDMxMTAvBgNV
BAMTKDk3ODVCQzlFMUU1NzA5NEQ1NjJBNjgzNDdFNkNGMjlFMjIxMjgxRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFitSR+a1M9wHmC3si/KA1sX/
PpDcdIWDHEr/ML27oX4mWIElyWzEhm08oifIL6U5cWRWJqRs3iJSiGxLgCMbU1Eh
lS0fLOXSDG61ENYwTUsvhcpveUTSKIAyDJ9azeASRSFPNY1+dxNmQJPgaKFsGtnt
Nl+vRbrB8hdDZGmeDWUduQTIi1QrwshpC958q1Zl6Sxz/3gBLozcFcKNdNbU8z02
1CXZM44zv35w2x3DGHiAgklsLu58sfVqpbcwzRQP4VlYHYPlBfh8AD54HMrBS3wy
AoGFDGIC1moYTss1TcWegdUyI6oxVDvsvtY12nq1Dw1/4YSs4ARncsLJVKnpAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXhbyeHlcJTVYq
aDR+bPKeIhKB5TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FaGdEMVRoSENOTVV6MmtBRGtNV0p0ZVNmcG5UTnB3UWh4
RThoZTJQWFdFei8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FaGdEMVRoSENOTVV6MmtBRGtNV0p0ZVNmcG5UTnB3UWh4
RThoZTJQWFdFei8wLzk3ODVCQzlFMUU1NzA5NEQ1NjJBNjgzNDdFNkNGMjlFMjIx
MjgxRTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqDuxDANBAIAAjAHAwUA
KAQ9rDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEETIwDQYJKoZIhvcNAQELBQAD
ggEBAEZ0EQcE02A/+IrmMevH5E2Ov0SOP6uz9CW2YSu52gh7tz9IXlS8x2asr6q1
i81APEz/yCD7zOYdykgl8dQj5IT0+7ko/1oV+mPs2/AY8tTpECOKxb0Btj9BWxG+
GGqHQZ/EKAoJiqyM2aLHZg/mq3oFTOVED/QYQ7+qp6XrLDk3mwiX5pEDOXsIySKw
Y69S/VYn51Ia5ypUaEUXYS9LW+JSt8ZDvvFayhpJC5saYoD68ro6Mwr35VbFfrbj
azeJJLkp1nCrZZeaolj26RY2xBo0lDbkJ7GwI5S23hsqzwoWfBXUlaA16szPgPX2
Oe9ZUCNjOCy/l7/pe6XE7FTosRE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org