Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/993FE9369B4FB884A5048AC7D58213830B587867.cer
File:                     993FE9369B4FB884A5048AC7D58213830B587867.cer (raw, json)
Hash identifier:          9VSrZXYQcJUfdffFMEIkPh+n86qq2CNwlJXYs0BI5Ow=
Subject key identifier:   99:3F:E9:36:9B:4F:B8:84:A5:04:8A:C7:D5:82:13:83:0B:58:78:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A4CD3DCC3CA4E205600A23369CBF300BAC27FC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/993FE9369B4FB884A5048AC7D58213830B587867.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jun 2022 13:11:50 +0000
Certificate not after:    Wed 14 Jun 2023 13:16:50 +0000
Subordinate resources:    AS: 264384
                          IP: 131.161.176.0/22
                          IP: 2804:1da8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4c:d3:dc:c3:ca:4e:20:56:00:a2:33:69:cb:f3:00:ba:c2:7f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 15 13:11:50 2022 GMT
            Not After : Jun 14 13:16:50 2023 GMT
        Subject: CN=993FE9369B4FB884A5048AC7D58213830B587867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:8d:71:a7:75:be:9a:4e:9b:9b:2a:fb:5e:
                    86:0f:5e:7a:90:79:67:bd:dd:58:af:a1:84:8b:53:
                    c0:4a:83:51:f6:9e:d2:cd:41:5d:9a:00:8f:42:e0:
                    e9:e7:fe:fa:99:49:aa:04:69:27:7d:52:88:38:97:
                    82:22:19:4f:48:cf:76:bd:0e:1a:6c:03:8f:cf:96:
                    a6:4e:df:bb:6a:39:81:2e:ff:1e:2c:b0:27:a2:48:
                    52:0a:90:2d:69:4a:42:0d:84:2f:7f:ed:b0:01:fa:
                    af:47:d4:97:b1:74:be:28:e2:23:e0:d8:aa:08:d1:
                    aa:d0:ca:61:fe:de:aa:f5:cc:bf:93:ac:a6:b0:e5:
                    19:a7:85:63:72:cb:91:14:d6:50:48:b3:b4:46:74:
                    45:fa:b1:58:96:25:a4:5a:b1:19:6a:3f:4e:2e:3f:
                    14:b3:ab:7c:d7:ed:26:41:58:a3:db:21:ce:d3:03:
                    d9:48:d5:c2:0a:e0:f9:75:d8:94:17:a1:57:01:e0:
                    b9:7b:c0:4c:e3:18:9e:bc:a6:64:98:e9:3c:6f:3c:
                    9c:d4:03:90:84:16:33:3d:f1:6c:da:52:9b:e0:da:
                    a9:c8:da:d7:84:37:b5:e6:cd:c2:d9:0b:fb:59:f1:
                    1a:b8:8e:a1:46:2e:66:b1:2f:23:7b:84:5a:fd:26:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:3F:E9:36:9B:4F:B8:84:A5:04:8A:C7:D5:82:13:83:0B:58:78:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/993FE9369B4FB884A5048AC7D58213830B587867.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.176.0/22
                IPv6:
                  2804:1da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264384

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:18:47:e1:fa:9c:cc:a4:7f:ee:10:94:a3:d9:f8:0e:80:
         05:a0:b4:89:8f:f0:77:0d:c8:f5:b7:0a:7b:63:90:42:73:3f:
         56:16:74:8d:cc:4b:26:eb:29:9c:29:ad:08:df:6f:df:15:bc:
         57:53:6f:6a:27:88:a4:23:5e:26:fc:72:1b:5b:d5:52:26:e9:
         c8:92:dd:5d:33:33:ea:f7:e7:c1:74:9d:4e:46:4b:1e:98:42:
         ef:aa:85:ef:74:31:78:2c:dd:f7:bb:28:31:d1:c7:4a:d9:d3:
         66:02:cc:fd:e0:2b:19:6c:73:fc:51:bb:c8:2a:b3:f3:85:64:
         cc:19:3c:e7:8a:a3:59:c9:2f:92:39:2a:c4:04:24:86:7a:d8:
         4b:d2:95:60:43:6f:07:50:0a:b5:d3:98:8e:75:58:55:67:bb:
         b2:d4:c1:12:98:6b:26:4c:fc:30:92:ea:8a:20:ac:07:e8:b8:
         c2:71:33:f6:73:ec:bd:7f:62:14:34:09:06:a2:17:8d:bc:56:
         52:ce:76:b1:78:95:2f:ae:a0:ca:6a:90:64:b2:46:62:00:0a:
         e2:a3:43:2c:26:11:1e:a5:72:8b:06:ce:1b:dd:9a:a8:ed:83:
         00:69:fa:bc:e8:5d:9e:04:63:a5:4f:fc:7e:fb:46:54:b9:d2:
         75:90:19:13
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUGkzT3MPKTiBWAKIzacvzALrCf8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA2MTUxMzExNTBaFw0yMzA2MTQxMzE2NTBaMDMxMTAvBgNV
BAMTKDk5M0ZFOTM2OUI0RkI4ODRBNTA0OEFDN0Q1ODIxMzgzMEI1ODc4NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgI1xp3W+mk6bmyr7XoYPXnqQ
eWe93VivoYSLU8BKg1H2ntLNQV2aAI9C4Onn/vqZSaoEaSd9Uog4l4IiGU9Iz3a9
DhpsA4/PlqZO37tqOYEu/x4ssCeiSFIKkC1pSkINhC9/7bAB+q9H1JexdL4o4iPg
2KoI0arQymH+3qr1zL+TrKaw5RmnhWNyy5EU1lBIs7RGdEX6sViWJaRasRlqP04u
PxSzq3zX7SZBWKPbIc7TA9lI1cIK4Pl12JQXoVcB4Ll7wEzjGJ68pmSY6TxvPJzU
A5CEFjM98WzaUpvg2qnI2teEN7XmzcLZC/tZ8Rq4jqFGLmaxLyN7hFr9JgNFAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZP+k2m0+4hKUE
isfVghODC1h4ZzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KNGN2WU02V3Z3M0NrQmpjOUg1MTdlZXZoNjN6a2RYUFRZ
VFd5U0JORDd2di8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KNGN2WU02V3Z3M0NrQmpjOUg1MTdlZXZoNjN6a2RYUFRZ
VFd5U0JORDd2di8wLzk5M0ZFOTM2OUI0RkI4ODRBNTA0OEFDN0Q1ODIxMzgzMEI1
ODc4NjcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoOhsDANBAIAAjAHAwUA
KAQdqDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECMAwDQYJKoZIhvcNAQELBQAD
ggEBABbOGEfh+pzMpH/uEJSj2fgOgAWgtImP8HcNyPW3CntjkEJzP1YWdI3MSybr
KZwprQjfb98VvFdTb2oniKQjXib8chtb1VIm6ciS3V0zM+r358F0nU5GSx6YQu+q
he90MXgs3fe7KDHRx0rZ02YCzP3gKxlsc/xRu8gqs/OFZMwZPOeKo1nJL5I5KsQE
JIZ62EvSlWBDbwdQCrXTmI51WFVnu7LUwRKYayZM/DCS6oogrAfouMJxM/Zz7L1/
YhQ0CQaiF428VlLOdrF4lS+uoMpqkGSyRmIACuKjQywmER6lcosGzhvdmqjtgwBp
+rzoXZ4EY6VP/H77RlS50nWQGRM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org