Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A3C8C7D215D79C1BE7D47E880B64C33FB5016DA.cer
File:                     9A3C8C7D215D79C1BE7D47E880B64C33FB5016DA.cer (raw, json)
Hash identifier:          cNj4GV22l1xWs7RITa+pgFeetgtn8LurQ4bqIeHhcgE=
Subject key identifier:   9A:3C:8C:7D:21:5D:79:C1:BE:7D:47:E8:80:B6:4C:33:FB:50:16:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1636AB0AA9BE319478B77C09D8BC02CB0C4EA29C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/9A3C8C7D215D79C1BE7D47E880B64C33FB5016DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 20:37:23 +0000
Certificate not after:    Wed 05 Feb 2025 20:42:23 +0000
Subordinate resources:    AS: 53078
                          IP: 170.80.252.0/22
                          IP: 186.193.16.0/20
                          IP: 187.94.208.0/20
                          IP: 2804:6bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:ab:0a:a9:be:31:94:78:b7:7c:09:d8:bc:02:cb:0c:4e:a2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 20:37:23 2024 GMT
            Not After : Feb  5 20:42:23 2025 GMT
        Subject: CN=9A3C8C7D215D79C1BE7D47E880B64C33FB5016DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:a6:ba:10:a9:8d:4b:d3:80:59:6f:c5:96:
                    ca:8a:0c:9c:24:39:2f:e4:e2:1e:b8:90:14:b9:cc:
                    43:b9:6a:74:a2:cd:b8:e0:bd:4b:88:55:fb:61:ef:
                    a7:0a:df:09:7e:8e:8c:9a:4a:31:2d:b1:32:07:9e:
                    f4:1f:9c:af:de:cb:31:d4:5a:61:dc:cc:8a:24:5e:
                    f9:cf:3c:cb:2f:9e:0f:71:ad:3b:86:36:cd:47:75:
                    61:b9:d8:4e:b7:c4:0e:c2:ed:31:53:2f:13:1f:80:
                    44:87:fe:a8:6a:ee:b8:fe:3d:4c:d2:37:d1:8d:08:
                    f9:a5:04:43:81:ac:4a:36:a7:b4:b7:6c:bd:cf:41:
                    04:6d:aa:99:4c:93:1a:0e:da:47:2c:49:c8:f3:2e:
                    10:e5:71:21:97:a4:a1:f3:0f:81:db:75:a2:65:82:
                    54:bd:95:cc:75:0b:97:4a:47:69:b2:0c:4f:91:a2:
                    fc:af:19:d0:f4:e7:47:62:72:ab:06:6b:c1:15:99:
                    34:5d:f6:4d:cc:b9:dc:8c:51:57:e3:3b:98:9b:61:
                    44:29:69:cd:c1:fd:83:2d:94:8c:b2:0f:42:13:ed:
                    70:7a:b0:e8:24:ee:cb:ff:c0:a1:b6:e5:ff:ad:82:
                    6e:65:09:f0:0a:2d:64:e4:37:13:5b:73:07:56:87:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:3C:8C:7D:21:5D:79:C1:BE:7D:47:E8:80:B6:4C:33:FB:50:16:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/9A3C8C7D215D79C1BE7D47E880B64C33FB5016DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.252.0/22
                  186.193.16.0/20
                  187.94.208.0/20
                IPv6:
                  2804:6bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53078

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:ea:eb:2a:d8:7e:f9:41:34:42:ce:41:ec:8f:f0:29:de:
         fc:8f:ef:6f:68:30:6f:76:24:8c:3a:22:a9:2d:e1:4d:6b:5b:
         7d:6c:b7:63:14:bf:62:ed:62:88:89:7e:8f:6f:0a:89:0d:e8:
         d7:2f:43:29:85:d1:e7:d8:82:bf:0a:da:f9:5f:0a:58:07:00:
         f4:16:80:e2:c0:11:2a:89:04:1c:b3:d5:15:4a:41:9f:3b:61:
         49:51:1c:eb:54:ed:fe:86:32:cc:aa:14:fb:e6:ce:15:7c:41:
         1f:9d:f7:37:dc:32:05:6f:80:bb:3c:f2:83:21:3c:4c:bc:af:
         ab:c9:67:3a:e1:b4:e7:e8:50:61:74:08:1f:b5:92:05:7c:b1:
         8c:5f:b4:f7:5b:a6:6e:48:5b:e2:c4:6c:85:d2:a7:2d:83:65:
         bc:fb:48:65:73:ac:28:4c:c6:2e:48:5f:d6:37:5b:12:f9:8f:
         77:14:21:0c:c1:15:67:26:b2:f6:9b:ad:1f:57:88:9d:ff:0b:
         99:2e:13:12:fe:4b:21:29:bb:37:0d:cd:e3:a2:3d:dc:f2:c6:
         72:f5:1c:77:de:40:c0:e8:c7:15:2e:9e:e7:b4:70:ef:2e:61:
         95:be:10:94:21:35:06:8b:cc:2b:9f:2a:29:71:c3:91:2b:83:
         26:be:ea:f3
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUFjarCqm+MZR4t3wJ2LwCywxOopwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDcyMDM3MjNaFw0yNTAyMDUyMDQyMjNaMDMxMTAvBgNV
BAMTKDlBM0M4QzdEMjE1RDc5QzFCRTdENDdFODgwQjY0QzMzRkI1MDE2REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5aa6EKmNS9OAWW/FlsqKDJwk
OS/k4h64kBS5zEO5anSizbjgvUuIVfth76cK3wl+joyaSjEtsTIHnvQfnK/eyzHU
WmHczIokXvnPPMsvng9xrTuGNs1HdWG52E63xA7C7TFTLxMfgESH/qhq7rj+PUzS
N9GNCPmlBEOBrEo2p7S3bL3PQQRtqplMkxoO2kcsScjzLhDlcSGXpKHzD4HbdaJl
glS9lcx1C5dKR2myDE+RovyvGdD050dicqsGa8EVmTRd9k3MudyMUVfjO5ibYUQp
ac3B/YMtlIyyD0IT7XB6sOgk7sv/wKG25f+tgm5lCfAKLWTkNxNbcwdWh7CnAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSaPIx9IV15wb59
R+iAtkwz+1AW2jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DS3FhYlN4SkRtOUtka2gzeTNGTTNWRlVUS1lBUUhVYjVY
VnNGcXBud2lTYi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ0txYWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1
WFZzRnFwbndpU2IvMC85QTNDOEM3RDIxNUQ3OUMxQkU3RDQ3RTg4MEI2NEMzM0ZC
NTAxNkRBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKqUPwDBAS6wRADBAS7
XtAwDQQCAAIwBwMFACgEBrwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM9WMA0G
CSqGSIb3DQEBCwUAA4IBAQB39urrKth++UE0Qs5B7I/wKd78j+9vaDBvdiSMOiKp
LeFNa1t9bLdjFL9i7WKIiX6PbwqJDejXL0MphdHn2IK/Ctr5XwpYBwD0FoDiwBEq
iQQcs9UVSkGfO2FJURzrVO3+hjLMqhT75s4VfEEfnfc33DIFb4C7PPKDITxMvK+r
yWc64bTn6FBhdAgftZIFfLGMX7T3W6ZuSFvixGyF0qctg2W8+0hlc6woTMYuSF/W
N1sS+Y93FCEMwRVnJrL2m60fV4id/wuZLhMS/kshKbs3Dc3joj3c8sZy9Rx33kDA
6McVLp7ntHDvLmGVvhCUITUGi8wrnyopccORK4Mmvurz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org