Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.cer
File:                     9A4A71695B3E24A3DBD6ED9021804A0403604555.cer (raw, json)
Hash identifier:          hnllgKOrfhErNL1EUE+w4AzTRFpb0d6CCHQkDNzXuu8=
Subject key identifier:   9A:4A:71:69:5B:3E:24:A3:DB:D6:ED:90:21:80:4A:04:03:60:45:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E39E2831C79EDF25071023966934325E1A5FA2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 12:35:10 +0000
Certificate not after:    Mon 02 Dec 2024 12:40:10 +0000
Subordinate resources:    AS: 266399
                          IP: 170.81.92.0/22
                          IP: 2804:3740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:39:e2:83:1c:79:ed:f2:50:71:02:39:66:93:43:25:e1:a5:fa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 12:35:10 2023 GMT
            Not After : Dec  2 12:40:10 2024 GMT
        Subject: CN=9A4A71695B3E24A3DBD6ED9021804A0403604555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:cc:90:88:cb:91:db:af:f1:c9:ec:7e:65:
                    f0:6e:86:72:dc:81:0a:5b:1e:38:93:fa:bf:28:26:
                    d2:da:d1:a5:ec:ba:72:2d:7e:f1:d3:71:4d:0f:08:
                    c2:3b:24:7a:b9:31:3c:ff:26:b9:00:bc:62:69:8d:
                    13:ef:ad:f4:00:03:b9:3e:2b:33:8b:ac:90:ee:9a:
                    a7:e7:35:d4:45:5d:cb:a2:21:9f:77:a7:07:31:f2:
                    f0:89:92:20:04:64:36:19:0f:69:fe:14:d1:3e:08:
                    b9:3f:aa:e0:e7:1f:66:2c:fd:fd:38:dd:97:0f:10:
                    ae:b7:18:97:2a:41:ab:8b:73:b2:4d:e6:aa:f6:c3:
                    a7:8b:9a:a1:60:a4:a5:9d:2f:a4:0e:8a:6b:9b:41:
                    56:dd:d7:2a:3a:15:5d:a9:c6:1d:ae:d5:f6:71:b6:
                    d4:15:7f:19:30:47:c3:64:df:a9:80:84:c1:44:73:
                    52:b7:27:e9:7d:d0:65:fd:2e:1e:07:5f:10:f8:3f:
                    e7:1d:54:d5:e3:05:94:12:68:37:d5:3d:a1:eb:f8:
                    30:55:72:d6:ba:a4:34:af:66:6d:fc:ba:07:8d:bb:
                    b2:86:ae:f8:78:bf:d5:a0:f0:38:1f:a1:08:3a:da:
                    70:4f:8d:07:77:27:fb:f3:1b:58:02:dd:e8:d1:b6:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:4A:71:69:5B:3E:24:A3:DB:D6:ED:90:21:80:4A:04:03:60:45:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22
                IPv6:
                  2804:3740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266399

    Signature Algorithm: sha256WithRSAEncryption
         35:33:3a:69:d1:b4:c9:0b:c9:ce:06:e8:b9:b5:fd:fd:92:7b:
         01:ed:de:77:e9:f3:35:3a:d2:bc:33:dd:c9:79:65:34:fd:ca:
         12:3e:01:4b:23:78:2e:f5:c3:7c:aa:7d:fb:9b:cc:37:23:2f:
         15:89:66:76:59:b6:17:0a:7e:87:25:1f:a7:aa:6e:61:68:e7:
         69:80:af:4a:1d:96:0a:f3:9c:8d:78:fe:3e:6b:12:3f:3e:ef:
         0b:b6:a1:03:3c:04:68:d1:e4:39:82:35:b3:99:ef:53:4e:50:
         a0:84:be:01:6f:49:6a:a0:4a:5d:24:84:27:c9:a6:ea:a0:9c:
         00:50:26:51:a8:88:31:17:9c:75:e2:66:2b:09:8f:87:26:a1:
         33:db:d0:3e:32:3c:c7:55:70:29:ef:a4:b9:2d:c8:44:98:17:
         4d:a2:18:43:04:c8:f5:d5:91:68:9d:a2:3c:f3:c5:75:a6:9f:
         cd:fb:01:af:9d:d4:39:7d:fa:56:bc:c6:c9:f8:03:70:77:12:
         35:5a:a1:c3:fd:05:2b:7c:22:63:ca:cd:4d:af:1a:38:81:4b:
         d6:10:0a:48:da:90:a3:80:a9:69:92:c3:74:63:ca:a7:48:1f:
         42:00:60:6a:4e:c2:37:28:2b:9d:e0:2d:e2:37:8b:fd:35:b6:
         de:db:fc:07
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUHjnigxx57fJQcQI5ZpNDJeGl+iwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDQxMjM1MTBaFw0yNDEyMDIxMjQwMTBaMDMxMTAvBgNV
BAMTKDlBNEE3MTY5NUIzRTI0QTNEQkQ2RUQ5MDIxODA0QTA0MDM2MDQ1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0w8yQiMuR26/xyex+ZfBuhnLc
gQpbHjiT+r8oJtLa0aXsunItfvHTcU0PCMI7JHq5MTz/JrkAvGJpjRPvrfQAA7k+
KzOLrJDumqfnNdRFXcuiIZ93pwcx8vCJkiAEZDYZD2n+FNE+CLk/quDnH2Ys/f04
3ZcPEK63GJcqQauLc7JN5qr2w6eLmqFgpKWdL6QOimubQVbd1yo6FV2pxh2u1fZx
ttQVfxkwR8Nk36mAhMFEc1K3J+l90GX9Lh4HXxD4P+cdVNXjBZQSaDfVPaHr+DBV
cta6pDSvZm38ugeNu7KGrvh4v9Wg8DgfoQg62nBPjQd3J/vzG1gC3ejRtkYnAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSaSnFpWz4ko9vW
7ZAhgEoEA2BFVTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CcmlSWTNSVVhBMTF3UFFVZUpOU3g4WGNYZndYV1RBYVdK
bnNIVGZyUWR4cS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQnJpUlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFX
Sm5zSFRmclFkeHEvMC85QTRBNzE2OTVCM0UyNEEzREJENkVEOTAyMTgwNEEwNDAz
NjA0NTU1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqUVwwDQQCAAIwBwMF
ACgEN0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBCfMA0GCSqGSIb3DQEBCwUA
A4IBAQA1Mzpp0bTJC8nOBui5tf39knsB7d536fM1OtK8M93JeWU0/coSPgFLI3gu
9cN8qn37m8w3Iy8ViWZ2WbYXCn6HJR+nqm5haOdpgK9KHZYK85yNeP4+axI/Pu8L
tqEDPARo0eQ5gjWzme9TTlCghL4Bb0lqoEpdJIQnyabqoJwAUCZRqIgxF5x14mYr
CY+HJqEz29A+MjzHVXAp76S5LchEmBdNohhDBMj11ZFonaI888V1pp/N+wGvndQ5
ffpWvMbJ+ANwdxI1WqHD/QUrfCJjys1Nrxo4gUvWEApI2pCjgKlpksN0Y8qnSB9C
AGBqTsI3KCud4C3iN4v9Nbbe2/wH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org