Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9ADBD28DB5FAD709DACC3FC5CFD8063BD1A49B2D.cer
File:                     9ADBD28DB5FAD709DACC3FC5CFD8063BD1A49B2D.cer (raw, json)
Hash identifier:          Xms9SYmQUNBH/dzj+uHit0UZ5pSXK5Z4AqRInT9BqVM=
Subject key identifier:   9A:DB:D2:8D:B5:FA:D7:09:DA:CC:3F:C5:CF:D8:06:3B:D1:A4:9B:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C565AC20C9E460A64BEC44A9D71AC0721260982
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/9ADBD28DB5FAD709DACC3FC5CFD8063BD1A49B2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 17:52:23 +0000
Certificate not after:    Fri 01 Nov 2024 17:57:23 +0000
Subordinate resources:    AS: 267224
                          IP: 45.231.192.0/22
                          IP: 2804:4a34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:56:5a:c2:0c:9e:46:0a:64:be:c4:4a:9d:71:ac:07:21:26:09:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 17:52:23 2023 GMT
            Not After : Nov  1 17:57:23 2024 GMT
        Subject: CN=9ADBD28DB5FAD709DACC3FC5CFD8063BD1A49B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:3e:4c:e2:ff:e3:44:09:22:49:6e:98:5d:
                    cd:a0:70:50:fc:3b:54:c6:25:9f:c0:55:0d:9d:47:
                    f8:30:08:cf:f4:a1:1a:ab:80:ac:a0:48:58:e1:86:
                    22:c2:00:de:dd:78:cd:b0:b6:14:23:35:82:4b:8f:
                    8c:9c:0b:f0:36:82:cb:84:db:54:6c:71:5a:8c:b2:
                    02:e9:40:9a:60:a7:4b:f9:3f:73:22:c2:a7:79:87:
                    d0:9f:28:9e:57:8e:1a:ad:1a:14:1c:2b:91:2a:97:
                    9e:96:e1:66:9c:af:32:b7:ab:5b:69:82:fe:56:69:
                    32:c6:e2:71:60:0a:06:d9:d8:18:1b:ca:7c:e4:87:
                    75:bd:99:27:33:1d:ed:3d:96:bd:b8:d9:f9:19:87:
                    60:34:14:86:a6:3d:b1:67:97:e6:ce:c0:7a:e0:cb:
                    d9:4f:60:87:f6:a3:4f:9a:f8:5a:e9:27:50:9c:91:
                    78:15:cf:c5:10:92:59:72:dd:15:3e:02:a0:0c:31:
                    36:de:41:4b:a8:45:3d:41:91:21:40:9e:24:b1:03:
                    ce:85:ff:d6:88:e2:24:2d:82:18:24:0b:21:9b:55:
                    98:49:66:93:6c:30:31:71:76:90:dd:68:c6:ea:62:
                    70:8f:dc:df:00:c1:aa:c2:1f:e4:e6:ad:ab:0a:ac:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:DB:D2:8D:B5:FA:D7:09:DA:CC:3F:C5:CF:D8:06:3B:D1:A4:9B:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/9ADBD28DB5FAD709DACC3FC5CFD8063BD1A49B2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.192.0/22
                IPv6:
                  2804:4a34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267224

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:9a:c4:e1:0b:cd:df:62:00:9a:62:2a:16:65:a9:33:19:
         13:c7:76:d3:33:5b:b5:d8:52:fd:b4:3a:bd:04:15:84:42:cf:
         14:85:92:c6:33:0f:c6:10:c9:d1:29:6a:b5:3e:3f:05:f0:fe:
         db:d4:55:69:a2:6c:70:7f:30:4f:f7:28:5f:7b:f8:dd:2e:09:
         60:67:a8:77:fa:bf:02:05:df:c0:d1:68:24:ba:42:13:ab:49:
         dd:a2:80:ba:e1:d0:75:1c:5f:63:18:ba:4d:b9:e5:ff:6f:c4:
         95:cb:59:a2:87:d5:b9:4d:a2:96:8a:8b:5a:04:a4:51:f5:1c:
         3d:da:15:c9:f4:86:f4:1f:53:04:c8:64:25:4a:82:ba:42:72:
         50:77:98:e9:07:89:5e:22:93:29:a3:af:d2:ad:c7:6e:40:5b:
         b1:d5:3a:4e:96:aa:42:a3:a6:35:2a:36:6c:3f:b6:28:74:c3:
         72:96:60:7d:bc:6d:6e:78:c0:64:88:4c:76:61:31:0d:39:cb:
         50:be:3c:ad:29:11:92:da:48:1a:e2:8f:76:db:0b:83:09:b2:
         fa:84:4b:92:78:30:77:d2:0d:b9:66:6a:88:83:13:42:2c:96:
         52:03:1b:45:7e:cc:95:1e:6e:ad:60:a5:c2:34:8a:57:b8:1b:
         d3:6c:dd:62
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXFZawgyeRgpkvsRKnXGsByEmCYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDMxNzUyMjNaFw0yNDExMDExNzU3MjNaMDMxMTAvBgNV
BAMTKDlBREJEMjhEQjVGQUQ3MDlEQUNDM0ZDNUNGRDgwNjNCRDFBNDlCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8j5M4v/jRAkiSW6YXc2gcFD8
O1TGJZ/AVQ2dR/gwCM/0oRqrgKygSFjhhiLCAN7deM2wthQjNYJLj4ycC/A2gsuE
21RscVqMsgLpQJpgp0v5P3Miwqd5h9CfKJ5XjhqtGhQcK5Eql56W4WacrzK3q1tp
gv5WaTLG4nFgCgbZ2Bgbynzkh3W9mSczHe09lr242fkZh2A0FIamPbFnl+bOwHrg
y9lPYIf2o0+a+FrpJ1CckXgVz8UQklly3RU+AqAMMTbeQUuoRT1BkSFAniSxA86F
/9aI4iQtghgkCyGbVZhJZpNsMDFxdpDdaMbqYnCP3N8AwarCH+TmrasKrNprAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSa29KNtfrXCdrM
P8XP2AY70aSbLTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yUGhwSk5QYUdRTXk0OXJSZnc5U1hWTVNDdENXN0JLYng0
UjRXNGVIMUxvZy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMlBocEpOUGFHUU15NDlyUmZ3OVNYVk1TQ3RDVzdCS2J4
NFI0VzRlSDFMb2cvMC85QURCRDI4REI1RkFENzA5REFDQzNGQzVDRkQ4MDYzQkQx
QTQ5QjJELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt58AwDQQCAAIwBwMF
ACgESjQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBPYMA0GCSqGSIb3DQEBCwUA
A4IBAQAJzJrE4QvN32IAmmIqFmWpMxkTx3bTM1u12FL9tDq9BBWEQs8UhZLGMw/G
EMnRKWq1Pj8F8P7b1FVpomxwfzBP9yhfe/jdLglgZ6h3+r8CBd/A0WgkukITq0nd
ooC64dB1HF9jGLpNueX/b8SVy1mih9W5TaKWiotaBKRR9Rw92hXJ9Ib0H1MEyGQl
SoK6QnJQd5jpB4leIpMpo6/SrcduQFux1TpOlqpCo6Y1KjZsP7YodMNylmB9vG1u
eMBkiEx2YTENOctQvjytKRGS2kga4o922wuDCbL6hEuSeDB30g25ZmqIgxNCLJZS
AxtFfsyVHm6tYKXCNIpXuBvTbN1i
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org