Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.cer
File:                     9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.cer (raw, json)
Hash identifier:          ID3nE2lubCI8CQ/0LI1OL2k9fh05gVD2k6+SwrCiNug=
Subject key identifier:   9B:07:FF:5C:1E:CD:FE:49:22:F0:BC:DD:35:14:CA:41:27:A6:B4:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       03EC9DF09C89C549C5200208434444501C6D33EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 17:58:54 +0000
Certificate not after:    Wed 05 Jun 2024 18:03:54 +0000
Subordinate resources:    AS: 271155
                          IP: 177.87.248.0/23
                          IP: 2804:77a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ec:9d:f0:9c:89:c5:49:c5:20:02:08:43:44:44:50:1c:6d:33:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  7 17:58:54 2023 GMT
            Not After : Jun  5 18:03:54 2024 GMT
        Subject: CN=9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:b4:56:95:b1:25:6a:7e:28:05:24:14:22:
                    3d:a5:2c:12:21:40:97:16:b2:b4:32:15:e8:5f:0e:
                    d7:55:51:fb:ca:d7:79:5d:c4:38:0a:fc:0f:7c:db:
                    8e:3f:20:34:08:58:d3:b8:f4:e7:9e:5a:7a:5a:43:
                    49:20:8a:52:9c:71:cb:89:7e:bc:b8:73:aa:6a:16:
                    0c:4a:09:28:c8:6b:da:75:05:33:5c:65:af:23:ba:
                    86:d7:ee:27:db:37:23:54:85:40:66:f3:d4:a8:a4:
                    d0:47:dc:30:b5:83:26:3d:6b:01:bf:df:73:92:79:
                    10:e8:26:76:6d:ec:51:a6:97:10:1b:e2:46:4f:dc:
                    c3:60:28:ba:39:a0:5f:8a:97:e6:e6:aa:c0:8c:8e:
                    eb:75:6c:1b:63:fd:75:b1:b7:23:39:d6:bd:40:15:
                    90:ab:60:56:79:0c:4c:e0:a6:53:06:35:cf:20:f7:
                    62:79:1d:15:78:8f:f1:cd:dc:96:16:6d:68:5a:27:
                    42:f7:37:85:b9:5e:c3:e8:a0:82:f8:70:30:aa:0d:
                    76:6b:39:2c:41:36:f2:c0:a8:ca:98:5e:a7:c2:00:
                    a8:a4:4d:b1:d0:07:cf:45:49:e4:e2:92:27:da:0e:
                    30:40:fe:47:21:f4:5a:13:8c:34:c5:e1:b6:b8:f8:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:07:FF:5C:1E:CD:FE:49:22:F0:BC:DD:35:14:CA:41:27:A6:B4:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.248.0/23
                IPv6:
                  2804:77a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271155

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:ea:15:e9:0f:65:86:55:1a:07:d2:49:b7:6d:f3:6e:a9:
         dc:ce:e5:db:e9:ac:55:e1:50:b8:4f:e7:e9:e0:07:e9:2e:e7:
         23:89:8c:6f:9c:59:3d:72:e7:59:1d:ba:97:5a:fb:af:ca:95:
         17:2c:af:da:18:9e:92:cd:68:bd:f0:a4:d8:9d:d2:35:b3:5a:
         06:54:f5:56:88:c1:02:e4:2b:df:7d:af:f5:26:4c:95:f5:84:
         e2:b5:ae:46:1b:31:a4:cc:1a:b5:03:e5:2e:1d:97:0b:ad:5e:
         55:58:58:1b:70:33:a1:b1:c4:81:1a:cd:70:39:6b:86:b5:0b:
         7f:98:1d:81:e5:e4:2c:05:41:01:67:47:96:c5:e9:94:05:62:
         33:9c:e0:48:42:c0:c9:47:47:dc:ca:6d:f7:e4:62:60:a2:f4:
         4f:c2:f1:72:9a:e8:0e:79:2d:c1:2d:a0:ec:00:df:c5:0c:32:
         3a:92:56:af:45:5a:bd:6d:c7:b4:be:83:ad:83:7c:2a:33:1b:
         5b:dc:b8:9b:2a:37:a8:7b:7e:19:fe:c9:f5:7d:f2:cc:68:c4:
         4e:b8:94:1d:07:13:a8:0d:f5:73:2c:1a:b4:06:81:cf:d7:4b:
         03:69:0c:e0:5d:6d:f3:c8:e4:4a:b6:c8:39:63:3b:c4:a4:0e:
         6e:8d:9c:d9
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUA+yd8JyJxUnFIAIIQ0REUBxtM+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MDcxNzU4NTRaFw0yNDA2MDUxODAzNTRaMDMxMTAvBgNV
BAMTKDlCMDdGRjVDMUVDREZFNDkyMkYwQkNERDM1MTRDQTQxMjdBNkI0Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHrRWlbElan4oBSQUIj2lLBIh
QJcWsrQyFehfDtdVUfvK13ldxDgK/A98244/IDQIWNO49OeeWnpaQ0kgilKcccuJ
fry4c6pqFgxKCSjIa9p1BTNcZa8juobX7ifbNyNUhUBm89SopNBH3DC1gyY9awG/
33OSeRDoJnZt7FGmlxAb4kZP3MNgKLo5oF+Kl+bmqsCMjut1bBtj/XWxtyM51r1A
FZCrYFZ5DEzgplMGNc8g92J5HRV4j/HN3JYWbWhaJ0L3N4W5XsPooIL4cDCqDXZr
OSxBNvLAqMqYXqfCAKikTbHQB89FSeTikifaDjBA/kch9FoTjDTF4ba4+EzFAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbB/9cHs3+SSLw
vN01FMpBJ6a0zzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9pUU1jVzNuN0FXOTlYZGpXa1FpTVNWNFVZZ0JuUlpaempi
b3ZKNDJ6bWY2LzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9pUU1jVzNuN0FXOTlYZGpXa1FpTVNWNFVZZ0JuUlpaempi
b3ZKNDJ6bWY2LzAvOUIwN0ZGNUMxRUNERkU0OTIyRjBCQ0REMzUxNENBNDEyN0E2
QjRDRi5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBsVf4MA0EAgACMAcDBQAo
BHegMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQjMzANBgkqhkiG9w0BAQsFAAOC
AQEAi/DqFekPZYZVGgfSSbdt826p3M7l2+msVeFQuE/n6eAH6S7nI4mMb5xZPXLn
WR26l1r7r8qVFyyv2hieks1ovfCk2J3SNbNaBlT1VojBAuQr332v9SZMlfWE4rWu
RhsxpMwatQPlLh2XC61eVVhYG3AzobHEgRrNcDlrhrULf5gdgeXkLAVBAWdHlsXp
lAViM5zgSELAyUdH3Mpt9+RiYKL0T8LxcproDnktwS2g7ADfxQwyOpJWr0VavW3H
tL6DrYN8KjMbW9y4myo3qHt+Gf7J9X3yzGjETriUHQcTqA31cywatAaBz9dLA2kM
4F1t88jkSrbIOWM7xKQObo2c2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org