Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.cer
File:                     9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.cer (raw, json)
Hash identifier:          rAmnEX7BoOumZuAlC+EoSrL0GDb5lANInXT1dVrRENI=
Subject key identifier:   9B:39:9E:BA:CF:83:98:BE:48:81:B8:A2:BA:EE:BD:AF:EC:C7:35:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       316D0FE25F26A45F6FE27D202EA0FD310700E656
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Aug 2022 17:27:47 +0000
Certificate not after:    Thu 10 Aug 2023 17:32:47 +0000
Subordinate resources:    AS: 262880
                          IP: 168.197.52.0/22
                          IP: 168.227.28.0/22
                          IP: 177.10.232.0/21
                          IP: 2804:2ee8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6d:0f:e2:5f:26:a4:5f:6f:e2:7d:20:2e:a0:fd:31:07:00:e6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 17:27:47 2022 GMT
            Not After : Aug 10 17:32:47 2023 GMT
        Subject: CN=9B399EBACF8398BE4881B8A2BAEEBDAFECC73501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:c2:81:9b:6c:5b:bd:08:23:58:c1:9e:11:
                    4f:9b:64:c9:f1:96:2d:71:59:05:f7:26:e7:65:b1:
                    67:2e:89:96:40:3f:25:48:66:32:b2:e8:55:74:ed:
                    3f:05:b5:1b:78:41:ce:63:24:ec:c9:b8:81:11:60:
                    34:0a:81:ba:d3:31:9e:77:c1:ec:9a:d4:36:87:83:
                    97:a8:7f:dc:f3:0d:9a:f9:63:5d:62:25:23:8b:fa:
                    73:67:d7:3b:8b:86:14:4b:6d:31:69:1b:c4:f7:be:
                    7b:9b:e5:46:99:d3:ea:25:04:e9:67:1c:03:7d:d9:
                    40:bb:db:42:c4:79:7f:a7:d0:21:b3:23:e6:9b:c3:
                    a5:ab:22:77:d7:76:c2:5d:ed:58:56:c0:cd:b3:60:
                    19:08:85:a9:0d:28:f3:62:50:f0:75:cd:11:2b:f5:
                    74:95:26:6c:74:31:6c:ba:e6:15:9b:45:a4:25:34:
                    4f:e5:06:b4:03:6f:66:06:dc:82:7c:bd:1e:f1:7b:
                    63:08:e4:dc:77:e2:b4:f6:5b:63:53:da:46:30:d4:
                    45:23:5d:89:6b:78:be:d8:00:9f:7e:c2:28:30:3b:
                    6f:97:fd:24:11:84:25:aa:8d:b1:b6:b9:0e:12:a5:
                    16:db:77:96:34:ff:88:ca:6d:22:06:65:7c:1e:f7:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:39:9E:BA:CF:83:98:BE:48:81:B8:A2:BA:EE:BD:AF:EC:C7:35:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.52.0/22
                  168.227.28.0/22
                  177.10.232.0/21
                IPv6:
                  2804:2ee8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262880

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:57:a8:a4:0e:92:e4:9d:f2:ca:8d:d4:d6:43:db:77:0e:
         24:96:f0:ca:96:3b:9d:d8:ea:f9:24:72:d8:30:dd:6a:19:4e:
         c8:c1:89:3d:f5:f2:55:00:2a:37:12:5e:e0:54:b7:86:05:c8:
         15:95:f3:ac:ce:af:94:7f:98:1e:55:4f:0e:a1:ed:92:06:33:
         d1:95:99:c6:c0:36:98:68:df:59:98:eb:ea:c5:f7:ea:da:15:
         78:9d:ad:0d:33:eb:b0:23:88:f2:f1:d4:62:5d:88:25:05:b8:
         41:0e:e1:a1:66:d4:b2:f2:56:9c:0a:df:1c:e6:95:33:f3:00:
         8f:ae:a1:a2:23:db:76:09:00:a7:e7:1c:2f:39:93:d0:f1:dd:
         68:5f:a4:36:fd:72:8b:12:f1:56:b4:e2:0c:f0:e1:48:fe:73:
         61:21:e6:11:a0:ed:85:d3:75:62:d4:0c:14:58:d4:19:fe:b0:
         50:e1:3b:2e:2a:35:92:cb:19:ee:1d:dc:52:ab:19:67:ff:68:
         a4:30:09:20:c0:a9:cc:d2:81:35:c2:6e:fa:8e:43:47:d4:e9:
         08:55:55:33:f3:58:17:13:98:05:59:22:51:35:a1:56:c0:0b:
         15:a4:18:08:a7:5e:01:18:1b:0e:2c:8c:24:5c:ed:d6:87:fa:
         1f:ae:9f:19
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUMW0P4l8mpF9v4n0gLqD9MQcA5lYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MTExNzI3NDdaFw0yMzA4MTAxNzMyNDdaMDMxMTAvBgNV
BAMTKDlCMzk5RUJBQ0Y4Mzk4QkU0ODgxQjhBMkJBRUVCREFGRUNDNzM1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfMKBm2xbvQgjWMGeEU+bZMnx
li1xWQX3JudlsWcuiZZAPyVIZjKy6FV07T8FtRt4Qc5jJOzJuIERYDQKgbrTMZ53
weya1DaHg5eof9zzDZr5Y11iJSOL+nNn1zuLhhRLbTFpG8T3vnub5UaZ0+olBOln
HAN92UC720LEeX+n0CGzI+abw6WrInfXdsJd7VhWwM2zYBkIhakNKPNiUPB1zREr
9XSVJmx0MWy65hWbRaQlNE/lBrQDb2YG3IJ8vR7xe2MI5Nx34rT2W2NT2kYw1EUj
XYlreL7YAJ9+wigwO2+X/SQRhCWqjbG2uQ4SpRbbd5Y0/4jKbSIGZXwe98PHAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbOZ66z4OYvkiB
uKK67r2v7Mc1ATAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84VWtVU0xoVUNORDRZd2M2SzhtWDFMY1NVbm1KcFZjWFJN
MTY5TmloNmlEdy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84VWtVU0xoVUNORDRZd2M2SzhtWDFMY1NVbm1KcFZjWFJN
MTY5TmloNmlEdy8wLzlCMzk5RUJBQ0Y4Mzk4QkU0ODgxQjhBMkJBRUVCREFGRUND
NzM1MDEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAqjFNAMEAqjjHAMEA7EK
6DANBAIAAjAHAwUAKAQu6DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAuAwDQYJ
KoZIhvcNAQELBQADggEBAAu0V6ikDpLknfLKjdTWQ9t3DiSW8MqWO53Y6vkkctgw
3WoZTsjBiT318lUAKjcSXuBUt4YFyBWV86zOr5R/mB5VTw6h7ZIGM9GVmcbANpho
31mY6+rF9+raFXidrQ0z67AjiPLx1GJdiCUFuEEO4aFm1LLyVpwK3xzmlTPzAI+u
oaIj23YJAKfnHC85k9Dx3WhfpDb9cosS8Va04gzw4Uj+c2Eh5hGg7YXTdWLUDBRY
1Bn+sFDhOy4qNZLLGe4d3FKrGWf/aKQwCSDAqczSgTXCbvqOQ0fU6QhVVTPzWBcT
mAVZIlE1oVbACxWkGAinXgEYGw4sjCRc7daH+h+unxk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org