Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer
File:                     9C9296102315824CFD263B973FA8E26ADEAD1475.cer (raw, json)
Hash identifier:          gnWS7uWjvFUKzKbkECg6P449VafZEh5V2F7qXrPcHq8=
Subject key identifier:   9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A24E0790530CE3C65219B73D2D26B169DE8D2C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 16:35:15 +0000
Certificate not after:    Thu 13 Feb 2025 16:40:15 +0000
Subordinate resources:    AS: 267251
                          IP: 45.232.72.0/22
                          IP: 2804:4a98::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:24:e0:79:05:30:ce:3c:65:21:9b:73:d2:d2:6b:16:9d:e8:d2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 16:35:15 2024 GMT
            Not After : Feb 13 16:40:15 2025 GMT
        Subject: CN=9C9296102315824CFD263B973FA8E26ADEAD1475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:9e:39:a7:bc:34:05:ed:54:5f:c1:cb:e6:
                    ef:48:e6:bb:66:88:f5:27:b5:bf:55:ba:89:f8:20:
                    f3:75:b5:ef:62:9d:b4:68:44:3e:fe:67:c6:c4:16:
                    56:f4:d0:f5:b7:bb:7a:fb:e0:5d:99:1b:d7:df:95:
                    39:7e:a4:da:a2:7c:9f:94:b5:84:70:da:22:6e:e7:
                    1b:79:c0:50:d3:51:a6:81:50:bf:af:e6:90:9d:0c:
                    4c:dd:86:ca:e5:39:dd:cc:10:f8:91:d6:24:71:d7:
                    b7:09:3f:50:6b:0b:02:ee:bb:42:f5:34:04:30:b0:
                    2a:5a:5d:42:69:d5:af:9c:0f:2a:a4:82:da:bc:0c:
                    38:91:af:17:f0:16:9b:4e:d0:ea:19:57:7e:31:75:
                    95:8f:e5:70:7a:00:a4:00:20:6d:f7:e9:b8:26:44:
                    0b:b1:41:57:7d:3a:b1:b6:07:cc:a3:93:2d:a5:b5:
                    03:d6:dd:f7:be:9a:6a:b8:8b:d4:c8:27:b9:44:2e:
                    3f:72:b0:e5:67:94:9a:81:d6:e1:3c:bc:36:81:85:
                    88:9d:7f:d5:36:cd:ab:c4:de:59:4f:d2:d8:a5:a8:
                    45:22:3d:18:94:70:c2:f6:c0:9c:9b:9c:2a:b7:05:
                    ee:ab:87:14:2c:f6:64:27:23:58:90:57:19:d3:f7:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.72.0/22
                IPv6:
                  2804:4a98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267251

    Signature Algorithm: sha256WithRSAEncryption
         18:e8:3f:4b:31:c3:5f:64:b5:52:67:66:12:6d:bd:46:03:ca:
         48:5d:9f:6a:ea:cc:ff:b1:42:56:dc:bf:8e:47:b4:11:01:f2:
         6a:0e:39:15:aa:4a:61:d3:22:8b:b5:48:67:ff:fc:46:8e:9f:
         fa:d8:08:ec:2f:ca:97:53:20:4b:ef:04:97:dd:07:9a:10:3e:
         86:74:e3:9a:ae:f3:6b:c6:a8:56:c9:1a:ff:8e:1d:8b:52:3b:
         06:97:61:66:0b:a1:72:36:d8:d4:87:f0:a4:14:e6:33:70:91:
         3b:08:d6:1c:a8:d7:41:c1:d0:f0:c2:c1:47:68:27:3c:70:d6:
         e4:f3:42:3f:39:df:f2:e4:71:a9:88:e2:39:79:11:06:f9:58:
         81:07:32:5f:3a:5a:d4:b8:94:15:37:d4:fc:4e:a2:40:63:4f:
         4c:cf:af:00:ce:8f:d0:69:20:eb:6f:1e:dc:9e:ff:26:0e:49:
         01:68:08:0e:11:9d:36:e9:af:34:e8:25:0c:30:b2:16:20:2f:
         a7:32:7f:c2:c3:0b:2e:41:d1:9b:68:47:fc:a0:c5:5f:ed:91:
         31:37:9b:d2:4d:84:54:1f:c5:83:a9:ed:8f:42:70:3c:58:4f:
         d1:04:ad:22:95:e3:98:c1:c0:57:d0:ca:ae:2b:a1:e4:09:99:
         d7:8f:87:4e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUKiTgeQUwzjxlIZtz0tJrFp3o0sEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxNjM1MTVaFw0yNTAyMTMxNjQwMTVaMDMxMTAvBgNV
BAMTKDlDOTI5NjEwMjMxNTgyNENGRDI2M0I5NzNGQThFMjZBREVBRDE0NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjAp45p7w0Be1UX8HL5u9I5rtm
iPUntb9Vuon4IPN1te9inbRoRD7+Z8bEFlb00PW3u3r74F2ZG9fflTl+pNqifJ+U
tYRw2iJu5xt5wFDTUaaBUL+v5pCdDEzdhsrlOd3MEPiR1iRx17cJP1BrCwLuu0L1
NAQwsCpaXUJp1a+cDyqkgtq8DDiRrxfwFptO0OoZV34xdZWP5XB6AKQAIG336bgm
RAuxQVd9OrG2B8yjky2ltQPW3fe+mmq4i9TIJ7lELj9ysOVnlJqB1uE8vDaBhYid
f9U2zavE3llP0tilqEUiPRiUcML2wJybnCq3Be6rhxQs9mQnI1iQVxnT9wctAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSckpYQIxWCTP0m
O5c/qOJq3q0UdTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IVmdFSk1tR2VKdkpQUlhISG1nSFZtNkdjOGVSWlpTZldr
QXZodlRRTDJrby8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IVmdFSk1tR2VKdkpQUlhISG1nSFZtNkdjOGVSWlpTZldr
QXZodlRRTDJrby8wLzlDOTI5NjEwMjMxNTgyNENGRDI2M0I5NzNGQThFMjZBREVB
RDE0NzUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3oSDANBAIAAjAHAwUA
KARKmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEE/MwDQYJKoZIhvcNAQELBQAD
ggEBABjoP0sxw19ktVJnZhJtvUYDykhdn2rqzP+xQlbcv45HtBEB8moOORWqSmHT
Iou1SGf//EaOn/rYCOwvypdTIEvvBJfdB5oQPoZ045qu82vGqFbJGv+OHYtSOwaX
YWYLoXI22NSH8KQU5jNwkTsI1hyo10HB0PDCwUdoJzxw1uTzQj853/LkcamI4jl5
EQb5WIEHMl86WtS4lBU31PxOokBjT0zPrwDOj9BpIOtvHtye/yYOSQFoCA4RnTbp
rzToJQwwshYgL6cyf8LDCy5B0ZtoR/ygxV/tkTE3m9JNhFQfxYOp7Y9CcDxYT9EE
rSKV45jBwFfQyq4roeQJmdePh04=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org