Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
File:                     9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer (raw, json)
Hash identifier:          +gshe+cZWjyn+Fi7YBNuM9YrbnnDb0QozsqpTLQHAqc=
Subject key identifier:   9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BF222FEA9CC94CB88DC62F7D4847C933022A26D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 16:24:22 +0000
Certificate not after:    Tue 31 Dec 2024 16:29:22 +0000
Subordinate resources:    AS: 269563
                          IP: 45.189.8.0/22
                          IP: 2804:667c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f2:22:fe:a9:cc:94:cb:88:dc:62:f7:d4:84:7c:93:30:22:a2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 16:24:22 2024 GMT
            Not After : Dec 31 16:29:22 2024 GMT
        Subject: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:b5:b2:20:8a:99:76:fa:1a:bc:69:fd:ed:
                    c8:e2:3c:1f:db:e9:56:ed:41:31:7d:12:47:cc:4b:
                    59:45:f9:3a:25:53:3e:b1:9a:92:0b:c1:6e:a5:9a:
                    2b:f4:37:a4:20:2e:3c:85:8f:79:4e:d2:7c:96:f8:
                    f0:fc:fc:fd:0c:11:7c:42:8b:f2:d2:86:5f:ab:ae:
                    c0:40:ad:27:fa:a1:2d:d0:b0:52:4e:54:61:02:bd:
                    45:c0:8d:37:f1:5d:d1:2b:04:15:8b:4a:aa:4b:c3:
                    0e:4a:67:ae:be:61:f9:dd:6b:32:f5:13:e5:b0:1b:
                    f7:98:bd:9e:dd:36:6e:9b:16:89:96:31:7a:84:b6:
                    4a:e1:bd:e6:5e:44:90:ea:d9:14:55:0d:7b:f0:d6:
                    f6:0e:71:a1:b1:57:c6:99:45:14:44:00:3a:02:37:
                    fb:d0:a9:b7:ac:79:54:39:78:cc:a4:03:7b:ac:20:
                    01:4e:fb:ce:7d:d7:ca:4b:99:78:5d:0e:67:f3:da:
                    cb:4b:6f:d4:28:43:a4:76:03:ed:8b:0d:7c:a3:24:
                    9a:7c:e4:c0:b7:8b:6a:8d:b8:2e:db:58:04:c9:a9:
                    01:27:22:e0:37:46:3a:59:3d:25:42:49:de:48:18:
                    d0:47:57:84:fa:71:7b:82:ec:4b:3c:3f:6f:2c:46:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.8.0/22
                IPv6:
                  2804:667c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269563

    Signature Algorithm: sha256WithRSAEncryption
         b4:84:8f:e9:10:c3:25:3e:25:85:04:8d:f0:75:32:53:49:b3:
         0b:da:7e:a7:c2:10:08:8f:a3:56:73:be:e6:d5:9c:33:c1:ee:
         f5:ac:a4:b5:eb:7b:07:35:71:f2:86:99:0c:ab:29:0c:4f:0a:
         d1:89:19:90:36:b4:11:9b:2f:38:8b:ea:2f:a9:f4:dc:3f:01:
         5f:30:e3:33:ca:20:78:35:08:81:a6:21:34:2c:7e:ad:66:92:
         a3:1b:c9:68:e1:37:b3:a8:d8:e4:10:bf:a9:ae:02:96:90:f6:
         6e:58:22:eb:4c:26:cf:ec:5d:9f:88:5c:00:28:dd:a4:9d:27:
         8a:4f:72:09:52:b6:1a:e9:4c:b6:1a:27:3e:3f:15:bb:31:c0:
         ec:dd:eb:ad:b1:24:2e:c9:d1:4d:a4:6f:d9:e5:e4:93:60:46:
         16:6b:9d:4e:d1:e3:a1:01:60:fe:54:c9:1e:ed:5c:94:14:4c:
         a1:3d:22:72:e8:21:a2:20:db:64:4c:f9:92:ab:26:44:e7:7d:
         0d:f9:ae:01:7f:b3:5b:b0:ae:66:4e:71:60:bb:66:65:45:e7:
         3a:df:ba:fe:b1:18:3a:7a:52:23:f7:e4:2b:49:a9:b2:5d:86:
         ff:97:b0:ae:ed:f8:4a:8f:57:a5:cc:a0:29:73:60:b5:d2:23:
         a1:6a:a0:39
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUO/Ii/qnMlMuI3GL31IR8kzAiom0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDIxNjI0MjJaFw0yNDEyMzExNjI5MjJaMDMxMTAvBgNV
BAMTKDlERUFBNDcyOUU3RTVEQzY3ODgyQkUyMzA1RjZCOEVCODZCNTRENTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82rWyIIqZdvoavGn97cjiPB/b
6VbtQTF9EkfMS1lF+TolUz6xmpILwW6lmiv0N6QgLjyFj3lO0nyW+PD8/P0MEXxC
i/LShl+rrsBArSf6oS3QsFJOVGECvUXAjTfxXdErBBWLSqpLww5KZ66+YfndazL1
E+WwG/eYvZ7dNm6bFomWMXqEtkrhveZeRJDq2RRVDXvw1vYOcaGxV8aZRRREADoC
N/vQqbeseVQ5eMykA3usIAFO+85918pLmXhdDmfz2stLb9QoQ6R2A+2LDXyjJJp8
5MC3i2qNuC7bWATJqQEnIuA3RjpZPSVCSd5IGNBHV4T6cXuC7Es8P28sRuedAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSd6qRynn5dxniC
viMF9rjrhrVNVzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FM29CaWgxZVBZSGU1Mml5Rm9GNTFqbUJBSlNka3kyVVVI
eDdDZXdGQUxHUy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRTNvQmloMWVQWUhlNTJpeUZvRjUxam1CQUpTZGt5MlVV
SHg3Q2V3RkFMR1MvMC85REVBQTQ3MjlFN0U1REM2Nzg4MkJFMjMwNUY2QjhFQjg2
QjU0RDU3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvQgwDQQCAAIwBwMF
ACgEZnwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBz7MA0GCSqGSIb3DQEBCwUA
A4IBAQC0hI/pEMMlPiWFBI3wdTJTSbML2n6nwhAIj6NWc77m1Zwzwe71rKS163sH
NXHyhpkMqykMTwrRiRmQNrQRmy84i+ovqfTcPwFfMOMzyiB4NQiBpiE0LH6tZpKj
G8lo4TezqNjkEL+prgKWkPZuWCLrTCbP7F2fiFwAKN2knSeKT3IJUrYa6Uy2Gic+
PxW7McDs3eutsSQuydFNpG/Z5eSTYEYWa51O0eOhAWD+VMke7VyUFEyhPSJy6CGi
INtkTPmSqyZE530N+a4Bf7NbsK5mTnFgu2ZlRec637r+sRg6elIj9+QrSamyXYb/
l7Cu7fhKj1elzKApc2C10iOhaqA5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org