Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9E7FA96DC86B24E8398137F21142345FD90F79A7.cer
File:                     9E7FA96DC86B24E8398137F21142345FD90F79A7.cer (raw, json)
Hash identifier:          UEwl9HrlFH5oyNrxw+mj/3axDaX7lIMBK7cw5+P8EiQ=
Subject key identifier:   9E:7F:A9:6D:C8:6B:24:E8:39:81:37:F2:11:42:34:5F:D9:0F:79:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D325B0CC17687F608DF67C03500F94D95A77080
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9E7FA96DC86B24E8398137F21142345FD90F79A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 16:14:52 +0000
Certificate not after:    Fri 14 Feb 2025 16:19:52 +0000
Subordinate resources:    AS: 265282
                          IP: 168.90.208.0/22
                          IP: 2804:2d70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:32:5b:0c:c1:76:87:f6:08:df:67:c0:35:00:f9:4d:95:a7:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 16:14:52 2024 GMT
            Not After : Feb 14 16:19:52 2025 GMT
        Subject: CN=9E7FA96DC86B24E8398137F21142345FD90F79A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:cb:e6:89:51:d6:e6:31:c5:9f:bf:3a:37:
                    45:6e:a3:8f:75:59:3c:20:15:66:f7:c1:bf:8c:92:
                    ad:10:e1:39:90:22:07:4f:e7:a3:64:ce:fc:d7:3f:
                    07:81:ac:01:83:af:e4:41:98:be:19:92:ca:c6:08:
                    f6:0e:bd:76:66:94:0c:19:d7:af:b2:e1:6c:0c:e5:
                    05:4d:44:89:1b:5e:5f:d2:46:b3:af:cf:bf:c9:aa:
                    71:5c:20:ae:09:82:d2:39:be:fd:95:30:df:17:9e:
                    e3:cd:ed:9b:a6:cf:4a:6d:79:c0:71:bd:df:a8:e5:
                    dd:3b:42:b6:26:77:8b:ab:3d:43:ae:1f:99:73:0b:
                    eb:78:14:f1:86:eb:40:f0:ce:40:97:df:bb:8f:61:
                    6d:93:a7:96:df:e4:53:ef:db:c2:9d:9d:7d:27:d1:
                    3f:37:a9:f9:cc:57:ff:84:ec:31:59:f7:41:82:aa:
                    8f:15:94:68:1c:e5:43:e6:57:55:72:3b:39:9e:9e:
                    95:85:8c:6f:65:24:c1:64:7d:85:28:e1:f8:23:09:
                    a0:91:2b:4b:4d:ea:cd:d0:45:60:c3:b3:33:35:57:
                    2c:32:40:ad:e5:d1:2e:c3:bf:78:b7:6a:d0:b4:c3:
                    44:3c:19:77:21:52:d4:35:c2:86:da:a7:00:03:1c:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:7F:A9:6D:C8:6B:24:E8:39:81:37:F2:11:42:34:5F:D9:0F:79:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9E7FA96DC86B24E8398137F21142345FD90F79A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.208.0/22
                IPv6:
                  2804:2d70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265282

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:4b:77:99:b6:3b:63:de:4c:dd:b4:cb:19:01:1e:62:c7:
         14:7e:de:04:3c:69:cf:3b:e3:8a:ff:f0:4a:ee:83:ac:16:da:
         5e:a4:aa:83:fa:f0:da:2a:d7:9e:48:12:31:7c:47:13:86:d4:
         92:d5:27:64:19:08:4b:61:13:bf:10:c8:ea:c1:dd:a5:8e:b2:
         c6:f8:5f:96:b5:bd:14:03:18:e2:b8:42:ca:92:7e:7e:fd:bd:
         da:fc:f3:13:8d:bd:79:07:e3:9c:5a:e6:49:99:b2:53:1d:e4:
         6c:42:08:ed:0f:f8:6c:40:ea:14:33:03:6b:0e:20:d0:6a:cf:
         1e:3c:0b:34:f7:b5:b8:2a:8a:28:b8:c6:57:a8:9d:ee:6f:61:
         9e:ba:c8:4a:34:a9:0f:38:c7:5f:c4:ed:60:98:d9:03:eb:7f:
         f3:6a:10:f6:30:80:6e:05:05:c8:81:54:57:7c:e5:0d:ad:a5:
         9a:ae:36:f8:e8:bd:a5:e9:d6:e2:4e:8b:8a:2d:bc:8d:ad:e8:
         f7:07:c7:49:05:12:96:54:24:86:9f:11:da:66:75:3b:84:60:
         90:d8:f6:56:5b:f9:8c:10:e4:32:28:09:1f:62:61:a2:4c:4d:
         e0:ee:27:a3:9d:1e:4d:56:e0:b5:30:04:28:03:9d:83:48:8a:
         03:6f:c9:a0
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUfTJbDMF2h/YI32fANQD5TZWncIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTYxNjE0NTJaFw0yNTAyMTQxNjE5NTJaMDMxMTAvBgNV
BAMTKDlFN0ZBOTZEQzg2QjI0RTgzOTgxMzdGMjExNDIzNDVGRDkwRjc5QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGcvmiVHW5jHFn786N0Vuo491
WTwgFWb3wb+Mkq0Q4TmQIgdP56NkzvzXPweBrAGDr+RBmL4ZksrGCPYOvXZmlAwZ
16+y4WwM5QVNRIkbXl/SRrOvz7/JqnFcIK4JgtI5vv2VMN8XnuPN7Zumz0ptecBx
vd+o5d07QrYmd4urPUOuH5lzC+t4FPGG60DwzkCX37uPYW2Tp5bf5FPv28KdnX0n
0T83qfnMV/+E7DFZ90GCqo8VlGgc5UPmV1VyOzmenpWFjG9lJMFkfYUo4fgjCaCR
K0tN6s3QRWDDszM1VywyQK3l0S7Dv3i3atC0w0Q8GXchUtQ1wobapwADHIDLAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSef6ltyGsk6DmB
N/IRQjRf2Q95pzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IdnhmM2VKNXgyQ0x4azJORmFVRmFSeGhHbVd4UjFHbzN0
V1l0dEQ4ZEVOTi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28z
dFdZdHREOGRFTk4vMC85RTdGQTk2REM4NkIyNEU4Mzk4MTM3RjIxMTQyMzQ1RkQ5
MEY3OUE3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKoWtAwDQQCAAIwBwMF
ACgELXAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAxCMA0GCSqGSIb3DQEBCwUA
A4IBAQAy9Ut3mbY7Y95M3bTLGQEeYscUft4EPGnPO+OK//BK7oOsFtpepKqD+vDa
KteeSBIxfEcThtSS1SdkGQhLYRO/EMjqwd2ljrLG+F+Wtb0UAxjiuELKkn5+/b3a
/PMTjb15B+OcWuZJmbJTHeRsQgjtD/hsQOoUMwNrDiDQas8ePAs097W4KooouMZX
qJ3ub2GeushKNKkPOMdfxO1gmNkD63/zahD2MIBuBQXIgVRXfOUNraWarjb46L2l
6dbiTouKLbyNrej3B8dJBRKWVCSGnxHaZnU7hGCQ2PZWW/mMEOQyKAkfYmGiTE3g
7iejnR5NVuC1MAQoA52DSIoDb8mg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org