Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.cer
File:                     9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.cer (raw, json)
Hash identifier:          ey5DIskpCVQqMEa7tNc7FgKhmQbHP9jNw/WBZ/VPY/g=
Subject key identifier:   9E:9B:34:E6:6E:A4:1B:1D:67:A0:A0:3F:CF:EC:C7:46:38:C5:C5:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62554E3EE2A5D8FBFFBF32AE6B88DF4AFFCE8395
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 14:43:26 +0000
Certificate not after:    Thu 30 May 2024 14:48:26 +0000
Subordinate resources:    AS: 271506
                          IP: 45.173.180.0/24
                          IP: 45.180.115.0/24
                          IP: 143.202.56.0/22
                          IP: 200.9.144.0/24
                          IP: 2804:7c98::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:55:4e:3e:e2:a5:d8:fb:ff:bf:32:ae:6b:88:df:4a:ff:ce:83:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 14:43:26 2023 GMT
            Not After : May 30 14:48:26 2024 GMT
        Subject: CN=9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c8:d2:5c:a9:43:6c:57:5a:ab:ab:81:23:26:
                    72:68:e2:a8:d8:7a:60:ab:d4:96:29:1b:7b:6e:0c:
                    19:d8:3e:93:a7:8f:c6:4d:1c:60:16:7c:93:60:56:
                    0b:d5:6a:b4:90:02:6d:7a:a2:d3:35:1a:94:06:2b:
                    62:d5:0e:f3:1e:5b:04:3f:56:aa:0a:23:4e:0a:49:
                    bc:7c:44:a3:f8:f0:aa:13:fc:e4:d3:f0:79:95:12:
                    a1:32:73:70:db:61:ce:75:53:e1:76:c1:3e:e4:6c:
                    36:3d:e7:8e:a4:49:e1:71:cb:5c:c6:a0:08:f7:f7:
                    ab:3d:fa:b1:8d:ce:96:cf:7d:de:01:7f:26:28:4d:
                    14:56:c8:7f:f5:6e:2d:58:3b:12:b5:98:29:e5:9c:
                    f0:c2:0e:ac:99:ea:ad:95:0a:5b:5d:c8:6d:cd:d3:
                    dc:03:0c:8a:70:39:fd:00:9e:5c:3d:79:33:56:b6:
                    79:df:1c:73:f0:90:b4:5b:f7:0d:36:91:b5:08:fd:
                    f7:18:1b:c0:d0:58:b6:e5:53:56:61:d5:93:ab:dc:
                    03:5e:56:c0:1d:45:a9:23:8b:36:3b:ac:87:8e:e1:
                    a0:37:8b:39:62:f8:9f:ba:7f:d1:e6:4d:e9:e9:ba:
                    14:57:1d:6b:4b:aa:65:be:20:9b:c6:db:1d:27:b9:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:9B:34:E6:6E:A4:1B:1D:67:A0:A0:3F:CF:EC:C7:46:38:C5:C5:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.180.0/24
                  45.180.115.0/24
                  143.202.56.0/22
                  200.9.144.0/24
                IPv6:
                  2804:7c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271506

    Signature Algorithm: sha256WithRSAEncryption
         73:9f:aa:1f:49:36:bb:27:92:50:d8:82:30:10:23:8a:1e:b1:
         8f:24:5b:fc:f6:1b:b1:00:48:7c:65:6a:e8:30:ae:cd:06:20:
         83:38:df:d1:eb:13:0f:ec:54:0e:53:bc:c7:bf:8b:81:32:54:
         76:e2:22:04:54:23:2b:0f:ee:d9:73:79:a4:89:84:50:53:7c:
         db:bb:4c:ec:ac:39:dd:87:fa:dc:83:80:33:f9:65:70:65:83:
         d0:e3:8b:8b:0b:38:5a:53:ac:f6:a1:5f:c9:b5:e1:24:ae:9f:
         5a:fd:e6:11:f9:5a:94:06:7d:3d:31:15:73:7e:91:8d:b9:e2:
         12:8d:4c:ae:63:4f:1f:21:d8:64:d6:cb:99:9f:f2:27:30:2d:
         ff:05:d1:93:66:7d:47:4e:fa:ef:1e:8f:19:e1:e5:09:d0:d5:
         85:3a:61:c0:9d:5d:ab:f1:29:76:4f:c6:fa:68:a6:e3:c6:13:
         40:21:17:4e:af:7f:5c:b8:03:f7:07:94:86:c5:25:8d:7b:91:
         b8:c6:0f:bd:5e:e7:fa:3b:61:7e:7d:80:f8:80:e7:1b:b5:59:
         09:82:7c:75:0e:c4:8c:83:1b:dd:50:db:2f:bd:ea:e5:44:83:
         60:56:ee:bb:e7:ed:8a:06:40:dd:20:90:31:fa:60:eb:4a:c0:
         99:a2:59:7b
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUYlVOPuKl2Pv/vzKua4jfSv/Og5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MDExNDQzMjZaFw0yNDA1MzAxNDQ4MjZaMDMxMTAvBgNV
BAMTKDlFOUIzNEU2NkVBNDFCMUQ2N0EwQTAzRkNGRUNDNzQ2MzhDNUM1MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyNJcqUNsV1qrq4EjJnJo4qjY
emCr1JYpG3tuDBnYPpOnj8ZNHGAWfJNgVgvVarSQAm16otM1GpQGK2LVDvMeWwQ/
VqoKI04KSbx8RKP48KoT/OTT8HmVEqEyc3DbYc51U+F2wT7kbDY9546kSeFxy1zG
oAj396s9+rGNzpbPfd4BfyYoTRRWyH/1bi1YOxK1mCnlnPDCDqyZ6q2VCltdyG3N
09wDDIpwOf0Anlw9eTNWtnnfHHPwkLRb9w02kbUI/fcYG8DQWLblU1Zh1ZOr3ANe
VsAdRakjizY7rIeO4aA3izli+J+6f9HmTenpuhRXHWtLqmW+IJvG2x0nuXxPAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSemzTmbqQbHWeg
oD/P7MdGOMXFDTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BeG8xaEZHbWFRYlpyNXNHTFFqeEZ5aGpRcHVUeGd4a1ZK
cEJwSmd2Nm11ZC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXhvMWhGR21hUWJacjVzR0xRanhGeWhqUXB1VHhneGtW
SnBCcEpndjZtdWQvMC85RTlCMzRFNjZFQTQxQjFENjdBMEEwM0ZDRkVDQzc0NjM4
QzVDNTBELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAAtrbQDBAAttHMDBAKP
yjgDBADICZAwDQQCAAIwBwMFACgEfJgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BCSSMA0GCSqGSIb3DQEBCwUAA4IBAQBzn6ofSTa7J5JQ2IIwECOKHrGPJFv89hux
AEh8ZWroMK7NBiCDON/R6xMP7FQOU7zHv4uBMlR24iIEVCMrD+7Zc3mkiYRQU3zb
u0zsrDndh/rcg4Az+WVwZYPQ44uLCzhaU6z2oV/JteEkrp9a/eYR+VqUBn09MRVz
fpGNueISjUyuY08fIdhk1suZn/InMC3/BdGTZn1HTvrvHo8Z4eUJ0NWFOmHAnV2r
8Sl2T8b6aKbjxhNAIRdOr39cuAP3B5SGxSWNe5G4xg+9Xuf6O2F+fYD4gOcbtVkJ
gnx1DsSMgxvdUNsvverlRINgVu675+2KBkDdIJAx+mDrSsCZoll7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org