Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
File:                     9ECE9497765CBFF5ADF188D9EAED33445844495D.cer (raw, json)
Hash identifier:          zDS6ezg0aCNj1aUAu25H2+QaQ8fG/Cu50xzvGfYQ+dE=
Subject key identifier:   9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       597E9E12F4FB81126EFD90D8F540F0623543069D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Jun 2023 17:18:52 +0000
Certificate not after:    Tue 11 Jun 2024 17:23:52 +0000
Subordinate resources:    AS: 267451
                          IP: 192.141.12.0/22
                          IP: 2804:41b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7e:9e:12:f4:fb:81:12:6e:fd:90:d8:f5:40:f0:62:35:43:06:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 13 17:18:52 2023 GMT
            Not After : Jun 11 17:23:52 2024 GMT
        Subject: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:03:2c:ad:e8:03:df:c9:eb:43:18:9e:ad:
                    ae:eb:76:ee:31:ab:56:32:bb:c6:68:43:f2:7f:cf:
                    ec:f3:c6:2d:56:c8:53:9c:77:ef:db:3e:2d:1c:b3:
                    02:1a:ea:c4:94:66:1d:8c:14:bb:fd:46:46:ac:1f:
                    80:4e:63:cb:4b:37:fc:12:fe:c1:74:36:1b:24:3e:
                    4f:0d:02:c2:05:04:f1:8a:2c:8b:1a:c7:46:f9:34:
                    f9:b5:aa:45:2c:2a:d3:fd:41:7a:36:ee:87:89:9d:
                    29:a3:0e:68:f2:cb:5c:38:cc:c2:24:98:e6:aa:96:
                    82:df:bc:5c:83:1d:51:7c:50:81:5b:12:73:7f:d5:
                    f6:6c:ac:7e:32:68:99:0c:3f:20:78:fb:6d:52:7c:
                    f8:b6:4b:a7:08:4d:50:c3:c8:20:80:b8:29:b8:42:
                    ce:53:6d:5d:32:ce:aa:44:5e:8c:65:0c:9e:94:ee:
                    f6:d7:10:6d:35:be:24:4a:61:f4:d5:af:b6:c6:2b:
                    7c:c1:cd:5f:a6:40:dc:f8:cc:f5:e8:26:df:a4:14:
                    27:39:63:7a:8d:ed:b0:cb:15:db:c3:11:64:91:6f:
                    8a:38:14:6d:15:c5:0e:f9:2c:f3:82:d5:e3:d9:fa:
                    2a:cf:27:d6:eb:33:e5:ee:b4:79:36:f6:22:ed:fb:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.12.0/22
                IPv6:
                  2804:41b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267451

    Signature Algorithm: sha256WithRSAEncryption
         44:f8:6d:8f:7b:a2:3f:8f:96:55:79:56:d2:34:cf:d7:07:37:
         e4:70:20:11:02:40:35:cc:da:cc:38:75:ad:0e:e6:28:b8:d7:
         2f:36:47:f8:5f:a0:07:3d:71:e7:72:95:72:f3:01:aa:79:7b:
         f9:71:5b:9a:fc:c8:7b:39:13:2d:36:7c:c3:ad:5a:b4:c6:d4:
         c2:4b:7f:2b:ac:68:23:9c:f1:dc:b4:82:42:0e:e9:94:15:c2:
         61:06:98:46:6e:da:39:85:de:82:45:3f:09:08:c4:b0:9d:20:
         64:f6:63:73:c6:ee:4e:a4:d2:b9:f2:a0:77:33:da:59:21:bf:
         34:cf:11:6d:e1:17:19:39:2a:0d:90:89:13:84:57:d4:32:8a:
         f0:2b:5a:52:36:8c:0d:b4:61:14:90:25:4f:99:b8:1f:c2:a3:
         73:aa:8b:6e:a0:3e:89:4c:06:04:68:a2:7f:88:57:b4:e0:80:
         b1:38:19:13:8a:47:c2:d1:aa:22:ff:fc:e7:8f:8a:a7:6e:8b:
         05:99:5e:1a:40:d5:ee:b0:24:2f:ba:51:7c:5c:d5:76:e4:a6:
         ed:ce:c8:b8:fd:ba:c5:0f:e1:a0:44:3b:72:b1:bc:b6:6c:79:
         73:94:d4:c4:39:15:30:39:1d:c7:8f:e9:f9:85:c2:31:91:19:
         76:b9:12:65
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUWX6eEvT7gRJu/ZDY9UDwYjVDBp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MTMxNzE4NTJaFw0yNDA2MTExNzIzNTJaMDMxMTAvBgNV
BAMTKDlFQ0U5NDk3NzY1Q0JGRjVBREYxODhEOUVBRUQzMzQ0NTg0NDQ5NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBQMsregD38nrQxiera7rdu4x
q1Yyu8ZoQ/J/z+zzxi1WyFOcd+/bPi0cswIa6sSUZh2MFLv9RkasH4BOY8tLN/wS
/sF0NhskPk8NAsIFBPGKLIsax0b5NPm1qkUsKtP9QXo27oeJnSmjDmjyy1w4zMIk
mOaqloLfvFyDHVF8UIFbEnN/1fZsrH4yaJkMPyB4+21SfPi2S6cITVDDyCCAuCm4
Qs5TbV0yzqpEXoxlDJ6U7vbXEG01viRKYfTVr7bGK3zBzV+mQNz4zPXoJt+kFCc5
Y3qN7bDLFdvDEWSRb4o4FG0VxQ75LPOC1ePZ+irPJ9brM+XutHk29iLt+7+VAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSezpSXdly/9a3x
iNnq7TNEWERJXTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HSEVKdUE3bW9uQjVGRGdGMlJFUG0zOVZIYWlOUmFtMVFr
M0VoVm00U1Qzcy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HSEVKdUE3bW9uQjVGRGdGMlJFUG0zOVZIYWlOUmFtMVFr
M0VoVm00U1Qzcy8wLzlFQ0U5NDk3NzY1Q0JGRjVBREYxODhEOUVBRUQzMzQ0NTg0
NDQ5NUQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsCNDDANBAIAAjAHAwUA
KARBtDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFLswDQYJKoZIhvcNAQELBQAD
ggEBAET4bY97oj+PllV5VtI0z9cHN+RwIBECQDXM2sw4da0O5ii41y82R/hfoAc9
cedylXLzAap5e/lxW5r8yHs5Ey02fMOtWrTG1MJLfyusaCOc8dy0gkIO6ZQVwmEG
mEZu2jmF3oJFPwkIxLCdIGT2Y3PG7k6k0rnyoHcz2lkhvzTPEW3hFxk5Kg2QiROE
V9QyivArWlI2jA20YRSQJU+ZuB/Co3Oqi26gPolMBgRoon+IV7TggLE4GROKR8LR
qiL//OePiqduiwWZXhpA1e6wJC+6UXxc1Xbkpu3OyLj9usUP4aBEO3KxvLZseXOU
1MQ5FTA5HceP6fmFwjGRGXa5EmU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org