Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.cer
File:                     9EE7E228565399C7733D7B54CA4022D13B0E9209.cer (raw, json)
Hash identifier:          5QIj40ELeQpOZuf3mJt/1cJA3qqtRmpppCj/1QiQhfA=
Subject key identifier:   9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F3A49ACF9D6FE11DF2D2B605CD1F2CFE7D07AC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 12:11:29 +0000
Certificate not after:    Fri 12 Jul 2024 12:16:29 +0000
Subordinate resources:    AS: 266487
                          IP: 170.83.184.0/22
                          IP: 2804:3894::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3a:49:ac:f9:d6:fe:11:df:2d:2b:60:5c:d1:f2:cf:e7:d0:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 12:11:29 2023 GMT
            Not After : Jul 12 12:16:29 2024 GMT
        Subject: CN=9EE7E228565399C7733D7B54CA4022D13B0E9209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:44:8d:54:39:92:fd:fc:f8:b0:50:7e:38:
                    62:16:a0:47:2a:74:66:ec:d4:3f:d3:ec:6e:d5:34:
                    71:a7:76:be:f5:4c:d7:04:b2:3d:8e:60:10:f5:19:
                    f8:3a:ed:95:4b:f7:e3:dd:bb:f5:8b:b0:8d:12:18:
                    80:64:e3:2d:9e:4b:14:92:28:90:9e:6e:64:ef:d9:
                    37:a5:46:ac:49:e9:78:74:1c:cc:f8:aa:66:18:d5:
                    1f:e3:e7:42:c6:8e:24:f3:15:8b:14:57:0b:2d:98:
                    ed:94:5e:b8:c9:c1:b2:07:6c:16:87:68:c9:c1:58:
                    2c:58:9a:67:c8:d0:e6:ee:03:ea:50:43:e2:7c:96:
                    ab:e3:de:43:09:18:91:82:a0:b4:a1:35:e5:c0:ab:
                    37:b7:7f:05:76:3c:93:64:4e:31:83:67:d2:62:2c:
                    b8:eb:f1:60:8f:e2:0f:8f:94:be:59:7d:27:50:e0:
                    2e:6d:b5:2c:45:0c:1b:ca:43:28:14:22:57:4a:6a:
                    e4:b0:26:a1:43:e7:16:1f:bf:89:25:28:fd:f3:38:
                    4a:a0:06:8e:5c:d9:1e:90:88:b9:97:9b:6d:e2:2b:
                    26:4b:df:3f:cd:aa:ce:1e:e5:6b:98:6d:07:5f:bd:
                    81:a2:f2:96:ac:42:de:9e:4a:c3:aa:84:ba:46:7c:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:E7:E2:28:56:53:99:C7:73:3D:7B:54:CA:40:22:D1:3B:0E:92:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/9EE7E228565399C7733D7B54CA4022D13B0E9209.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.184.0/22
                IPv6:
                  2804:3894::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266487

    Signature Algorithm: sha256WithRSAEncryption
         64:c3:a7:cb:50:29:db:0f:e4:8d:6e:e8:59:69:87:99:4d:7d:
         b0:f0:8a:b4:29:90:e5:6f:a4:ec:69:90:ef:72:62:78:2b:3e:
         28:4b:21:d8:3d:19:ed:43:35:6c:4d:5a:62:39:78:2a:16:93:
         58:e9:3b:4d:ef:fe:a7:f2:47:84:2d:63:e5:a4:d9:10:32:9a:
         ca:50:47:6b:2d:0d:40:0f:a7:e3:ad:60:e5:2f:30:39:14:4e:
         46:51:0d:e9:95:a9:03:48:72:78:64:11:fa:eb:d6:ae:37:bb:
         1e:e2:90:12:46:90:57:ed:1d:07:5c:df:47:c3:32:d7:e8:ab:
         95:7b:44:2c:d4:0a:70:90:6e:6b:60:4b:8b:5e:7d:2f:27:44:
         b7:77:e1:2b:fa:f0:d8:0c:01:59:ae:dc:9c:06:d6:c7:5c:69:
         cc:89:90:39:2e:f9:e7:01:49:52:a6:e6:ab:43:34:0f:a5:30:
         d7:e9:68:4e:05:b0:71:d8:c7:99:c8:09:cc:2a:8c:af:e3:e0:
         69:46:49:bc:9d:68:25:ef:54:41:4e:bc:73:ae:f1:c0:b4:cb:
         bb:d6:b6:63:28:6a:f0:a4:c7:79:8f:dd:fd:18:1a:b3:93:27:
         05:7d:b8:43:3d:fe:d5:ab:6a:79:6a:1d:77:1a:03:a6:c2:9f:
         55:eb:13:f3
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUXzpJrPnW/hHfLStgXNHyz+fQesAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTQxMjExMjlaFw0yNDA3MTIxMjE2MjlaMDMxMTAvBgNV
BAMTKDlFRTdFMjI4NTY1Mzk5Qzc3MzNEN0I1NENBNDAyMkQxM0IwRTkyMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9X0SNVDmS/fz4sFB+OGIWoEcq
dGbs1D/T7G7VNHGndr71TNcEsj2OYBD1Gfg67ZVL9+Pdu/WLsI0SGIBk4y2eSxSS
KJCebmTv2TelRqxJ6Xh0HMz4qmYY1R/j50LGjiTzFYsUVwstmO2UXrjJwbIHbBaH
aMnBWCxYmmfI0ObuA+pQQ+J8lqvj3kMJGJGCoLShNeXAqze3fwV2PJNkTjGDZ9Ji
LLjr8WCP4g+PlL5ZfSdQ4C5ttSxFDBvKQygUIldKauSwJqFD5xYfv4klKP3zOEqg
Bo5c2R6QiLmXm23iKyZL3z/Nqs4e5WuYbQdfvYGi8pasQt6eSsOqhLpGfEaNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSe5+IoVlOZx3M9
e1TKQCLROw6SCTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85cWNZRmJtZGdpdDNieUhMdkVnbjFHMlJDcUxhdm1DU0g0
V1FldUZEeTdwVS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOXFjWUZibWRnaXQzYnlITHZFZ24xRzJSQ3FMYXZtQ1NI
NFdRZXVGRHk3cFUvMC85RUU3RTIyODU2NTM5OUM3NzMzRDdCNTRDQTQwMjJEMTNC
MEU5MjA5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqU7gwDQQCAAIwBwMF
ACgEOJQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBD3MA0GCSqGSIb3DQEBCwUA
A4IBAQBkw6fLUCnbD+SNbuhZaYeZTX2w8Iq0KZDlb6TsaZDvcmJ4Kz4oSyHYPRnt
QzVsTVpiOXgqFpNY6TtN7/6n8keELWPlpNkQMprKUEdrLQ1AD6fjrWDlLzA5FE5G
UQ3plakDSHJ4ZBH669auN7se4pASRpBX7R0HXN9HwzLX6KuVe0Qs1ApwkG5rYEuL
Xn0vJ0S3d+Er+vDYDAFZrtycBtbHXGnMiZA5LvnnAUlSpuarQzQPpTDX6WhOBbBx
2MeZyAnMKoyv4+BpRkm8nWgl71RBTrxzrvHAtMu71rZjKGrwpMd5j939GBqzkycF
fbhDPf7Vq2p5ah13GgOmwp9V6xPz
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org