Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C.cer
File:                     9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C.cer (raw, json)
Hash identifier:          SgGPYf1iRmfc5B//Nynnj05BeDMl1WaqD4ctmGAKKwc=
Subject key identifier:   9F:40:D2:BE:E9:D0:13:19:3C:0E:22:A5:9E:4C:CB:64:46:BE:CF:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10DA0FC0D6405FAE1F49D4802EF2A5E28463D8A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Jan 2023 20:15:28 +0000
Certificate not after:    Thu 04 Jan 2024 20:20:28 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:da:0f:c0:d6:40:5f:ae:1f:49:d4:80:2e:f2:a5:e2:84:63:d8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 20:15:28 2023 GMT
            Not After : Jan  4 20:20:28 2024 GMT
        Subject: CN=9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:c4:bb:52:f9:ab:ac:18:22:cd:a2:3e:50:
                    ff:c5:8a:6d:10:89:7f:8b:09:5e:3b:8a:ec:68:20:
                    16:32:cf:25:15:52:9e:e3:84:c4:f9:9b:7d:32:eb:
                    c5:03:a6:f0:a4:92:cb:2a:6f:63:60:4c:f6:88:25:
                    42:d5:b0:d8:de:46:ef:b2:88:2a:ba:ab:f2:c1:09:
                    4d:f6:4a:ec:15:af:88:c8:ab:92:42:89:ce:36:a6:
                    c0:0b:97:11:57:f8:ed:a3:ad:7a:1f:ac:0c:f4:9f:
                    0d:ff:c1:af:a3:a8:88:dc:77:24:c5:07:48:07:c5:
                    17:e0:b1:db:91:60:32:25:5d:fb:6b:2e:5a:97:e3:
                    ba:31:85:05:f3:5e:ec:55:8f:94:0f:2c:e8:6c:c5:
                    4c:ae:b3:60:cd:8c:95:3d:c6:be:b3:fd:43:da:87:
                    83:59:49:92:a6:8a:ee:00:11:6d:ac:06:e3:cf:53:
                    b9:f2:d4:6a:b4:b4:24:3a:a4:7a:b0:48:67:b7:31:
                    06:f8:c5:d0:1a:1a:79:e9:e5:6c:5c:6e:5b:9e:63:
                    62:fa:6a:ae:0c:1f:ec:3d:10:63:cc:6d:ba:cb:fa:
                    bb:a9:ba:d2:8e:bf:77:dd:7d:bf:72:33:b5:b9:2e:
                    57:72:60:5b:1b:2c:16:f0:4a:08:e0:14:06:7c:ab:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:40:D2:BE:E9:D0:13:19:3C:0E:22:A5:9E:4C:CB:64:46:BE:CF:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/9F40D2BEE9D013193C0E22A59E4CCB6446BECF7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         94:80:18:65:ec:d8:96:b5:98:1f:65:14:03:1f:d3:02:4d:19:
         ea:b9:34:f1:6a:4e:cf:f3:0f:6e:d4:7c:19:40:36:9d:de:3c:
         84:c5:7a:24:e9:32:36:f1:7b:80:07:6c:66:2d:4b:d0:ee:50:
         21:77:05:1f:02:3c:3a:b6:75:12:3d:b5:f4:63:16:51:4b:bb:
         f9:7e:ca:4a:ca:a4:e3:95:d2:95:86:5a:50:b9:87:e5:8e:3a:
         f7:42:98:4d:e3:33:f4:a4:d6:54:3d:77:b1:50:07:89:43:96:
         4c:05:91:6b:c7:41:da:65:74:fd:b6:d7:88:81:ec:d7:b7:ae:
         89:e0:f0:a0:a2:c0:c7:18:5f:6a:fc:e4:7a:25:bf:8e:3f:45:
         2d:8b:7f:03:3d:6c:c4:f7:36:a7:c0:2d:47:a0:7f:5a:0d:14:
         74:12:5e:cd:c0:b7:e6:98:a6:93:f8:16:56:da:95:29:c4:46:
         24:5e:c9:51:a4:bd:c7:b7:7b:fc:f6:2b:01:7b:7d:15:0d:6e:
         08:60:71:5f:8a:9a:67:b0:43:5e:57:c3:34:4b:c9:b3:8a:d4:
         55:69:2f:dd:bc:90:e0:f4:3f:78:b7:8d:cc:e5:88:02:38:b1:
         4d:fa:03:4c:19:f8:ee:62:ed:ff:be:8f:ba:58:7d:95:43:d5:
         60:9f:3d:a2
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUENoPwNZAX64fSdSALvKl4oRj2KYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMDUyMDE1MjhaFw0yNDAxMDQyMDIwMjhaMDMxMTAvBgNV
BAMTKDlGNDBEMkJFRTlEMDEzMTkzQzBFMjJBNTlFNENDQjY0NDZCRUNGN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jcS7UvmrrBgizaI+UP/Fim0Q
iX+LCV47iuxoIBYyzyUVUp7jhMT5m30y68UDpvCkkssqb2NgTPaIJULVsNjeRu+y
iCq6q/LBCU32SuwVr4jIq5JCic42psALlxFX+O2jrXofrAz0nw3/wa+jqIjcdyTF
B0gHxRfgsduRYDIlXftrLlqX47oxhQXzXuxVj5QPLOhsxUyus2DNjJU9xr6z/UPa
h4NZSZKmiu4AEW2sBuPPU7ny1Gq0tCQ6pHqwSGe3MQb4xdAaGnnp5WxcblueY2L6
aq4MH+w9EGPMbbrL+ruputKOv3fdfb9yM7W5LldyYFsbLBbwSgjgFAZ8q7EdAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfQNK+6dATGTwO
IqWeTMtkRr7PfDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BbVBqRUdlQ3ludDJiU1R1OHgxNEdWdWRXZnBXa2tmQWRX
dmdmdUZaV3JLZC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BbVBqRUdlQ3ludDJiU1R1OHgxNEdWdWRXZnBXa2tmQWRX
dmdmdUZaV3JLZC8wLzlGNDBEMkJFRTlEMDEzMTkzQzBFMjJBNTlFNENDQjY0NDZC
RUNGN0MubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2nbDANBAIAAjAHAwUA
KARWdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFt8wDQYJKoZIhvcNAQELBQAD
ggEBAJSAGGXs2Ja1mB9lFAMf0wJNGeq5NPFqTs/zD27UfBlANp3ePITFeiTpMjbx
e4AHbGYtS9DuUCF3BR8CPDq2dRI9tfRjFlFLu/l+ykrKpOOV0pWGWlC5h+WOOvdC
mE3jM/Sk1lQ9d7FQB4lDlkwFkWvHQdpldP2214iB7Ne3rong8KCiwMcYX2r85Hol
v44/RS2LfwM9bMT3NqfALUegf1oNFHQSXs3At+aYppP4FlbalSnERiReyVGkvce3
e/z2KwF7fRUNbghgcV+KmmewQ15XwzRLybOK1FVpL928kOD0P3i3jczliAI4sU36
A0wZ+O5i7f++j7pYfZVD1WCfPaI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org