Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer
File:                     9F447BDED8BDE868DC45F27E97C658F459051FB1.cer (raw, json)
Hash identifier:          QqVRmiuGrj8qhe8SUAH6igEba+jIyxRLMqe6CnWgBsM=
Subject key identifier:   9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DE00855013BBACF3B938E8A63683A215AF25864
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 13:21:36 +0000
Certificate not after:    Thu 29 Aug 2024 13:26:36 +0000
Subordinate resources:    AS: 52930
                          IP: 177.185.48.0/20
                          IP: 190.180.128.0/20
                          IP: 2804:af4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e0:08:55:01:3b:ba:cf:3b:93:8e:8a:63:68:3a:21:5a:f2:58:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 13:21:36 2023 GMT
            Not After : Aug 29 13:26:36 2024 GMT
        Subject: CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:41:f0:cd:86:48:2b:80:e8:fd:58:ca:ba:f0:
                    29:c7:4a:9a:e3:f7:62:6c:0c:b2:92:a4:d6:c6:2c:
                    15:aa:51:11:30:5e:a0:ea:8f:dc:15:0c:43:3c:aa:
                    a2:9a:52:86:e5:64:cf:32:3f:7b:c2:21:9b:db:5b:
                    a8:b0:b8:31:6c:fc:82:b0:0b:41:12:08:8f:b2:74:
                    59:55:ed:d8:ff:8c:ad:64:33:62:d1:0b:81:ca:4a:
                    e2:9d:40:13:0c:59:9b:1e:7c:7e:47:41:74:df:d6:
                    5f:f8:b5:03:f4:6e:5b:e9:d4:50:ed:17:d1:2c:42:
                    23:71:09:b8:95:0c:35:e6:db:61:d2:9e:ec:a6:26:
                    5c:c4:1e:42:a0:49:3e:70:ff:f0:49:d3:74:5a:fe:
                    f5:26:ca:3d:d0:02:db:3b:fb:a4:10:29:e9:80:ea:
                    a2:3d:62:e5:36:59:50:92:80:bf:8d:5b:f6:9b:88:
                    13:b2:8c:c8:f3:0c:59:17:0c:ae:be:65:b2:f0:2c:
                    69:45:f8:b4:cc:1d:3b:34:01:cc:63:4b:0a:0b:1a:
                    ad:76:33:ea:b5:e7:42:5a:38:d1:70:46:1c:bc:50:
                    96:92:bd:8a:89:39:50:78:9d:e6:75:1e:97:a6:5e:
                    15:f4:37:33:02:e5:47:7c:ee:29:cc:4a:31:a7:e3:
                    33:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.48.0/20
                  190.180.128.0/20
                IPv6:
                  2804:af4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52930

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:de:d3:b8:1c:3d:d7:11:3d:c1:c5:cb:e6:25:d4:0d:5e:
         d8:58:c6:a0:69:a4:1c:e0:8d:03:f5:b0:c2:f0:e3:40:97:76:
         4e:2e:d1:fc:e2:37:35:03:9d:04:bb:a7:af:4d:11:ca:c6:7a:
         4f:b3:21:46:13:97:25:a0:b9:be:c2:d8:a3:9e:92:0f:91:13:
         4d:8e:db:3f:af:52:bf:9c:a2:66:26:c0:1d:b6:ee:2d:4b:c7:
         74:ba:ae:79:4e:d1:2f:77:51:cc:76:d5:09:25:fd:a7:c5:41:
         df:55:2d:b1:a1:b8:41:2f:70:1f:d1:0a:07:a9:85:30:10:9a:
         27:5a:48:14:05:b0:5c:60:10:09:7c:9b:f8:65:d6:a4:be:bd:
         9a:fb:27:c4:e7:2c:8a:e5:95:35:50:f7:76:01:de:f2:1c:55:
         d3:88:d5:61:70:66:11:cb:2f:d8:07:e5:d4:d9:0a:d4:1a:e4:
         c7:cc:7c:91:a7:21:04:2f:32:fd:ea:ef:3f:4c:3d:1d:0b:bc:
         c7:2d:50:50:f6:32:d6:88:09:24:7d:67:3f:12:e6:67:15:d9:
         e3:7a:06:6f:06:8b:7c:60:23:32:cb:82:6d:21:76:b0:0d:ea:
         1f:55:ae:86:1d:d1:30:6d:2e:24:65:79:88:94:b0:10:58:de:
         c5:0b:30:94
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIULeAIVQE7us87k46KY2g6IVryWGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MzExMzIxMzZaFw0yNDA4MjkxMzI2MzZaMDMxMTAvBgNV
BAMTKDlGNDQ3QkRFRDhCREU4NjhEQzQ1RjI3RTk3QzY1OEY0NTkwNTFGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoQfDNhkgrgOj9WMq68CnHSprj
92JsDLKSpNbGLBWqUREwXqDqj9wVDEM8qqKaUoblZM8yP3vCIZvbW6iwuDFs/IKw
C0ESCI+ydFlV7dj/jK1kM2LRC4HKSuKdQBMMWZsefH5HQXTf1l/4tQP0blvp1FDt
F9EsQiNxCbiVDDXm22HSnuymJlzEHkKgST5w//BJ03Ra/vUmyj3QAts7+6QQKemA
6qI9YuU2WVCSgL+NW/abiBOyjMjzDFkXDK6+ZbLwLGlF+LTMHTs0AcxjSwoLGq12
M+q150JaONFwRhy8UJaSvYqJOVB4neZ1HpemXhX0NzMC5Ud87inMSjGn4zPZAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfRHve2L3oaNxF
8n6Xxlj0WQUfsTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KN0RiRTk4ZFBaOUNWaTJUSEMxb0VVRXNyTXU1akY1TWVm
bkcxOW5XVHpqci8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1l
Zm5HMTluV1R6anIvMC85RjQ0N0JERUQ4QkRFODY4REM0NUYyN0U5N0M2NThGNDU5
MDUxRkIxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBASxuTADBAS+tIAwDQQC
AAIwBwMFACgECvQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM7CMA0GCSqGSIb3
DQEBCwUAA4IBAQAckt7TuBw91xE9wcXL5iXUDV7YWMagaaQc4I0D9bDC8ONAl3ZO
LtH84jc1A50Eu6evTRHKxnpPsyFGE5cloLm+wtijnpIPkRNNjts/r1K/nKJmJsAd
tu4tS8d0uq55TtEvd1HMdtUJJf2nxUHfVS2xobhBL3Af0QoHqYUwEJonWkgUBbBc
YBAJfJv4Zdakvr2a+yfE5yyK5ZU1UPd2Ad7yHFXTiNVhcGYRyy/YB+XU2QrUGuTH
zHyRpyEELzL96u8/TD0dC7zHLVBQ9jLWiAkkfWc/EuZnFdnjegZvBot8YCMyy4Jt
IXawDeofVa6GHdEwbS4kZXmIlLAQWN7FCzCU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org