Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F6E62A3E6EC9503E31CDD9EEF4192D462FB0E00.cer
File:                     9F6E62A3E6EC9503E31CDD9EEF4192D462FB0E00.cer (raw, json)
Hash identifier:          iuU6QkESmlyTgf7GxmJF5xbMuTIk9DiIcSt2nuOSyJM=
Subject key identifier:   9F:6E:62:A3:E6:EC:95:03:E3:1C:DD:9E:EF:41:92:D4:62:FB:0E:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64214B5281B9E17711E2ADCE30FF65A491C80479
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/9F6E62A3E6EC9503E31CDD9EEF4192D462FB0E00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 19:05:11 +0000
Certificate not after:    Mon 29 Jul 2024 19:10:11 +0000
Subordinate resources:    AS: 266310
                          IP: 170.79.196.0/22
                          IP: 2804:35d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:21:4b:52:81:b9:e1:77:11:e2:ad:ce:30:ff:65:a4:91:c8:04:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 31 19:05:11 2023 GMT
            Not After : Jul 29 19:10:11 2024 GMT
        Subject: CN=9F6E62A3E6EC9503E31CDD9EEF4192D462FB0E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a0:d8:6e:fe:d6:63:c6:74:aa:bf:bf:39:0c:
                    de:09:48:f3:33:f9:2c:94:d6:bc:f9:35:81:2d:61:
                    ad:4f:9f:56:bd:58:98:83:b6:a1:8f:f1:da:30:d8:
                    3e:62:41:04:5d:00:82:32:d7:22:55:11:4f:5e:9e:
                    17:ff:19:1b:33:2b:54:ba:a5:d2:b4:3f:77:b6:8a:
                    41:2c:34:f9:1a:05:56:0d:f6:62:05:10:67:ce:f6:
                    e4:7d:3c:55:9b:86:08:21:53:ea:e4:bb:8b:76:d7:
                    d8:13:fa:38:fe:05:b7:9f:4f:4a:20:46:dc:3b:f1:
                    44:cf:42:46:45:23:82:ed:fa:04:0e:62:34:3a:37:
                    ec:17:a1:ca:6c:a6:86:74:c7:0d:59:0e:15:73:c0:
                    5e:b3:a0:ca:92:81:49:93:25:d8:6d:8b:83:47:1d:
                    df:b7:10:c9:84:cf:17:ac:b2:87:61:28:73:65:e4:
                    94:64:52:b8:61:51:df:91:b5:78:66:94:1e:2d:9e:
                    55:ec:b3:9a:bd:b0:bc:ad:fb:02:67:f6:f9:84:07:
                    fc:b3:38:88:94:d6:12:21:00:dd:12:95:43:94:6a:
                    1b:a4:1c:cf:1a:b8:0e:34:fa:4c:31:6c:6a:43:b8:
                    96:fb:71:db:3e:7c:d6:b3:a5:1b:95:e5:b7:57:0c:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:6E:62:A3:E6:EC:95:03:E3:1C:DD:9E:EF:41:92:D4:62:FB:0E:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/9F6E62A3E6EC9503E31CDD9EEF4192D462FB0E00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.196.0/22
                IPv6:
                  2804:35d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266310

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:5c:e6:15:3c:5e:dc:30:5a:79:98:f2:84:dc:af:71:69:
         0e:51:f0:30:78:8e:47:0e:d5:01:ee:e5:2e:0c:9e:3d:90:6c:
         de:09:00:18:90:80:d1:3a:aa:fa:e4:8e:64:1b:79:15:9f:22:
         d1:6d:cf:92:95:54:f5:55:09:06:1d:64:67:75:7c:4b:bd:c3:
         89:9b:63:25:2d:cf:b5:db:45:e7:60:10:e9:eb:3f:d2:21:d3:
         75:5d:26:fb:80:f8:01:a8:2c:21:d9:72:87:d0:63:fa:78:de:
         4e:82:6c:54:6d:46:bb:9a:cc:17:a5:72:f3:4f:6e:c7:7f:c0:
         d3:e4:b5:65:8f:05:63:3c:93:45:2d:0d:ed:92:d2:0f:74:c1:
         f9:61:bf:b7:be:14:77:fa:11:24:0f:9f:0a:d2:2b:5e:89:63:
         d9:7a:bc:fc:ba:56:58:df:ae:89:75:eb:5b:f9:07:b9:d2:f0:
         89:97:68:82:38:31:72:04:d4:86:51:b1:4d:da:f9:71:c4:4b:
         1c:f5:de:67:b1:e4:fe:3f:1d:ee:54:6b:4d:97:84:42:5b:88:
         58:a1:4d:41:f7:42:09:54:9e:9e:8d:f4:9c:2d:84:14:56:7b:
         d3:35:ad:61:62:97:6a:6b:4f:d4:48:df:ca:c5:41:46:f7:db:
         40:69:d8:6a
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUZCFLUoG54XcR4q3OMP9lpJHIBHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MzExOTA1MTFaFw0yNDA3MjkxOTEwMTFaMDMxMTAvBgNV
BAMTKDlGNkU2MkEzRTZFQzk1MDNFMzFDREQ5RUVGNDE5MkQ0NjJGQjBFMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdoNhu/tZjxnSqv785DN4JSPMz
+SyU1rz5NYEtYa1Pn1a9WJiDtqGP8dow2D5iQQRdAIIy1yJVEU9enhf/GRszK1S6
pdK0P3e2ikEsNPkaBVYN9mIFEGfO9uR9PFWbhgghU+rku4t219gT+jj+BbefT0og
Rtw78UTPQkZFI4Lt+gQOYjQ6N+wXocpspoZ0xw1ZDhVzwF6zoMqSgUmTJdhti4NH
Hd+3EMmEzxessodhKHNl5JRkUrhhUd+RtXhmlB4tnlXss5q9sLyt+wJn9vmEB/yz
OIiU1hIhAN0SlUOUahukHM8auA40+kwxbGpDuJb7cds+fNazpRuV5bdXDP7FAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfbmKj5uyVA+Mc
3Z7vQZLUYvsOADAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9SWnZZMlNxakhtWGRhZWtlVHVWYnBxUW9ZcHZNREZyWVdD
UHJjUGdzaldELzEvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9SWnZZMlNxakhtWGRhZWtlVHVWYnBxUW9ZcHZNREZyWVdD
UHJjUGdzaldELzEvOUY2RTYyQTNFNkVDOTUwM0UzMUNERDlFRUY0MTkyRDQ2MkZC
MEUwMC5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqk/EMA0EAgACMAcDBQAo
BDXYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQQRjANBgkqhkiG9w0BAQsFAAOC
AQEAsxRc5hU8XtwwWnmY8oTcr3FpDlHwMHiORw7VAe7lLgyePZBs3gkAGJCA0Tqq
+uSOZBt5FZ8i0W3PkpVU9VUJBh1kZ3V8S73DiZtjJS3PtdtF52AQ6es/0iHTdV0m
+4D4AagsIdlyh9Bj+njeToJsVG1Gu5rMF6Vy809ux3/A0+S1ZY8FYzyTRS0N7ZLS
D3TB+WG/t74Ud/oRJA+fCtIrXolj2Xq8/LpWWN+uiXXrW/kHudLwiZdogjgxcgTU
hlGxTdr5ccRLHPXeZ7Hk/j8d7lRrTZeEQluIWKFNQfdCCVSeno30nC2EFFZ70zWt
YWKXamtP1EjfysVBRvfbQGnYag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org