Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9FAE53C7387E64BBF2B2968741FBF22495656806.cer
File:                     9FAE53C7387E64BBF2B2968741FBF22495656806.cer (raw, json)
Hash identifier:          5h5Jdb2T/FHyGViT+EKO6HHkb8oyjnZP8yeo8C2saN0=
Subject key identifier:   9F:AE:53:C7:38:7E:64:BB:F2:B2:96:87:41:FB:F2:24:95:65:68:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BF4B71DF0A415BF534BB4DC244BD240AF803A47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/9FAE53C7387E64BBF2B2968741FBF22495656806.mft
caRepository:             rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Jun 2021 19:00:33 +0000
Certificate not after:    Wed 22 Jun 2022 19:05:33 +0000
Subordinate resources:    AS: 262363
                          IP: 177.126.240.0/20
                          IP: 2804:84c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f4:b7:1d:f0:a4:15:bf:53:4b:b4:dc:24:4b:d2:40:af:80:3a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 19:00:33 2021 GMT
            Not After : Jun 22 19:05:33 2022 GMT
        Subject: CN=9FAE53C7387E64BBF2B2968741FBF22495656806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:7e:1c:fd:6a:9e:70:12:0f:c1:6b:55:62:
                    3e:bd:3c:ef:f7:0f:db:65:c6:d6:54:1a:2e:dd:d5:
                    06:3e:48:46:1c:91:82:e6:69:1d:aa:36:35:c7:26:
                    6a:66:ee:bf:94:e1:d5:7c:20:a3:66:7c:b4:ab:eb:
                    0a:77:54:54:b5:f3:d0:de:e2:5e:38:44:a2:22:03:
                    77:a1:39:d1:61:8a:80:aa:36:0e:cf:9a:c4:8d:61:
                    fb:10:35:05:34:e1:0c:f5:39:e0:5c:af:91:21:b9:
                    8e:c3:67:c6:fb:10:97:36:07:c0:4e:42:9b:2b:ca:
                    48:be:e9:9e:c6:68:41:a7:81:a6:a7:e5:a5:ec:b1:
                    f9:e0:e5:34:b7:19:c2:ef:ff:56:9f:5c:ca:14:8d:
                    1d:4c:51:f9:9a:73:05:eb:bc:77:56:d7:d8:df:18:
                    f5:b8:61:05:46:46:9b:b9:39:7d:3f:8b:96:da:0e:
                    a9:bf:ef:e2:d7:df:f9:fd:5d:74:f9:9b:54:60:a3:
                    7e:dd:12:a8:59:12:a3:0f:a4:b0:ad:a8:17:c2:5c:
                    31:9f:90:a1:e2:30:16:ef:7f:e8:93:8e:b9:a5:a2:
                    85:15:8f:7a:ed:1e:de:ee:ba:39:6e:69:6f:d5:ff:
                    bb:02:9f:b0:f8:08:b7:2e:44:df:f1:b9:0c:bd:6b:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:AE:53:C7:38:7E:64:BB:F2:B2:96:87:41:FB:F2:24:95:65:68:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/9FAE53C7387E64BBF2B2968741FBF22495656806.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.240.0/20
                IPv6:
                  2804:84c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262363

    Signature Algorithm: sha256WithRSAEncryption
         0e:36:5d:7c:0f:2d:99:ae:9f:1d:08:69:87:20:bd:83:c3:2e:
         75:be:54:49:20:6f:6d:86:7d:ec:99:4a:a9:7c:2c:fc:67:34:
         cb:95:e0:c7:c3:af:db:a6:7c:49:cb:d8:52:fe:93:3e:13:df:
         6c:3f:ad:ca:23:6d:23:28:f4:35:39:83:15:50:23:2e:c0:c2:
         94:67:24:06:b9:94:06:65:2f:c9:ab:23:e3:5e:f6:1a:54:b0:
         ce:e8:b9:c7:41:e6:44:45:65:30:97:85:55:3e:88:87:0b:3c:
         b0:c0:7f:7e:c5:99:67:d6:95:e0:93:0a:d6:12:ac:eb:93:41:
         9d:72:9c:f3:f2:c0:5a:6b:bf:ac:e5:9a:40:3f:fd:c1:3b:d4:
         87:22:99:b7:5f:ad:a3:9e:47:2e:04:5d:94:69:9c:7d:e7:2f:
         ae:2d:23:31:56:39:66:34:6e:34:55:25:26:e2:ad:8f:43:20:
         eb:8e:64:bd:f8:09:31:35:c1:57:04:ae:b7:5f:b9:5c:a8:42:
         03:d8:23:79:df:9e:ca:35:e7:2c:9a:4a:f2:61:e1:3f:62:6f:
         70:01:ce:15:79:e1:43:ce:99:66:0a:27:a8:bf:d2:b1:fc:dd:
         5b:b4:cb:8b:28:48:f9:72:86:4e:ba:45:e0:c6:f1:bc:eb:de:
         df:e2:91:ae
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUe/S3HfCkFb9TS7TcJEvSQK+AOkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTA2MjMxOTAwMzNaFw0yMjA2MjIxOTA1MzNaMDMxMTAvBgNV
BAMTKDlGQUU1M0M3Mzg3RTY0QkJGMkIyOTY4NzQxRkJGMjI0OTU2NTY4MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQH4c/WqecBIPwWtVYj69PO/3
D9tlxtZUGi7d1QY+SEYckYLmaR2qNjXHJmpm7r+U4dV8IKNmfLSr6wp3VFS189De
4l44RKIiA3ehOdFhioCqNg7PmsSNYfsQNQU04Qz1OeBcr5EhuY7DZ8b7EJc2B8BO
Qpsryki+6Z7GaEGngaan5aXssfng5TS3GcLv/1afXMoUjR1MUfmacwXrvHdW19jf
GPW4YQVGRpu5OX0/i5baDqm/7+LX3/n9XXT5m1Rgo37dEqhZEqMPpLCtqBfCXDGf
kKHiMBbvf+iTjrmlooUVj3rtHt7uujluaW/V/7sCn7D4CLcuRN/xuQy9awHfAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfrlPHOH5ku/Ky
lodB+/IklWVoBjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby91cUNEQWhuTGZNMzZqa3N4WTlhWjk4MUZlUm93NkhYQ3hj
S1VXakVWZldCLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby91cUNEQWhuTGZNMzZqa3N4WTlhWjk4MUZlUm93NkhYQ3hj
S1VXakVWZldCLzAvOUZBRTUzQzczODdFNjRCQkYyQjI5Njg3NDFGQkYyMjQ5NTY1
NjgwNi5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEsX7wMA0EAgACMAcDBQAo
BAhMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQA2zANBgkqhkiG9w0BAQsFAAOC
AQEADjZdfA8tma6fHQhphyC9g8Mudb5USSBvbYZ97JlKqXws/Gc0y5Xgx8Ov26Z8
ScvYUv6TPhPfbD+tyiNtIyj0NTmDFVAjLsDClGckBrmUBmUvyasj4172GlSwzui5
x0HmREVlMJeFVT6Ihws8sMB/fsWZZ9aV4JMK1hKs65NBnXKc8/LAWmu/rOWaQD/9
wTvUhyKZt1+to55HLgRdlGmcfecvri0jMVY5ZjRuNFUlJuKtj0Mg645kvfgJMTXB
VwSut1+5XKhCA9gjed+eyjXnLJpK8mHhP2JvcAHOFXnhQ86ZZgonqL/SsfzdW7TL
iyhI+XKGTrpF4MbxvOve3+KRrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org