Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
File:                     9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer (raw, json)
Hash identifier:          cdmoOlOB6Zv+CJmQ92EP3Xc3RRxhkjPwU1ah5gbchRk=
Subject key identifier:   9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3CB44FF5F7C1D914F4AC42E0CF3D0138E86E66CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 07:47:41 +0000
Certificate not after:    Wed 10 Jul 2024 07:52:41 +0000
Subordinate resources:    AS: 269495
                          IP: 45.187.144.0/22
                          IP: 2804:6580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b4:4f:f5:f7:c1:d9:14:f4:ac:42:e0:cf:3d:01:38:e8:6e:66:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 07:47:41 2023 GMT
            Not After : Jul 10 07:52:41 2024 GMT
        Subject: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:22:63:67:9b:db:3d:6f:61:d4:d0:91:fa:
                    64:fd:a8:56:bc:61:a6:b2:63:f2:75:96:0e:a2:26:
                    6f:6e:b0:52:48:cb:b7:45:94:6d:91:a0:d2:f5:52:
                    55:73:c1:5c:70:0a:a5:e3:7f:ca:f1:54:65:50:88:
                    6f:8f:f4:bf:31:2b:d2:d5:d3:c0:dd:0f:7b:f1:e5:
                    11:ee:55:4a:2b:ae:81:e3:59:d7:96:56:ad:ff:20:
                    1d:38:78:11:fc:63:36:a0:a0:0c:61:b2:f2:63:72:
                    18:85:90:2e:aa:dc:17:ab:af:ed:db:c3:f9:e1:c5:
                    4d:ed:e1:02:35:11:0c:99:90:d8:b5:f3:c4:ef:ac:
                    47:8b:0c:a3:d8:a7:a9:6c:c4:d8:49:7b:cd:90:3f:
                    56:8e:b0:95:e1:80:ba:32:07:4a:42:3b:96:be:53:
                    76:f5:45:20:bf:75:2c:03:80:cc:3b:7e:8c:7c:6b:
                    d5:66:20:5a:2d:29:ad:cf:73:18:b7:46:ba:58:a6:
                    82:3a:fc:94:90:dc:e2:19:a5:9e:77:4b:44:9c:df:
                    5f:5a:97:f4:3c:dd:17:ae:06:65:17:6e:52:d5:20:
                    76:6e:f6:8b:1f:34:2d:37:ea:4e:84:89:f4:65:7d:
                    0e:40:8f:e2:b6:9d:fa:f7:f8:83:13:83:ef:7b:b3:
                    68:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.144.0/22
                IPv6:
                  2804:6580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269495

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:ae:58:ba:bb:65:39:28:92:bc:97:c9:c2:fe:35:75:39:
         73:b9:8e:88:73:61:26:2f:27:c0:50:ba:01:fd:cb:5f:07:3a:
         7e:22:86:97:41:e3:80:1d:d5:5f:34:b8:c9:aa:42:0f:8b:5e:
         87:92:97:77:b3:e1:a5:69:84:08:d5:67:93:c5:fa:cd:e7:97:
         0d:df:1b:d3:74:3a:45:bb:63:f6:64:f8:c2:ed:23:6a:d2:5c:
         21:07:60:86:9b:21:e5:d4:6c:de:c7:e6:4c:38:76:cf:27:6e:
         4e:a8:56:5a:13:3c:17:84:61:83:54:54:38:8a:60:85:4a:8d:
         51:30:db:86:ad:f6:dd:06:55:fd:96:b9:00:5b:b8:50:cd:25:
         07:9c:3b:77:11:67:56:9d:c3:76:25:49:f2:88:2f:26:0d:7f:
         06:33:10:e3:fb:2d:ab:85:de:f2:f9:06:03:03:8e:71:28:87:
         13:74:00:1b:09:01:5c:e2:b7:50:30:44:8f:1f:b1:88:03:df:
         4e:96:f8:5f:16:ac:fb:04:49:c6:a4:a7:eb:59:b1:22:00:da:
         12:d9:1e:90:5a:05:41:1e:f6:77:4f:1d:5d:92:b9:6f:f4:f7:
         05:0c:8c:78:8a:74:02:0b:af:c7:72:9d:7d:73:83:d2:9c:2b:
         68:91:4b:02
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPLRP9ffB2RT0rELgzz0BOOhuZsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTIwNzQ3NDFaFw0yNDA3MTAwNzUyNDFaMDMxMTAvBgNV
BAMTKDlGRTNCN0YzRjFCMkY5QkMwMUQwMkRGMTJFNUQzMUFBMTRFMDYwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6SJjZ5vbPW9h1NCR+mT9qFa8
YaayY/J1lg6iJm9usFJIy7dFlG2RoNL1UlVzwVxwCqXjf8rxVGVQiG+P9L8xK9LV
08DdD3vx5RHuVUorroHjWdeWVq3/IB04eBH8YzagoAxhsvJjchiFkC6q3Berr+3b
w/nhxU3t4QI1EQyZkNi188TvrEeLDKPYp6lsxNhJe82QP1aOsJXhgLoyB0pCO5a+
U3b1RSC/dSwDgMw7fox8a9VmIFotKa3Pcxi3RrpYpoI6/JSQ3OIZpZ53S0Sc319a
l/Q83ReuBmUXblLVIHZu9osfNC036k6EifRlfQ5Aj+K2nfr3+IMTg+97s2j1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSf47fz8bL5vAHQ
LfEuXTGqFOBg2zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80bkpRa241QVB0MmdLMlpLVDFGWFZNTjJheGp1anFQckFn
OHFYczV0Umpoci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80bkpRa241QVB0MmdLMlpLVDFGWFZNTjJheGp1anFQckFn
OHFYczV0Umpoci8wLzlGRTNCN0YzRjFCMkY5QkMwMUQwMkRGMTJFNUQzMUFBMTRF
MDYwREIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi27kDANBAIAAjAHAwUA
KARlgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHLcwDQYJKoZIhvcNAQELBQAD
ggEBAD2Jrli6u2U5KJK8l8nC/jV1OXO5johzYSYvJ8BQugH9y18HOn4ihpdB44Ad
1V80uMmqQg+LXoeSl3ez4aVphAjVZ5PF+s3nlw3fG9N0OkW7Y/Zk+MLtI2rSXCEH
YIabIeXUbN7H5kw4ds8nbk6oVloTPBeEYYNUVDiKYIVKjVEw24at9t0GVf2WuQBb
uFDNJQecO3cRZ1adw3YlSfKILyYNfwYzEOP7LauF3vL5BgMDjnEohxN0ABsJAVzi
t1AwRI8fsYgD306W+F8WrPsEScakp+tZsSIA2hLZHpBaBUEe9ndPHV2SuW/09wUM
jHiKdAILr8dynX1zg9KcK2iRSwI=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org