Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A9C4C936AA8C072C53DEEE792E52258BE5A07EE8.cer
File:                     A9C4C936AA8C072C53DEEE792E52258BE5A07EE8.cer (raw, json)
Hash identifier:          wAbKeyGzChWkXOczjcLFdlmWlCReg39Vp/ONOxrD1lM=
Subject key identifier:   A9:C4:C9:36:AA:8C:07:2C:53:DE:EE:79:2E:52:25:8B:E5:A0:7E:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16C158FB502AEE963F913B4898A32BB34A459ECF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/A9C4C936AA8C072C53DEEE792E52258BE5A07EE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 22:44:06 +0000
Certificate not after:    Mon 09 Dec 2024 22:49:06 +0000
Subordinate resources:    AS: 271616
                          IP: 179.124.212.0/22
                          IP: 2804:7e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:58:fb:50:2a:ee:96:3f:91:3b:48:98:a3:2b:b3:4a:45:9e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 22:44:06 2023 GMT
            Not After : Dec  9 22:49:06 2024 GMT
        Subject: CN=A9C4C936AA8C072C53DEEE792E52258BE5A07EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:a6:bb:10:35:b1:d0:6e:76:d0:3e:06:d1:
                    37:79:7b:be:f1:49:c1:54:c9:cf:e8:2e:dd:7d:87:
                    9b:f8:08:9c:ae:e3:46:85:d7:e1:d3:74:85:12:e5:
                    bf:ec:ee:43:62:6c:8e:f9:df:a9:59:2c:51:95:48:
                    5f:c5:a7:d0:e8:bf:90:17:90:b7:3a:28:52:97:79:
                    2c:80:58:63:35:70:8c:51:f2:dc:9c:92:65:0f:17:
                    cf:1e:d3:ae:40:a2:4a:3c:08:3a:a7:eb:11:42:ab:
                    63:41:74:8b:2b:05:e4:bf:c1:9f:5e:32:59:a7:ab:
                    62:98:41:05:46:05:a1:29:da:9e:a5:57:92:f1:06:
                    ed:88:26:5e:ec:4b:88:3a:42:ad:b9:e9:de:0f:57:
                    e0:da:01:ad:0f:fe:79:6a:49:d0:ae:9c:b0:4d:c2:
                    d9:a8:67:f5:e8:6e:1d:9a:15:31:01:1e:a6:2f:59:
                    d1:72:c6:1b:95:e9:66:7a:6b:39:37:b3:7f:2a:56:
                    5c:69:0d:b6:0f:ae:b4:8b:e4:9e:09:73:16:7b:69:
                    87:48:bf:7f:d3:c1:00:17:30:72:82:9f:44:6c:79:
                    93:db:ec:23:de:51:05:95:85:7a:2c:c0:86:2c:80:
                    d7:9f:79:c4:04:76:6f:30:d0:f5:c3:ea:f4:9d:05:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:C4:C9:36:AA:8C:07:2C:53:DE:EE:79:2E:52:25:8B:E5:A0:7E:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/A9C4C936AA8C072C53DEEE792E52258BE5A07EE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.212.0/22
                IPv6:
                  2804:7e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271616

    Signature Algorithm: sha256WithRSAEncryption
         a2:f5:bd:c9:46:cd:40:a0:fb:cc:66:60:6e:db:2f:98:b3:fc:
         8d:4a:7f:cb:44:a0:45:e2:32:45:e9:46:f6:9a:1f:7f:79:33:
         60:99:3f:b8:38:4d:a3:1e:56:dd:ea:ba:52:20:c6:af:85:44:
         b1:6d:db:cf:2b:c3:a6:b2:36:45:dc:54:93:2c:cd:4f:f7:a0:
         cd:73:c8:f8:83:85:ca:48:32:99:31:ec:54:65:63:90:d2:ab:
         36:c6:be:c0:08:29:42:b5:a8:81:b7:4f:9f:a6:1e:79:1b:fd:
         1e:97:a1:06:80:70:87:e1:d9:3a:eb:58:e7:aa:85:7b:55:f2:
         ee:20:c5:04:cb:8e:9d:72:b8:d7:58:22:04:8f:fa:57:50:b1:
         41:ff:7d:58:06:f4:93:5f:5a:d2:f2:1c:05:d7:1d:9c:82:00:
         53:43:6e:c1:bc:b1:01:29:f9:54:e6:0f:63:7d:bb:09:0c:79:
         90:cb:75:dd:55:08:b1:2c:e4:f0:22:35:28:e1:da:35:04:63:
         38:ea:b4:26:cc:5f:b3:9b:dd:04:ae:34:eb:d0:d2:6b:0e:64:
         41:0e:11:9c:25:28:5a:76:ab:5b:ab:6b:18:6a:63:71:5a:c3:
         20:fe:c0:58:94:82:ee:de:fb:38:86:19:0a:58:9d:49:fa:d1:
         39:35:81:78
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFsFY+1Aq7pY/kTtImKMrs0pFns8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTEyMjQ0MDZaFw0yNDEyMDkyMjQ5MDZaMDMxMTAvBgNV
BAMTKEE5QzRDOTM2QUE4QzA3MkM1M0RFRUU3OTJFNTIyNThCRTVBMDdFRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04Ka7EDWx0G520D4G0Td5e77x
ScFUyc/oLt19h5v4CJyu40aF1+HTdIUS5b/s7kNibI7536lZLFGVSF/Fp9Dov5AX
kLc6KFKXeSyAWGM1cIxR8tyckmUPF88e065Aoko8CDqn6xFCq2NBdIsrBeS/wZ9e
Mlmnq2KYQQVGBaEp2p6lV5LxBu2IJl7sS4g6Qq256d4PV+DaAa0P/nlqSdCunLBN
wtmoZ/Xobh2aFTEBHqYvWdFyxhuV6WZ6azk3s38qVlxpDbYPrrSL5J4JcxZ7aYdI
v3/TwQAXMHKCn0RseZPb7CPeUQWVhXoswIYsgNefecQEdm8w0PXD6vSdBS3bAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpxMk2qowHLFPe
7nkuUiWL5aB+6DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84RjNUdEpSWFJLdDRWVXRWVTU1aGd3NE5HUlBhRzZvNHRx
bVkzR1BqM0tpdS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84RjNUdEpSWFJLdDRWVXRWVTU1aGd3NE5HUlBhRzZvNHRx
bVkzR1BqM0tpdS8wL0E5QzRDOTM2QUE4QzA3MkM1M0RFRUU3OTJFNTIyNThCRTVB
MDdFRTgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArN81DANBAIAAjAHAwUA
KAR+UDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJQAwDQYJKoZIhvcNAQELBQAD
ggEBAKL1vclGzUCg+8xmYG7bL5iz/I1Kf8tEoEXiMkXpRvaaH395M2CZP7g4TaMe
Vt3qulIgxq+FRLFt288rw6ayNkXcVJMszU/3oM1zyPiDhcpIMpkx7FRlY5DSqzbG
vsAIKUK1qIG3T5+mHnkb/R6XoQaAcIfh2TrrWOeqhXtV8u4gxQTLjp1yuNdYIgSP
+ldQsUH/fVgG9JNfWtLyHAXXHZyCAFNDbsG8sQEp+VTmD2N9uwkMeZDLdd1VCLEs
5PAiNSjh2jUEYzjqtCbMX7Ob3QSuNOvQ0msOZEEOEZwlKFp2q1uraxhqY3FawyD+
wFiUgu7e+ziGGQpYnUn60Tk1gXg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org