Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A9DCB7B28996884B1987B2F01D8A8836002CDE29.cer
File:                     A9DCB7B28996884B1987B2F01D8A8836002CDE29.cer (raw, json)
Hash identifier:          mtI0RhEEDle5DxDIpP6IkqxSf0BawLP6+rzRFq6VLt0=
Subject key identifier:   A9:DC:B7:B2:89:96:88:4B:19:87:B2:F0:1D:8A:88:36:00:2C:DE:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CFB7D09D6FC8481D73345207DC18FF089753C9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AjBSw1QUtDuLXh9da2BGXtp6JWJokEpVfZUhM3YDC8Ht/0/A9DCB7B28996884B1987B2F01D8A8836002CDE29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AjBSw1QUtDuLXh9da2BGXtp6JWJokEpVfZUhM3YDC8Ht/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jun 2023 20:40:17 +0000
Certificate not after:    Mon 10 Jun 2024 20:45:17 +0000
Subordinate resources:    AS: 271067
                          IP: 179.48.68.0/22
                          IP: 2804:75c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fb:7d:09:d6:fc:84:81:d7:33:45:20:7d:c1:8f:f0:89:75:3c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 12 20:40:17 2023 GMT
            Not After : Jun 10 20:45:17 2024 GMT
        Subject: CN=A9DCB7B28996884B1987B2F01D8A8836002CDE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:d3:ec:a6:34:b2:40:38:46:9c:48:13:85:
                    a3:55:7a:88:0e:90:ba:d6:76:bc:af:92:50:2e:9b:
                    ac:04:c7:5c:44:0b:31:21:f2:26:4c:ac:95:dc:9a:
                    45:dd:46:9d:4d:f1:78:bb:a3:0d:35:5b:c3:b0:40:
                    a6:04:81:13:80:df:9f:1b:55:f2:69:8d:1e:da:a3:
                    e4:09:80:12:d8:48:84:fd:c6:5f:40:15:3b:ee:92:
                    29:3c:65:50:2e:bf:48:0e:a9:8e:e4:92:90:c7:1d:
                    60:30:02:d8:4a:63:10:57:85:0a:97:4b:22:9f:82:
                    14:f6:37:dd:b8:5c:c7:79:0a:68:78:60:c5:35:42:
                    2e:3c:d6:90:e2:a5:73:f0:b9:a9:7f:9e:d0:3a:81:
                    cd:6d:4d:29:85:7d:6d:ee:d3:fe:6f:c5:6b:d8:92:
                    63:62:f1:34:db:f7:d6:d7:02:89:8b:96:7f:cf:79:
                    2f:4a:07:0a:53:00:23:6f:6d:18:9d:bf:a0:2e:4f:
                    86:bb:5e:2a:71:3c:9b:e6:f3:18:20:52:e3:b5:4d:
                    d5:64:c9:e7:ab:b3:d6:0a:b2:29:4e:4c:cf:31:4d:
                    6c:8f:f4:ba:c2:21:ff:42:7a:2f:2e:02:6d:68:01:
                    ad:17:f0:1b:c0:ea:31:9c:a2:da:0b:f9:69:bf:e5:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:DC:B7:B2:89:96:88:4B:19:87:B2:F0:1D:8A:88:36:00:2C:DE:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjBSw1QUtDuLXh9da2BGXtp6JWJokEpVfZUhM3YDC8Ht/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjBSw1QUtDuLXh9da2BGXtp6JWJokEpVfZUhM3YDC8Ht/0/A9DCB7B28996884B1987B2F01D8A8836002CDE29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.68.0/22
                IPv6:
                  2804:75c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271067

    Signature Algorithm: sha256WithRSAEncryption
         b4:ea:6d:42:c7:b1:74:62:6b:45:bf:35:0f:a9:bb:32:29:88:
         02:72:fc:6c:2c:5d:24:a5:2a:28:91:71:c6:74:cc:d1:68:f0:
         32:be:e6:7c:1b:ad:b3:d2:c1:6e:7d:a1:e2:6e:cd:35:42:05:
         12:7c:77:83:58:7e:9c:82:1a:17:3d:55:69:83:6b:4e:b9:2b:
         13:87:ff:22:9c:4f:77:e6:26:75:bc:1f:63:b1:a0:21:75:2f:
         b8:97:b8:f3:ae:35:b6:25:ad:11:c0:4b:6c:71:7b:cb:5c:69:
         a2:af:a8:93:e0:7a:af:4f:7e:6b:d2:8d:1d:a4:20:7f:08:02:
         01:a6:97:dc:f0:f9:84:74:01:31:51:ff:5c:43:81:7a:4b:c4:
         af:20:00:7e:a9:83:fc:63:96:9d:91:61:b7:e5:de:a0:c9:60:
         dc:91:53:07:c6:40:2a:8a:59:31:92:e3:c4:22:36:8d:7b:67:
         ce:05:b1:10:64:2f:e8:df:05:04:6d:e2:f6:38:d2:8d:c7:b7:
         4d:eb:82:14:94:bd:e6:82:63:89:27:7d:95:9d:7e:e3:37:10:
         24:5f:b8:b8:7c:c2:2d:64:62:e8:0b:9b:6a:68:a1:77:c5:14:
         6d:8d:b3:bd:9e:4e:21:2d:60:a7:37:77:ef:e0:dd:2a:fa:87:
         ae:3e:95:08
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUHPt9Cdb8hIHXM0UgfcGP8Il1PJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MTIyMDQwMTdaFw0yNDA2MTAyMDQ1MTdaMDMxMTAvBgNV
BAMTKEE5RENCN0IyODk5Njg4NEIxOTg3QjJGMDFEOEE4ODM2MDAyQ0RFMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFNPspjSyQDhGnEgThaNVeogO
kLrWdryvklAum6wEx1xECzEh8iZMrJXcmkXdRp1N8Xi7ow01W8OwQKYEgROA358b
VfJpjR7ao+QJgBLYSIT9xl9AFTvukik8ZVAuv0gOqY7kkpDHHWAwAthKYxBXhQqX
SyKfghT2N924XMd5Cmh4YMU1Qi481pDipXPwual/ntA6gc1tTSmFfW3u0/5vxWvY
kmNi8TTb99bXAomLln/PeS9KBwpTACNvbRidv6AuT4a7XipxPJvm8xggUuO1TdVk
yeers9YKsilOTM8xTWyP9LrCIf9Cei8uAm1oAa0X8BvA6jGcotoL+Wm/5ZW/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSp3LeyiZaISxmH
svAdiog2ACzeKTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BakJTdzFRVXREdUxYaDlkYTJCR1h0cDZKV0pva0VwVmZa
VWhNM1lEQzhIdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQWpCU3cxUVV0RHVMWGg5ZGEyQkdYdHA2SldKb2tFcFZm
WlVoTTNZREM4SHQvMC9BOURDQjdCMjg5OTY4ODRCMTk4N0IyRjAxRDhBODgzNjAw
MkNERTI5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzMEQwDQQCAAIwBwMF
ACgEdcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCLbMA0GCSqGSIb3DQEBCwUA
A4IBAQC06m1Cx7F0YmtFvzUPqbsyKYgCcvxsLF0kpSookXHGdMzRaPAyvuZ8G62z
0sFufaHibs01QgUSfHeDWH6cghoXPVVpg2tOuSsTh/8inE935iZ1vB9jsaAhdS+4
l7jzrjW2Ja0RwEtscXvLXGmir6iT4HqvT35r0o0dpCB/CAIBppfc8PmEdAExUf9c
Q4F6S8SvIAB+qYP8Y5adkWG35d6gyWDckVMHxkAqilkxkuPEIjaNe2fOBbEQZC/o
3wUEbeL2ONKNx7dN64IUlL3mgmOJJ32VnX7jNxAkX7i4fMItZGLoC5tqaKF3xRRt
jbO9nk4hLWCnN3fv4N0q+oeuPpUI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org