Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5.cer
File:                     B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5.cer (raw, json)
Hash identifier:          XB8c5PX+3tkv78J+B6uLbdU8gI9xdQjgYqDI2KgXqkI=
Subject key identifier:   B9:EE:2F:F3:A3:03:D4:8B:AF:71:B9:5D:7F:32:72:B7:D5:7A:D1:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39577B151F431666A5021274E06C77FB56DEC8C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Mar 2023 12:52:04 +0000
Certificate not after:    Sat 23 Mar 2024 12:57:04 +0000
Subordinate resources:    AS: 264202
                          IP: 138.97.216.0/22
                          IP: 170.233.44.0/22
                          IP: 2804:241c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:57:7b:15:1f:43:16:66:a5:02:12:74:e0:6c:77:fb:56:de:c8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 12:52:04 2023 GMT
            Not After : Mar 23 12:57:04 2024 GMT
        Subject: CN=B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:03:78:86:ee:74:74:ec:08:cc:77:c0:f8:
                    f2:28:59:81:29:25:df:88:c2:eb:cf:e1:3e:dd:0f:
                    ea:58:4a:c3:15:1d:e7:e8:ad:ed:81:6c:0a:e4:b9:
                    50:b0:8f:38:af:85:fa:e3:8b:be:b3:a0:f7:35:f5:
                    02:ea:e0:12:c9:dd:bc:37:02:4c:92:10:0d:91:cd:
                    97:38:9a:5c:e0:5c:7e:c1:4a:ea:6d:92:f2:93:b9:
                    68:21:33:9b:9b:dc:80:22:12:18:25:08:aa:b1:12:
                    d8:f8:c5:c2:23:ae:e2:85:38:50:f5:60:65:e8:a6:
                    4b:de:15:5e:25:75:a6:e4:8d:51:4e:0f:f8:af:3c:
                    41:d2:e1:ce:3a:05:f7:8a:6c:04:c8:ca:37:b4:84:
                    f6:10:fa:fd:77:fc:74:1f:66:6e:3e:2f:fb:18:7c:
                    09:4d:8e:c3:10:ba:86:6f:7f:ab:ec:86:eb:c8:94:
                    a0:c4:3e:30:29:b5:37:fe:46:64:5c:69:4b:66:7c:
                    4f:19:d7:e3:e9:f9:b7:a4:6e:04:92:5e:58:89:5b:
                    59:7f:a6:11:54:b5:72:c1:cf:94:2e:5b:ba:ab:b2:
                    46:ff:ee:03:e4:11:40:a2:3a:19:e1:2a:51:b4:3d:
                    f7:56:85:1c:7d:56:92:ab:96:3f:80:65:54:76:22:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:EE:2F:F3:A3:03:D4:8B:AF:71:B9:5D:7F:32:72:B7:D5:7A:D1:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/B9EE2FF3A303D48BAF71B95D7F3272B7D57AD1D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.216.0/22
                  170.233.44.0/22
                IPv6:
                  2804:241c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264202

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:30:4c:ee:80:fb:98:fb:f4:b3:5d:f1:e4:b2:dc:a7:57:
         60:54:f0:06:4c:20:29:0c:a0:ed:72:81:e7:11:99:74:1d:7b:
         38:e7:a4:95:cd:fc:51:99:1c:7e:d9:fb:d2:9a:f6:06:cf:95:
         20:29:3d:89:49:4c:86:b5:d2:d7:03:92:f4:42:f5:a6:0f:00:
         05:5a:3b:25:89:2d:14:b5:23:da:03:75:18:2b:5f:bb:ed:4f:
         d1:a2:a5:5e:2b:f6:67:5b:d7:8d:17:29:65:da:d4:b3:7b:e8:
         33:a5:f1:f6:10:a0:7b:81:30:20:65:84:95:38:8f:e2:0b:0c:
         2c:b1:cf:f7:f5:9b:4b:a4:db:d0:7a:cd:e6:49:c9:b1:d0:dd:
         b0:44:b9:20:81:f2:02:fb:d8:cb:bc:d8:1b:06:8c:8e:65:0e:
         34:62:b5:a2:a0:30:97:18:24:54:ba:2f:5c:7c:71:24:43:6f:
         d7:4b:d0:5f:3c:75:b9:db:76:81:63:79:5d:0e:59:17:6a:df:
         88:9b:e6:6d:2a:0d:5b:95:c5:07:6a:16:af:78:33:11:9e:b9:
         00:d2:4f:0a:3f:2a:0b:b5:f9:fb:b3:ac:04:b4:c3:a1:d2:73:
         0e:a9:cf:11:32:98:80:32:85:e7:ef:68:bc:ea:d4:db:c7:34:
         f3:34:c2:9a
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUOVd7FR9DFmalAhJ04Gx3+1beyMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjUxMjUyMDRaFw0yNDAzMjMxMjU3MDRaMDMxMTAvBgNV
BAMTKEI5RUUyRkYzQTMwM0Q0OEJBRjcxQjk1RDdGMzI3MkI3RDU3QUQxRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3QN4hu50dOwIzHfA+PIoWYEp
Jd+IwuvP4T7dD+pYSsMVHefore2BbArkuVCwjzivhfrji76zoPc19QLq4BLJ3bw3
AkySEA2RzZc4mlzgXH7BSuptkvKTuWghM5ub3IAiEhglCKqxEtj4xcIjruKFOFD1
YGXopkveFV4ldabkjVFOD/ivPEHS4c46BfeKbATIyje0hPYQ+v13/HQfZm4+L/sY
fAlNjsMQuoZvf6vshuvIlKDEPjAptTf+RmRcaUtmfE8Z1+Pp+bekbgSSXliJW1l/
phFUtXLBz5QuW7qrskb/7gPkEUCiOhnhKlG0PfdWhRx9VpKrlj+AZVR2Iod5AgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS57i/zowPUi69x
uV1/MnK31XrR1TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yWmJzeU1mQkZCYkFQd0RZNE5zNXlheG54NGNXR01lNjlV
TldOU2UyS3UxYS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yWmJzeU1mQkZCYkFQd0RZNE5zNXlheG54NGNXR01lNjlV
TldOU2UyS3UxYS8wL0I5RUUyRkYzQTMwM0Q0OEJBRjcxQjk1RDdGMzI3MkI3RDU3
QUQxRDUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoph2AMEAqrpLDANBAIA
AjAHAwUAKAQkHDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECAowDQYJKoZIhvcN
AQELBQADggEBAKQiMEzugPuY+/SzXfHkstynV2BU8AZMICkMoO1ygecRmXQdezjn
pJXN/FGZHH7Z+9Ka9gbPlSApPYlJTIa10tcDkvRC9aYPAAVaOyWJLRS1I9oDdRgr
X7vtT9GipV4r9mdb140XKWXa1LN76DOl8fYQoHuBMCBlhJU4j+ILDCyxz/f1m0uk
29B6zeZJybHQ3bBEuSCB8gL72Mu82BsGjI5lDjRitaKgMJcYJFS6L1x8cSRDb9dL
0F88dbnbdoFjeV0OWRdq34ib5m0qDVuVxQdqFq94MxGeuQDSTwo/Kgu1+fuzrAS0
w6HScw6pzxEymIAyhefvaLzq1NvHNPM0wpo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org