Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59.cer
File:                     C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59.cer (raw, json)
Hash identifier:          /NP1KO+Y7HSMJsXXQ4792BisNFWR4GnhNj63vK6qG5s=
Subject key identifier:   C9:A3:BF:9B:6F:35:14:CA:B3:1F:17:CB:41:F1:E2:0F:89:E2:5C:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52502FA6107ADE15847161F5C46838AE68666F6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 03 Mar 2024 18:23:39 +0000
Certificate not after:    Sun 02 Mar 2025 18:28:39 +0000
Subordinate resources:    AS: 271561
                          IP: 179.63.136.0/23
                          IP: 2804:7d70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:50:2f:a6:10:7a:de:15:84:71:61:f5:c4:68:38:ae:68:66:6f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  3 18:23:39 2024 GMT
            Not After : Mar  2 18:28:39 2025 GMT
        Subject: CN=C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:4d:ea:38:04:9f:cd:df:9c:23:a8:ee:f4:
                    62:0c:43:25:98:80:31:97:64:6e:5d:ce:59:4d:d6:
                    46:81:0d:da:36:9a:7a:a9:9f:5c:96:68:f0:04:db:
                    75:8a:b9:48:98:9d:e0:24:3f:fd:5c:c2:eb:d8:bb:
                    b6:52:a7:d5:66:0d:ca:3b:05:fa:ef:9c:3f:79:12:
                    13:76:88:26:e8:bd:40:93:67:ed:a2:64:fd:a8:48:
                    76:15:96:ec:26:f6:f8:52:0a:56:1d:c7:f7:c0:4d:
                    9d:56:c0:03:37:3d:5e:2f:17:dc:5c:74:81:43:f5:
                    94:cd:5b:92:6c:db:12:9c:31:0d:67:9e:0d:d1:d3:
                    66:13:fa:97:56:a1:1d:3d:d3:02:27:4c:03:92:8c:
                    9a:08:7c:03:25:cd:ba:21:4b:72:d8:fa:11:05:42:
                    d4:af:ed:34:42:eb:a9:a5:35:3b:22:a1:90:65:60:
                    da:08:75:b6:fb:1c:62:87:7b:a3:fe:b8:c5:35:01:
                    b6:8d:5d:24:21:7c:24:e3:bf:ec:63:a3:c0:93:02:
                    0e:1e:9c:6e:46:35:c0:75:87:4f:fb:b3:8d:d8:41:
                    9f:ff:79:2e:82:cb:eb:2e:12:19:db:54:ce:57:36:
                    d2:5e:da:d7:e1:a4:c1:ba:04:1d:9d:7b:92:5e:3e:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:A3:BF:9B:6F:35:14:CA:B3:1F:17:CB:41:F1:E2:0F:89:E2:5C:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/0/C9A3BF9B6F3514CAB31F17CB41F1E20F89E25C59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.136.0/23
                IPv6:
                  2804:7d70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271561

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:de:cb:d6:f7:b8:bf:ca:4e:b7:3a:32:f4:4d:4f:45:12:
         06:89:d3:bd:ba:cd:2d:15:59:f4:ae:e4:d1:c9:7b:7b:99:a4:
         7d:b6:79:69:85:b9:d7:b7:8d:f2:d5:0b:ef:f1:33:2b:f8:36:
         89:14:29:be:57:91:76:0d:d7:0f:0d:fd:f2:11:17:1f:92:19:
         2c:dd:2c:1e:29:62:22:1a:35:43:74:6b:4e:c1:50:d2:cb:1d:
         b4:af:09:c9:75:4d:c4:3c:eb:fc:27:08:cc:ba:80:8a:1c:40:
         96:6f:92:a9:cc:a8:85:9b:5e:75:8f:b8:67:7f:d0:58:53:42:
         3c:ac:66:6a:8f:b9:88:7d:6d:fa:6c:ba:6a:c7:9b:07:f2:7d:
         44:aa:26:d7:8f:81:f7:38:20:64:02:08:f9:b3:29:5b:4f:09:
         d0:d2:d2:88:26:5a:ec:fe:b8:b7:3a:af:0c:da:b1:27:59:c6:
         ef:d6:70:ca:67:e2:b9:90:b5:6f:b4:1e:8f:d6:65:2b:7b:fd:
         f5:e5:ee:58:96:f4:6e:42:bb:07:9c:26:42:3a:74:e7:7a:51:
         ac:f1:9e:b6:ae:4c:82:66:f4:79:30:4e:90:cb:85:69:31:5f:
         67:fa:b0:80:50:fe:04:b0:00:db:4c:b8:b4:6f:ac:6f:0f:98:
         4c:2e:d2:a1
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUUlAvphB63hWEcWH1xGg4rmhmb24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDMxODIzMzlaFw0yNTAzMDIxODI4MzlaMDMxMTAvBgNV
BAMTKEM5QTNCRjlCNkYzNTE0Q0FCMzFGMTdDQjQxRjFFMjBGODlFMjVDNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Fk3qOASfzd+cI6ju9GIMQyWY
gDGXZG5dzllN1kaBDdo2mnqpn1yWaPAE23WKuUiYneAkP/1cwuvYu7ZSp9VmDco7
BfrvnD95EhN2iCbovUCTZ+2iZP2oSHYVluwm9vhSClYdx/fATZ1WwAM3PV4vF9xc
dIFD9ZTNW5Js2xKcMQ1nng3R02YT+pdWoR090wInTAOSjJoIfAMlzbohS3LY+hEF
QtSv7TRC66mlNTsioZBlYNoIdbb7HGKHe6P+uMU1AbaNXSQhfCTjv+xjo8CTAg4e
nG5GNcB1h0/7s43YQZ//eS6Cy+suEhnbVM5XNtJe2tfhpMG6BB2de5JePnpBAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJo7+bbzUUyrMf
F8tB8eIPieJcWTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83UzVvQTdnV2hlblpaRG9VVDlnOG9CRnZEZ0NGcHpvTEFo
QlhzYVZZbnJCLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83UzVvQTdnV2hlblpaRG9VVDlnOG9CRnZEZ0NGcHpvTEFo
QlhzYVZZbnJCLzAvQzlBM0JGOUI2RjM1MTRDQUIzMUYxN0NCNDFGMUUyMEY4OUUy
NUM1OS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBsz+IMA0EAgACMAcDBQAo
BH1wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQkyTANBgkqhkiG9w0BAQsFAAOC
AQEAXd/ey9b3uL/KTrc6MvRNT0USBonTvbrNLRVZ9K7k0cl7e5mkfbZ5aYW517eN
8tUL7/EzK/g2iRQpvleRdg3XDw398hEXH5IZLN0sHiliIho1Q3RrTsFQ0ssdtK8J
yXVNxDzr/CcIzLqAihxAlm+SqcyohZtedY+4Z3/QWFNCPKxmao+5iH1t+my6aseb
B/J9RKom14+B9zggZAII+bMpW08J0NLSiCZa7P64tzqvDNqxJ1nG79ZwymfiuZC1
b7Qej9ZlK3v99eXuWJb0bkK7B5wmQjp053pRrPGetq5Mgmb0eTBOkMuFaTFfZ/qw
gFD+BLAA20y4tG+sbw+YTC7SoQ==
-----END CERTIFICATE-----