Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.cer
File:                     CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.cer (raw, json)
Hash identifier:          GSaSejauNRFeYhSTDOVppaabpQIdodOsSET7jtXXWPg=
Subject key identifier:   CA:9B:A3:9C:8B:1F:4F:52:1B:3E:30:5A:B3:FA:F5:44:51:87:E3:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1DE6209E3CC36595EC68513B2B857F1A9D01C581
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Sep 2022 17:18:10 +0000
Certificate not after:    Fri 15 Sep 2023 17:23:10 +0000
Subordinate resources:    AS: 263270
                          IP: 186.235.60.0/22
                          IP: 2804:1624::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e6:20:9e:3c:c3:65:95:ec:68:51:3b:2b:85:7f:1a:9d:01:c5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 16 17:18:10 2022 GMT
            Not After : Sep 15 17:23:10 2023 GMT
        Subject: CN=CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:2e:fb:d0:9c:e1:ff:45:ca:64:8b:4d:52:
                    57:34:25:46:59:d9:6c:05:7f:0c:67:dd:37:fe:e3:
                    0f:15:b3:f6:04:e0:74:26:11:a3:df:6b:9f:7c:cb:
                    a5:cf:4a:a5:a6:cb:1a:76:6e:a4:9b:3a:d8:22:11:
                    f7:41:30:23:87:a7:cc:23:b4:d5:52:d1:ec:e4:b0:
                    52:29:f6:18:34:cd:b3:a1:bd:6b:d6:51:ef:1b:57:
                    a9:e5:48:6d:81:16:e3:43:49:f9:ec:d4:69:d9:b5:
                    05:66:7c:c6:40:33:1d:56:06:e1:23:a4:67:50:be:
                    9c:ea:b5:3f:48:34:14:8a:9f:b0:5a:b9:d7:e5:e0:
                    3f:e0:82:77:36:3c:5d:3c:87:3a:7a:68:53:85:d1:
                    96:52:ec:41:5f:c5:9e:43:da:4c:8d:f4:51:ea:28:
                    bb:3d:58:9b:70:5a:e0:f9:67:a9:14:9d:8d:aa:2a:
                    c1:e5:ac:af:f4:6c:ca:0d:34:cc:0d:79:30:3b:40:
                    33:b9:a1:e8:8d:49:ed:52:5f:7c:1c:c9:be:54:f7:
                    2a:15:f6:3a:b0:32:e8:c3:39:19:57:08:45:32:d9:
                    67:36:ff:f7:67:4b:4c:c1:0c:76:40:0f:1d:4c:18:
                    85:7d:ff:82:5c:6e:c2:7f:cb:53:77:e4:58:b0:f4:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:9B:A3:9C:8B:1F:4F:52:1B:3E:30:5A:B3:FA:F5:44:51:87:E3:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/CA9BA39C8B1F4F521B3E305AB3FAF5445187E3E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.60.0/22
                IPv6:
                  2804:1624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263270

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:13:63:4f:f7:8b:77:f9:72:24:e9:4a:f7:12:30:dc:cd:
         63:9a:c8:fb:4f:e8:ab:78:45:2a:6c:da:ae:43:13:2a:47:da:
         e4:f1:db:2f:03:c7:c6:3d:ba:d1:64:d2:a2:99:9b:e8:84:13:
         db:c3:2e:ec:7c:83:fb:54:33:9f:ae:7f:5a:fd:89:a7:3e:dd:
         fc:8b:df:87:36:46:81:e4:ba:69:c3:b4:c2:fa:be:eb:01:13:
         8c:0b:77:1b:6d:82:23:f2:00:23:02:6a:73:07:8b:ef:c0:95:
         1c:7f:f0:a5:68:bf:2b:16:45:87:18:d1:ba:d9:07:cc:09:7b:
         3d:55:e1:07:47:b7:67:68:a5:29:2f:86:1a:43:52:c1:fd:37:
         71:4a:70:cf:3d:aa:75:5e:2d:4d:ca:c7:b4:bd:6a:14:84:28:
         1b:9b:3e:f9:55:1c:38:72:9c:bd:d5:a0:b6:56:37:8b:ff:bd:
         d3:3e:08:0c:89:71:9c:9b:13:e5:20:63:86:68:a2:f0:d8:57:
         2a:66:0d:e5:ec:3f:dc:10:50:eb:91:24:0f:35:19:4a:ab:3d:
         9b:3e:fa:e8:0e:0a:8e:a5:e6:f7:f0:c3:31:98:ee:dd:4a:98:
         7c:6d:ef:15:66:2f:6f:25:5c:4c:f2:f5:92:50:d8:b9:1f:94:
         c6:d9:c0:9f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUHeYgnjzDZZXsaFE7K4V/Gp0BxYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MTYxNzE4MTBaFw0yMzA5MTUxNzIzMTBaMDMxMTAvBgNV
BAMTKENBOUJBMzlDOEIxRjRGNTIxQjNFMzA1QUIzRkFGNTQ0NTE4N0UzRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAS770Jzh/0XKZItNUlc0JUZZ
2WwFfwxn3Tf+4w8Vs/YE4HQmEaPfa598y6XPSqWmyxp2bqSbOtgiEfdBMCOHp8wj
tNVS0ezksFIp9hg0zbOhvWvWUe8bV6nlSG2BFuNDSfns1GnZtQVmfMZAMx1WBuEj
pGdQvpzqtT9INBSKn7Baudfl4D/ggnc2PF08hzp6aFOF0ZZS7EFfxZ5D2kyN9FHq
KLs9WJtwWuD5Z6kUnY2qKsHlrK/0bMoNNMwNeTA7QDO5oeiNSe1SX3wcyb5U9yoV
9jqwMujDORlXCEUy2Wc2//dnS0zBDHZADx1MGIV9/4JcbsJ/y1N35Fiw9F3BAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKm6Ocix9PUhs+
MFqz+vVEUYfj5zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84V25kTFhycHRZRDZpOXE1c2hNYnlCTE5tNVZWTlBSUzFz
ZzVQVjN1YlFWdS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84V25kTFhycHRZRDZpOXE1c2hNYnlCTE5tNVZWTlBSUzFz
ZzVQVjN1YlFWdS8wL0NBOUJBMzlDOEIxRjRGNTIxQjNFMzA1QUIzRkFGNTQ0NTE4
N0UzRTcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArrrPDANBAIAAjAHAwUA
KAQWJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBGYwDQYJKoZIhvcNAQELBQAD
ggEBAIB+E2NP94t3+XIk6Ur3EjDczWOayPtP6Kt4RSps2q5DEypH2uTx2y8Dx8Y9
utFk0qKZm+iEE9vDLux8g/tUM5+uf1r9iac+3fyL34c2RoHkumnDtML6vusBE4wL
dxttgiPyACMCanMHi+/AlRx/8KVovysWRYcY0brZB8wJez1V4QdHt2dopSkvhhpD
UsH9N3FKcM89qnVeLU3Kx7S9ahSEKBubPvlVHDhynL3VoLZWN4v/vdM+CAyJcZyb
E+UgY4ZoovDYVypmDeXsP9wQUOuRJA81GUqrPZs++ugOCo6l5vfwwzGY7t1KmHxt
7xVmL28lXEzy9ZJQ2LkflMbZwJ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org