Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.cer
File:                     D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.cer (raw, json)
Hash identifier:          cBsIrsLE5uZQ2NtEeNHNUtQ8AwWY42QDU69fQD9bcN8=
Subject key identifier:   D9:CF:C9:D4:1E:81:C6:EA:15:95:9C:AC:80:AA:25:67:36:76:AE:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       682DB593DF5C30B5586B1097AD4155DB3ADB3E1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 20:51:14 +0000
Certificate not after:    Thu 12 Sep 2024 20:56:14 +0000
Subordinate resources:    AS: 267150
                          IP: 45.230.56.0/22
                          IP: 2804:48e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2d:b5:93:df:5c:30:b5:58:6b:10:97:ad:41:55:db:3a:db:3e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 20:51:14 2023 GMT
            Not After : Sep 12 20:56:14 2024 GMT
        Subject: CN=D9CFC9D41E81C6EA15959CAC80AA25673676AEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:08:70:ce:db:90:7c:c4:f6:d2:20:11:05:
                    7b:89:97:bd:9f:e9:82:cd:20:cf:5e:3e:a4:cb:b6:
                    34:98:fc:fd:54:27:d8:8f:58:b9:85:85:b7:85:25:
                    56:ab:2e:6a:42:f5:83:dc:54:18:2e:ad:e2:d3:60:
                    35:f1:c5:39:e6:d6:7d:17:12:d6:bb:74:db:bf:0f:
                    7c:76:da:36:2e:6f:ba:23:c8:42:ad:69:47:3f:55:
                    3d:02:7b:8c:7b:b2:52:8f:34:5c:33:62:55:ad:cb:
                    8d:30:ce:2d:a5:40:d5:2a:64:56:24:83:bd:8f:e2:
                    96:e7:ba:32:fa:4b:6c:e4:1d:ef:6d:fc:20:b3:dd:
                    ca:45:53:a7:30:91:cf:3e:42:34:0f:40:0e:cb:84:
                    0f:ea:57:9c:79:5a:ec:25:2b:26:dc:36:cb:3a:d2:
                    2d:cb:8b:5b:41:46:88:6f:75:34:2f:fa:1c:49:83:
                    d7:e7:e2:e6:5d:cd:fa:1e:4d:07:82:88:fc:9f:92:
                    b1:28:9a:cd:0d:ec:c5:bd:a4:d4:c2:c7:20:3c:1b:
                    87:3c:5b:ae:75:2a:c1:6e:10:ee:fe:e9:92:6d:2b:
                    cb:b2:5b:40:8d:42:fc:8c:17:10:d2:d7:60:d4:02:
                    f1:e0:84:d3:e4:d8:4c:7a:46:f2:a6:69:a6:f6:2f:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:CF:C9:D4:1E:81:C6:EA:15:95:9C:AC:80:AA:25:67:36:76:AE:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.56.0/22
                IPv6:
                  2804:48e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267150

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:0c:09:20:99:c9:a4:b3:58:20:bf:59:b7:e9:ef:bb:b3:
         a9:9e:69:8f:33:a4:3c:04:68:82:2d:30:a0:d2:9c:0b:d2:8b:
         d6:dc:fd:0b:63:ba:9d:a1:d2:e9:15:ea:91:52:76:15:c7:d5:
         b1:92:8f:31:e8:fc:9f:fb:82:4c:87:b2:c8:89:a8:3d:fd:2b:
         61:42:97:15:1c:07:47:a5:3b:d1:71:ce:9a:f0:0e:d7:eb:8a:
         60:c7:e4:79:f4:49:35:7f:88:48:23:a1:a2:9a:53:8d:51:0e:
         a1:d9:47:d6:f7:bc:40:57:55:07:d7:f5:dc:98:21:c1:38:19:
         6e:e0:3e:90:8c:44:ee:9b:52:66:37:4e:4d:0d:89:54:59:21:
         fe:b5:90:a2:4e:87:7a:f2:54:f9:e0:88:57:9d:11:5b:df:8a:
         ff:5a:f1:6f:ba:1e:99:6a:56:85:95:bd:eb:de:39:b4:1a:ce:
         43:d8:48:16:6b:2a:60:7a:b4:42:2e:df:76:5e:bc:01:13:94:
         ab:c8:c5:11:c2:67:29:cd:3f:18:c8:48:12:1f:82:8e:81:1c:
         12:be:8b:72:6b:69:3d:84:fe:a5:94:e5:82:1c:8d:f2:32:1d:
         ca:37:d8:f1:aa:e4:ed:f8:a8:c2:7d:a1:75:19:c2:1d:8f:e3:
         82:7b:6c:0b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaC21k99cMLVYaxCXrUFV2zrbPhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTQyMDUxMTRaFw0yNDA5MTIyMDU2MTRaMDMxMTAvBgNV
BAMTKEQ5Q0ZDOUQ0MUU4MUM2RUExNTk1OUNBQzgwQUEyNTY3MzY3NkFFREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIwhwztuQfMT20iARBXuJl72f
6YLNIM9ePqTLtjSY/P1UJ9iPWLmFhbeFJVarLmpC9YPcVBgureLTYDXxxTnm1n0X
Eta7dNu/D3x22jYub7ojyEKtaUc/VT0Ce4x7slKPNFwzYlWty40wzi2lQNUqZFYk
g72P4pbnujL6S2zkHe9t/CCz3cpFU6cwkc8+QjQPQA7LhA/qV5x5WuwlKybcNss6
0i3Li1tBRohvdTQv+hxJg9fn4uZdzfoeTQeCiPyfkrEoms0N7MW9pNTCxyA8G4c8
W651KsFuEO7+6ZJtK8uyW0CNQvyMFxDS12DUAvHghNPk2Ex6RvKmaab2L3MtAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZz8nUHoHG6hWV
nKyAqiVnNnau3TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CRDRtZFJRQ1FvV3RmVmdmVG5vd3R1djI1NVhOeGRuWHpy
TDF0QVhVbVNaYy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQkQ0bWRSUUNRb1d0ZlZnZlRub3d0dXYyNTVYTnhkblh6
ckwxdEFYVW1TWmMvMC9EOUNGQzlENDFFODFDNkVBMTU5NTlDQUM4MEFBMjU2NzM2
NzZBRURELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5jgwDQQCAAIwBwMF
ACgESOAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBOOMA0GCSqGSIb3DQEBCwUA
A4IBAQAStAwJIJnJpLNYIL9Zt+nvu7OpnmmPM6Q8BGiCLTCg0pwL0ovW3P0LY7qd
odLpFeqRUnYVx9Wxko8x6Pyf+4JMh7LIiag9/SthQpcVHAdHpTvRcc6a8A7X64pg
x+R59Ek1f4hII6GimlONUQ6h2UfW97xAV1UH1/XcmCHBOBlu4D6QjETum1JmN05N
DYlUWSH+tZCiTod68lT54IhXnRFb34r/WvFvuh6ZalaFlb3r3jm0Gs5D2EgWaypg
erRCLt92XrwBE5SryMURwmcpzT8YyEgSH4KOgRwSvotya2k9hP6llOWCHI3yMh3K
N9jxquTt+KjCfaF1GcIdj+OCe2wL
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org