Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.cer
File:                     D9E9FED4F7C00847DC06901C384D2C908C0095A1.cer (raw, json)
Hash identifier:          TUE+FGp+QdUediUnho4fXzyFhreRfd9ZLkk+wvLaA/A=
Subject key identifier:   D9:E9:FE:D4:F7:C0:08:47:DC:06:90:1C:38:4D:2C:90:8C:00:95:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       216F6E523E476879346E9E7369009EB2A01B5170
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Dec 2023 22:56:49 +0000
Certificate not after:    Sat 28 Dec 2024 23:01:49 +0000
Subordinate resources:    AS: 263637
                          IP: 179.127.32.0/21
                          IP: 2804:1078::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6f:6e:52:3e:47:68:79:34:6e:9e:73:69:00:9e:b2:a0:1b:51:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 30 22:56:49 2023 GMT
            Not After : Dec 28 23:01:49 2024 GMT
        Subject: CN=D9E9FED4F7C00847DC06901C384D2C908C0095A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:1a:37:48:34:91:16:49:79:9e:50:80:dd:
                    48:f1:45:22:46:47:bb:dc:1c:cf:56:1b:23:1a:a9:
                    97:c2:eb:51:c1:4e:e3:a6:ce:86:7f:a2:1a:71:ef:
                    48:a7:24:5e:f8:c9:46:ca:74:2f:ec:73:9a:37:cd:
                    b2:c0:fb:c4:9a:c8:72:bc:48:bb:3f:7d:cf:04:20:
                    b8:ac:f0:10:3c:29:4d:72:8f:de:88:6c:c4:78:dd:
                    ad:0c:06:78:cc:27:01:8c:41:27:d0:1c:a9:69:cd:
                    88:35:a8:99:79:d8:5c:cf:58:c3:01:b3:38:0e:b1:
                    c2:98:f2:e7:22:35:2f:35:b4:3a:c9:9f:77:ea:31:
                    ff:42:7b:1e:ae:de:c1:24:d6:90:c1:cc:57:f7:ec:
                    82:1e:ab:ff:ef:a6:fb:dc:a2:8d:3f:22:24:11:53:
                    5c:03:c7:85:d0:15:b0:f9:b7:59:87:35:e1:35:1f:
                    64:71:04:37:9b:57:f0:9a:91:33:3c:2e:03:9d:71:
                    de:69:fb:1c:94:72:39:2a:4d:7e:32:3b:bc:ba:83:
                    64:c5:f6:ab:d9:f4:09:05:97:88:4c:69:81:8a:e5:
                    36:14:8e:78:e1:ad:80:45:e2:d6:52:49:87:39:b8:
                    31:46:3b:18:e3:4e:bf:fe:f0:d3:36:cc:bb:65:35:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:E9:FE:D4:F7:C0:08:47:DC:06:90:1C:38:4D:2C:90:8C:00:95:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.32.0/21
                IPv6:
                  2804:1078::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263637

    Signature Algorithm: sha256WithRSAEncryption
         79:16:92:8a:21:25:33:19:dc:53:d1:08:84:49:41:16:8b:f5:
         47:fe:29:bc:fd:30:1f:37:08:69:1f:4a:a0:8d:68:14:c4:c0:
         42:62:09:da:49:67:22:65:bd:4c:dc:82:83:29:1b:0e:4e:b2:
         7c:27:e1:de:8f:69:13:9c:8c:c4:11:ab:b9:39:22:44:d0:5e:
         eb:36:31:fd:af:a9:6e:ad:87:17:b1:84:1b:28:19:2c:df:cd:
         de:45:64:f9:12:6f:70:fb:e6:61:c0:5c:da:6e:0d:31:04:83:
         47:7d:7c:bc:02:05:8e:ca:14:bd:83:14:23:d5:59:7c:92:47:
         c0:3f:6d:55:a4:e9:16:15:c7:a5:3b:0f:b9:89:87:d6:f5:f5:
         cd:a6:91:0f:38:18:64:4c:16:24:85:e3:3a:19:74:43:da:3d:
         30:9f:57:a7:0d:9b:32:da:c4:10:2e:b5:e2:a0:24:26:3d:4f:
         20:22:d9:71:4e:b0:18:c3:cc:89:fc:98:6a:c5:13:cc:78:11:
         87:95:b0:b8:bd:b4:e5:72:5e:5e:a0:60:60:6f:5d:39:6e:87:
         88:71:12:32:fd:e0:1f:ce:db:16:f7:b6:82:62:a7:72:94:6b:
         70:f6:e4:e5:f4:1c:dd:e8:0e:03:a9:e6:6f:c9:a3:cc:72:5e:
         98:b7:fc:28
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUIW9uUj5HaHk0bp5zaQCesqAbUXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMzAyMjU2NDlaFw0yNDEyMjgyMzAxNDlaMDMxMTAvBgNV
BAMTKEQ5RTlGRUQ0RjdDMDA4NDdEQzA2OTAxQzM4NEQyQzkwOEMwMDk1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbixo3SDSRFkl5nlCA3UjxRSJG
R7vcHM9WGyMaqZfC61HBTuOmzoZ/ohpx70inJF74yUbKdC/sc5o3zbLA+8SayHK8
SLs/fc8EILis8BA8KU1yj96IbMR43a0MBnjMJwGMQSfQHKlpzYg1qJl52FzPWMMB
szgOscKY8uciNS81tDrJn3fqMf9Cex6u3sEk1pDBzFf37IIeq//vpvvcoo0/IiQR
U1wDx4XQFbD5t1mHNeE1H2RxBDebV/CakTM8LgOdcd5p+xyUcjkqTX4yO7y6g2TF
9qvZ9AkFl4hMaYGK5TYUjnjhrYBF4tZSSYc5uDFGOxjjTr/+8NM2zLtlNYLNAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZ6f7U98AIR9wG
kBw4TSyQjACVoTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82bnI4b1oxMVpIN3V6Tk5KNVhHVVZ2REs3RXN0TDZaMkxC
YlVDWWc3Um1lUC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82bnI4b1oxMVpIN3V6Tk5KNVhHVVZ2REs3RXN0TDZaMkxC
YlVDWWc3Um1lUC8wL0Q5RTlGRUQ0RjdDMDA4NDdEQzA2OTAxQzM4NEQyQzkwOEMw
MDk1QTEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7N/IDANBAIAAjAHAwUA
KAQQeDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBdUwDQYJKoZIhvcNAQELBQAD
ggEBAHkWkoohJTMZ3FPRCIRJQRaL9Uf+Kbz9MB83CGkfSqCNaBTEwEJiCdpJZyJl
vUzcgoMpGw5Osnwn4d6PaROcjMQRq7k5IkTQXus2Mf2vqW6thxexhBsoGSzfzd5F
ZPkSb3D75mHAXNpuDTEEg0d9fLwCBY7KFL2DFCPVWXySR8A/bVWk6RYVx6U7D7mJ
h9b19c2mkQ84GGRMFiSF4zoZdEPaPTCfV6cNmzLaxBAuteKgJCY9TyAi2XFOsBjD
zIn8mGrFE8x4EYeVsLi9tOVyXl6gYGBvXTluh4hxEjL94B/O2xb3toJip3KUa3D2
5OX0HN3oDgOp5m/Jo8xyXpi3/Cg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org