Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/911AE36F95E79FB0B3D9219FA8F96BC9C869035A.cer
File:                     911AE36F95E79FB0B3D9219FA8F96BC9C869035A.cer (raw, json)
Hash identifier:          NECX01KxoKaMR6i/iemiN8F63y8L16E8D3/0N78N7EE=
Subject key identifier:   91:1A:E3:6F:95:E7:9F:B0:B3:D9:21:9F:A8:F9:6B:C9:C8:69:03:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5DBBC0177819A769F6380293A09065764A6406DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/0/911AE36F95E79FB0B3D9219FA8F96BC9C869035A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Oct 2023 23:25:16 +0000
Certificate not after:    Wed 16 Oct 2024 23:30:16 +0000
Subordinate resources:    AS: 265938
                          IP: 164.163.44.0/22
                          IP: 2804:4028::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bb:c0:17:78:19:a7:69:f6:38:02:93:a0:90:65:76:4a:64:06:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 23:25:16 2023 GMT
            Not After : Oct 16 23:30:16 2024 GMT
        Subject: CN=911AE36F95E79FB0B3D9219FA8F96BC9C869035A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:e0:95:9f:85:3b:61:1a:76:dd:09:1e:05:
                    97:2c:eb:f8:34:ee:9e:5e:38:00:88:ca:28:bf:96:
                    d5:d6:06:f5:a7:54:a9:55:a6:6b:a7:30:a9:6f:43:
                    a9:cf:3e:1c:f7:12:8a:e2:77:84:e1:31:d5:e3:10:
                    a7:d2:0e:58:9e:c6:74:82:e9:7b:6b:8e:17:d4:09:
                    26:9b:49:83:90:9a:1c:f1:90:45:e1:7a:a4:bd:90:
                    6c:9e:b5:26:a7:90:ca:14:80:04:97:de:92:db:53:
                    15:b7:d0:db:ec:07:c4:b2:2f:1e:98:f3:f9:b1:1b:
                    34:95:5b:fb:47:c4:1a:92:f9:0d:52:64:39:0b:f5:
                    a8:a4:90:26:36:90:c9:b9:e8:30:b6:de:3f:5a:59:
                    38:72:89:59:14:4f:5f:a7:1a:52:ae:00:e5:51:fa:
                    22:ae:72:bd:10:c0:43:8e:39:b1:0f:f5:25:8b:ca:
                    29:5f:6c:a5:5a:f8:d7:93:7e:0d:4d:05:50:44:38:
                    74:e4:fd:16:f1:06:93:be:7d:3c:e2:e6:9d:32:d7:
                    c9:6f:3d:ba:f8:75:16:44:4c:5d:c0:bc:ad:d7:1d:
                    3a:b8:42:0d:0e:29:76:3d:e5:0e:15:2e:4d:3f:ea:
                    e7:09:af:08:9a:e5:11:c5:62:ee:ee:ee:0b:12:3c:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:1A:E3:6F:95:E7:9F:B0:B3:D9:21:9F:A8:F9:6B:C9:C8:69:03:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/0/911AE36F95E79FB0B3D9219FA8F96BC9C869035A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.44.0/22
                IPv6:
                  2804:4028::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265938

    Signature Algorithm: sha256WithRSAEncryption
         74:1d:48:b4:ef:e6:ef:f6:94:5a:85:dd:bc:7d:d0:ab:48:c8:
         d0:3d:9e:10:20:6c:48:2b:0c:8e:17:8f:d7:35:b5:40:41:b6:
         e5:e5:7e:83:ab:ac:6e:a5:cc:08:57:8e:9a:0a:5c:fa:6f:11:
         ac:25:b5:3b:2b:3c:80:81:a5:a2:81:be:e1:01:bf:b5:c5:2f:
         89:93:23:de:48:0a:c2:86:9d:d3:a2:e9:20:8c:84:ee:72:2a:
         e2:06:84:d3:44:2c:dc:21:13:d8:9b:95:de:23:89:1b:d4:ea:
         87:ee:d0:ba:7c:b9:fb:f3:70:3d:99:d0:1c:74:b9:ad:a0:6b:
         89:59:0f:7f:8e:e4:b6:50:c3:69:51:df:be:7e:f7:cc:86:08:
         83:f1:c1:41:dc:ce:72:88:ef:70:66:09:53:68:8e:b7:f4:2a:
         aa:ad:85:86:42:40:4f:61:f4:79:e5:28:a4:91:ec:c1:20:3f:
         8b:ae:f6:e3:51:87:b7:32:bb:16:7f:37:46:a7:55:c8:fc:c2:
         4c:17:aa:df:a2:e5:0a:ef:44:b0:eb:1e:63:be:c2:3a:c1:13:
         2a:ba:c0:89:d9:46:fb:a6:7e:e6:f8:b6:55:7f:ea:62:77:76:
         d3:fe:f3:a3:65:d2:91:8c:36:b9:8b:0f:58:e5:3e:10:2f:a6:
         e7:6c:ee:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org