Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/009C4EF4EF649C9B395957AD542418A8BE86103C.cer
File:                     009C4EF4EF649C9B395957AD542418A8BE86103C.cer (raw, json)
Hash identifier:          S2rePEucEENiFqmtbdzfi2EZSnhHoDRtclItiUxk0TI=
Subject key identifier:   00:9C:4E:F4:EF:64:9C:9B:39:59:57:AD:54:24:18:A8:BE:86:10:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       371C4B99B3C1CCB5CF595A242989624825EA9E9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/009C4EF4EF649C9B395957AD542418A8BE86103C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 19:34:21 +0000
Certificate not after:    Mon 01 Apr 2024 19:39:21 +0000
Subordinate resources:    AS: 268037
                          IP: 45.168.48.0/22
                          IP: 2804:5700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1c:4b:99:b3:c1:cc:b5:cf:59:5a:24:29:89:62:48:25:ea:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 19:34:21 2023 GMT
            Not After : Apr  1 19:39:21 2024 GMT
        Subject: CN=009C4EF4EF649C9B395957AD542418A8BE86103C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:a1:6f:3c:41:46:05:2d:fc:af:7e:a0:f4:
                    ea:1a:a4:b7:01:1c:9a:7a:b9:3c:6c:1b:01:4d:23:
                    e3:08:03:fd:8c:62:e3:7c:77:cd:2f:6b:14:f7:73:
                    cf:47:3c:5f:84:b6:50:e2:10:a7:09:49:18:9a:b7:
                    4c:5e:36:62:03:81:3e:a4:15:9d:0f:62:b2:40:ea:
                    e1:c6:5c:b0:1e:91:b9:8a:a0:d7:c6:d8:79:d9:09:
                    f1:64:6c:ed:34:66:99:3d:b1:63:bb:18:b8:ae:bb:
                    d1:4e:1f:61:4d:0f:8e:cb:b2:5e:11:ed:57:fd:0f:
                    a9:83:76:01:b7:64:f5:f8:95:f5:7f:72:7c:7d:eb:
                    72:48:dc:bc:13:a9:b3:95:d3:21:07:7f:8c:11:7e:
                    ee:81:d9:68:b4:d0:f2:52:ff:67:44:d4:f2:e7:4b:
                    30:a5:50:d8:7d:ea:ba:18:08:e5:b2:16:76:c0:07:
                    ec:c4:6c:b2:74:ff:24:bc:b0:da:72:d1:3f:72:60:
                    a4:af:f3:5a:e6:ce:52:8a:f1:03:d9:ac:26:1a:c5:
                    40:5e:f3:f0:4d:79:f3:9d:89:bd:5e:01:ca:a7:bd:
                    3d:44:e5:f5:81:bd:85:46:72:80:e2:d4:8a:dc:08:
                    de:89:3f:34:40:90:5a:80:a6:c0:6c:d3:df:e1:07:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:9C:4E:F4:EF:64:9C:9B:39:59:57:AD:54:24:18:A8:BE:86:10:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/009C4EF4EF649C9B395957AD542418A8BE86103C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.48.0/22
                IPv6:
                  2804:5700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268037

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:e9:f7:2f:a8:ec:1d:dc:4b:3a:ee:a4:6c:b5:af:cb:ef:
         06:5e:a1:95:ec:3f:f4:3a:95:ba:ee:6e:40:ae:3e:6c:11:cb:
         3b:90:c0:0f:cc:af:27:24:ad:fd:02:fb:05:f9:54:cc:fd:11:
         bd:13:04:52:c4:cb:ef:29:0c:49:54:43:39:96:a0:09:dd:86:
         41:57:e9:d7:95:fa:2b:9e:75:67:e1:2e:00:19:76:a9:e4:0f:
         b4:50:d4:da:da:26:5e:44:c3:18:ac:12:6a:de:c3:63:6c:2a:
         eb:d9:aa:a7:27:f1:9c:47:19:df:e0:1c:a2:25:fd:3b:7c:4e:
         0d:7f:26:89:95:f4:ba:ea:c9:6f:73:26:70:c2:13:45:97:0c:
         7a:c8:a9:54:91:48:85:24:5c:3b:20:f0:83:8c:ac:86:4e:69:
         52:51:3c:10:3d:63:fe:28:14:89:55:9c:05:0e:ed:a5:85:ed:
         14:94:4d:f9:b8:fa:43:78:25:c1:d5:43:6b:64:af:18:fe:5d:
         86:c0:27:e9:59:90:00:ad:f8:73:d0:db:7e:76:77:ce:7d:39:
         b8:4b:61:c6:38:a5:8c:90:ce:38:2d:91:ed:81:76:99:58:63:
         f3:8a:96:8b:35:68:75:1c:c7:46:70:42:c9:93:1a:a2:15:62:
         79:5f:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org