Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/091D125B09B860A84DBDB15ABD52C268DBE800C8.cer
File:                     091D125B09B860A84DBDB15ABD52C268DBE800C8.cer (raw, json)
Hash identifier:          5r9c1L0klgSNeA2ADxaZgb6L3isxjl4LFUdFJ9rz6Do=
Subject key identifier:   09:1D:12:5B:09:B8:60:A8:4D:BD:B1:5A:BD:52:C2:68:DB:E8:00:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61575A2EB46C5C568B65F7B5C3D4002E33345514
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/091D125B09B860A84DBDB15ABD52C268DBE800C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Dec 2022 23:47:38 +0000
Certificate not after:    Tue 05 Dec 2023 23:52:38 +0000
Subordinate resources:    AS: 270579
                          IP: 189.126.84.0/22
                          IP: 2804:6e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:57:5a:2e:b4:6c:5c:56:8b:65:f7:b5:c3:d4:00:2e:33:34:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 23:47:38 2022 GMT
            Not After : Dec  5 23:52:38 2023 GMT
        Subject: CN=091D125B09B860A84DBDB15ABD52C268DBE800C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:b6:79:d5:f6:38:17:20:13:4f:c3:64:35:
                    54:b3:bd:23:6a:1d:d1:16:cd:b5:1b:77:70:30:80:
                    56:22:bc:6c:d1:40:fd:6b:cb:58:35:e4:5d:4d:a7:
                    d7:b2:59:c2:d6:c0:9b:ec:be:ff:8f:db:1d:10:04:
                    f1:9d:e3:45:4f:23:06:90:a9:a7:ed:b8:53:75:e3:
                    98:1f:38:a5:fb:a5:a3:fb:80:63:38:17:19:ca:04:
                    e7:d6:29:16:08:1c:c0:e3:f9:6e:f2:53:ae:70:22:
                    0f:e2:c3:e1:a7:d9:53:b7:1d:6a:03:40:bf:2a:c6:
                    be:30:f6:7d:d8:ca:f3:66:54:a4:d7:47:cb:55:e4:
                    9c:77:8f:4f:b1:94:85:b0:56:6f:c3:5d:93:74:91:
                    52:0b:e6:4a:ac:fe:8f:e1:6c:db:eb:c8:ff:8f:53:
                    c6:cf:18:76:b8:03:27:a1:62:3d:fd:a3:60:ab:b3:
                    21:4f:fb:79:7b:c0:be:f8:3a:cc:1f:e8:ff:e0:99:
                    e9:e1:15:10:ad:1d:a5:f1:f7:49:12:0a:0b:1f:83:
                    6e:5f:7f:ee:10:54:26:5c:36:02:3c:01:10:1c:1c:
                    5f:2e:9c:77:b2:61:a2:32:ba:23:25:ba:01:f0:e0:
                    f5:95:56:ec:9f:ee:74:db:02:94:2e:de:bc:19:0c:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:1D:12:5B:09:B8:60:A8:4D:BD:B1:5A:BD:52:C2:68:DB:E8:00:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/091D125B09B860A84DBDB15ABD52C268DBE800C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.84.0/22
                IPv6:
                  2804:6e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270579

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:a6:3e:2f:96:ff:84:e2:f3:e2:f4:a7:38:f2:3a:f0:31:
         a0:1a:94:81:66:e5:59:dd:9b:96:36:ad:ce:a8:ae:e9:8a:1c:
         28:83:22:b3:55:a2:b0:7f:8a:cc:32:77:1c:7f:f5:c3:82:50:
         b6:dc:10:ce:9e:1a:41:33:7d:74:98:a5:b6:9a:48:99:18:b7:
         0f:9d:e2:02:bc:d2:2a:3e:ed:0d:8d:74:3e:7b:49:63:b7:90:
         22:ca:a2:f8:a6:7a:ce:47:39:2d:d9:3c:3d:16:f2:56:3c:fb:
         38:5d:ff:7c:99:91:8c:5b:c7:e0:30:02:68:1e:cd:2c:8b:77:
         33:b3:03:2c:c4:ba:4a:0a:3d:1f:5e:45:71:f2:58:fc:49:ef:
         b0:6a:61:a3:7d:34:d5:75:af:ae:f8:73:ea:d3:32:24:9c:74:
         5a:29:18:ac:14:83:61:aa:71:14:c8:06:f9:a8:2e:31:2c:d1:
         15:7c:c0:21:67:41:a7:18:f6:bf:d9:a0:67:01:40:08:62:cb:
         af:d1:f4:eb:a4:10:38:6c:14:22:53:02:91:8d:92:28:31:a3:
         67:90:66:c5:1b:5c:2f:97:7f:ec:31:96:97:76:8c:59:c3:03:
         ff:3f:90:73:c3:86:e1:aa:eb:44:f7:7e:a0:cf:6f:07:71:27:
         21:e2:64:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org