Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.cer
File:                     09347E4F9CBA8C744856F25E49BFAB804E739CCE.cer (raw, json)
Hash identifier:          FL/Z6+alQjkeJI3mOHcsiX0uVRK9Oopj2pU9EuhmJKw=
Subject key identifier:   09:34:7E:4F:9C:BA:8C:74:48:56:F2:5E:49:BF:AB:80:4E:73:9C:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F27E1F3BF83FDD0A427F113086B36D1F90C25C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Sep 2023 03:18:38 +0000
Certificate not after:    Sat 21 Sep 2024 03:23:38 +0000
Subordinate resources:    AS: 270293
                          IP: 201.71.196.0/22
                          IP: 2804:69d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:27:e1:f3:bf:83:fd:d0:a4:27:f1:13:08:6b:36:d1:f9:0c:25:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 23 03:18:38 2023 GMT
            Not After : Sep 21 03:23:38 2024 GMT
        Subject: CN=09347E4F9CBA8C744856F25E49BFAB804E739CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:09:1f:2d:3c:0e:84:be:c6:ac:32:36:06:df:
                    4f:4f:3b:96:33:25:c9:e1:d0:12:35:29:d6:ca:81:
                    60:4f:bf:71:78:1c:29:9e:9f:31:a9:4d:b5:a8:82:
                    75:e6:06:3d:d6:e5:d9:ae:92:c9:6f:5e:d6:2b:51:
                    f3:a9:1b:12:c0:2d:b5:78:2b:eb:ef:a0:7e:ab:6d:
                    43:9a:37:ed:22:c9:e2:13:52:7a:59:33:74:bb:5a:
                    07:71:95:c6:c9:80:26:24:6f:0d:0d:33:2d:00:f5:
                    bd:3a:20:18:df:48:2b:8c:33:40:46:46:24:e5:72:
                    4e:83:a1:0d:d9:fd:cb:aa:0a:29:9e:f4:be:5d:d8:
                    9d:91:af:3d:0e:c3:7a:fe:87:96:55:15:1f:e7:c7:
                    b2:97:c8:8e:06:4c:2d:6d:7a:08:29:8f:a9:55:fd:
                    88:e4:68:25:e3:23:b2:41:c5:bf:61:3b:ea:91:e8:
                    7f:26:65:ba:40:55:c8:d2:3d:a6:46:6f:85:72:38:
                    70:8b:3f:73:3e:32:94:70:20:f0:6b:1c:73:2a:b2:
                    6a:06:83:64:b5:21:75:fe:89:95:06:a2:56:f9:4c:
                    72:b5:6f:86:af:43:e4:55:8b:6d:45:b8:dc:01:7b:
                    07:84:dd:7c:96:fe:0c:da:05:31:5d:77:65:47:59:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:34:7E:4F:9C:BA:8C:74:48:56:F2:5E:49:BF:AB:80:4E:73:9C:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.196.0/22
                IPv6:
                  2804:69d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270293

    Signature Algorithm: sha256WithRSAEncryption
         86:fa:c8:62:8c:47:d7:f1:60:86:2a:3c:4c:7d:f6:cb:22:e9:
         29:0a:88:f5:d7:22:e9:19:38:33:41:f2:2d:b6:55:e7:84:b5:
         15:24:41:9a:c0:0a:0b:28:64:f8:ec:fd:86:98:7f:e1:ac:d8:
         59:c0:7f:2c:06:58:2c:eb:42:f7:6f:53:b6:ec:d2:2c:8e:94:
         43:10:bd:33:8d:4c:2e:21:8a:b1:cd:96:3d:af:88:13:07:64:
         d8:65:f4:d6:e1:7c:f9:6f:80:4e:ac:40:89:c6:76:c3:db:bc:
         9f:d0:fb:5d:46:5b:32:9f:67:3c:63:fe:59:fe:74:3a:6a:71:
         a9:ae:69:2d:bf:fc:5b:c1:88:72:45:b6:0a:47:b1:b7:4e:92:
         34:f4:74:a9:e3:86:8d:b3:e6:93:7c:47:46:fa:d3:3e:f2:09:
         15:5e:58:32:8d:99:a5:bb:ea:d3:3d:8c:bf:cb:99:a2:d1:1e:
         06:82:f4:a8:9f:77:f3:dc:59:01:7a:21:06:a7:24:2d:c9:8c:
         6a:5e:4c:f3:a6:ba:0a:66:c0:b3:b1:5a:46:4d:c5:33:b3:e6:
         44:b0:24:5c:14:89:3d:02:22:40:68:50:25:99:51:22:b6:f4:
         94:2c:06:72:7a:b3:f8:0a:30:d4:7b:cc:72:ce:5e:f9:b1:3d:
         78:8a:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org