Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0964731379C1B14D7D868A5D0D394335B0C618C0.cer
File:                     0964731379C1B14D7D868A5D0D394335B0C618C0.cer (raw, json)
Hash identifier:          3nayME42eHhkeitVnAGjO9hWi4iWRGNzPhJyt5rHdNs=
Subject key identifier:   09:64:73:13:79:C1:B1:4D:7D:86:8A:5D:0D:39:43:35:B0:C6:18:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15D27A34CA5159B6E5449DA7AD5D7E29F90CA423
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/0964731379C1B14D7D868A5D0D394335B0C618C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Nov 2023 09:55:28 +0000
Certificate not after:    Sat 02 Nov 2024 10:00:28 +0000
Subordinate resources:    AS: 262401
                          IP: 177.36.128.0/19
                          IP: 2804:3d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d2:7a:34:ca:51:59:b6:e5:44:9d:a7:ad:5d:7e:29:f9:0c:a4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  4 09:55:28 2023 GMT
            Not After : Nov  2 10:00:28 2024 GMT
        Subject: CN=0964731379C1B14D7D868A5D0D394335B0C618C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:79:82:c2:44:91:03:27:cf:3c:fe:58:a2:
                    a3:52:80:fd:ab:d0:f8:35:3e:25:d8:fb:dc:44:fc:
                    52:db:13:07:e3:f1:1d:c1:36:8a:db:28:b9:90:b7:
                    87:ef:ad:a9:bc:99:b9:3e:74:1d:76:5d:73:19:af:
                    a2:85:ab:2e:69:ac:de:9c:37:ae:c8:d1:85:3d:a8:
                    83:06:8a:ea:7e:ef:29:32:dc:95:b7:fa:84:4f:40:
                    45:3c:04:08:85:0d:b1:89:6f:eb:68:2a:cb:8f:02:
                    d0:ba:bb:7c:98:7a:55:67:9f:6f:79:02:c3:06:50:
                    67:d7:fa:19:87:31:e7:72:ec:42:10:22:1d:89:f5:
                    23:54:df:fa:dd:cc:a7:8b:54:ea:a3:ed:d9:d5:b1:
                    31:12:eb:83:25:92:66:7b:9a:ca:3e:8c:c8:b0:f1:
                    06:b9:c4:55:c2:cf:f9:03:f7:f4:59:2b:eb:93:26:
                    81:70:d6:1f:56:e6:b5:08:5b:e6:81:05:9c:70:e5:
                    8a:6f:2a:78:3e:d1:73:53:59:c3:f4:12:7f:c4:4b:
                    44:f7:b2:cb:55:9a:4e:06:e8:f0:55:3f:77:59:be:
                    a7:66:d0:90:33:ec:60:b8:46:4b:35:37:90:f5:77:
                    b9:52:a3:cb:64:b5:99:8c:a7:df:30:11:7e:e7:83:
                    0f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:64:73:13:79:C1:B1:4D:7D:86:8A:5D:0D:39:43:35:B0:C6:18:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/0964731379C1B14D7D868A5D0D394335B0C618C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/19
                IPv6:
                  2804:3d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262401

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:50:fc:1b:01:b9:5b:07:2a:0f:3f:97:c2:6c:2e:18:5c:
         68:01:47:f1:56:75:ea:25:55:8e:42:5b:5f:bd:61:ff:a7:74:
         cf:96:32:82:90:be:c3:8a:81:01:04:c2:a5:b9:09:66:30:ef:
         82:7e:7b:a9:03:bf:6e:8e:c2:de:78:11:c5:1a:9f:0a:a8:1e:
         50:b6:54:69:fb:38:22:d5:3e:9f:a9:12:8c:c6:38:0d:1a:e4:
         57:01:db:7f:fb:8f:0c:8a:a5:98:9b:28:93:9f:bf:7a:ff:6a:
         18:f8:46:d4:4a:fc:16:d7:d7:cc:bb:e4:00:14:25:dc:3b:1d:
         d3:83:88:77:45:bb:4b:68:84:35:fa:10:cb:d9:92:32:10:6e:
         2b:da:8d:9d:c9:24:a5:e6:2a:47:9a:87:e4:b0:15:a9:1a:40:
         97:18:89:64:02:85:42:30:be:6e:24:8d:3f:5e:e5:10:24:9e:
         7a:13:5a:4c:4a:b0:4d:0b:63:18:15:1c:c6:3a:98:5d:ec:14:
         f1:72:d0:84:9d:b0:0d:4a:a9:09:5f:cf:d4:b8:8b:0e:df:64:
         43:76:0b:5c:a2:e6:99:8e:6d:42:76:b4:e7:57:11:7c:10:1d:
         5c:92:07:27:05:c6:3f:d5:00:20:28:d2:63:19:37:b5:5b:85:
         f4:2e:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org