Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer
File:                     096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.cer (raw, json)
Hash identifier:          lDbC8xB2Qm6yuNneagBqa5G+Jmh0ySdjfSXWE2lhKkI=
Subject key identifier:   09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38873ADC7D5343C79922D958C5231467E991B35D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 12 Nov 2023 15:31:03 +0000
Certificate not after:    Sun 10 Nov 2024 15:36:03 +0000
Subordinate resources:    AS: 265496
                          IP: 170.78.60.0/22
                          IP: 2804:3508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:87:3a:dc:7d:53:43:c7:99:22:d9:58:c5:23:14:67:e9:91:b3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 12 15:31:03 2023 GMT
            Not After : Nov 10 15:36:03 2024 GMT
        Subject: CN=096AB770FD2CDF22E8B9A25408FA6F765E01CFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e5:52:8a:a5:ef:56:71:d5:45:a8:8d:d1:0f:
                    fc:38:8f:fa:c3:f7:0b:3a:1a:11:9a:f9:3e:72:d2:
                    a0:e8:67:ba:e2:c3:62:7c:f9:ed:dc:f1:52:64:d9:
                    5b:91:58:29:68:95:68:9f:7e:6c:8e:c1:91:a8:e5:
                    64:93:b1:b4:e3:02:d8:fd:3d:4e:27:10:1e:c3:32:
                    2f:6a:d3:3e:60:43:f9:7e:bb:36:4b:5a:62:10:69:
                    ef:0d:07:5c:5c:d0:1a:e2:87:de:7b:06:f2:d6:20:
                    77:37:05:5b:67:26:fc:0a:45:c3:c3:d9:c0:79:51:
                    fe:53:55:dd:f4:21:ae:24:91:8c:84:a8:a1:53:20:
                    87:df:7a:4b:53:4b:82:a7:74:63:04:6a:97:5f:46:
                    be:7c:9e:cb:23:d9:0e:cb:5c:a8:d4:5e:47:3f:b7:
                    8a:9b:2a:fe:bf:6f:f7:97:0a:cd:4f:e3:80:3e:fd:
                    c4:f6:6a:7c:19:cf:ed:b0:29:c3:a1:2e:fd:e3:24:
                    e8:e0:e9:0b:ac:f6:8e:87:c4:1d:22:79:ff:ab:9a:
                    54:49:3e:20:47:79:06:19:87:9d:d1:7f:da:1f:28:
                    ba:d1:e6:3f:66:5b:f4:13:aa:0e:38:7e:7c:e7:ee:
                    a8:bd:8b:d1:7d:c4:ca:4e:7c:87:42:fa:6a:30:c4:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:6A:B7:70:FD:2C:DF:22:E8:B9:A2:54:08:FA:6F:76:5E:01:CF:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/096AB770FD2CDF22E8B9A25408FA6F765E01CFAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.60.0/22
                IPv6:
                  2804:3508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265496

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:c4:81:4f:0d:d7:e8:81:01:a2:ba:b8:8b:05:bd:ae:04:
         7c:99:42:cc:b9:65:73:8f:1b:53:5d:a6:e2:f8:08:ae:7c:3d:
         5f:88:51:fc:35:e5:ba:95:4a:48:08:ed:f9:b6:e7:3b:92:5d:
         c7:ad:69:59:53:14:3c:60:b2:19:8b:d8:f6:c1:f6:a6:49:2c:
         05:17:48:2a:88:f6:4f:f7:dd:7b:3a:6f:15:be:c4:f2:7e:f1:
         1c:ec:88:02:6f:a1:7d:92:1c:13:f3:8f:b2:94:c6:f2:fa:e7:
         8d:dc:bf:95:d7:75:73:84:aa:30:1f:7a:52:2d:cc:b7:f8:51:
         fe:2a:e3:e6:a5:48:c6:85:36:10:0f:77:69:69:5f:a1:de:3d:
         e1:38:99:ae:40:d1:5f:16:c4:06:71:06:e8:9a:a7:bd:62:e0:
         2e:3e:97:90:ca:b4:60:64:bb:bb:4f:a9:c9:be:48:0d:e5:12:
         5d:6a:7f:24:b6:90:a0:8d:79:34:41:82:a0:98:37:73:4d:4f:
         3b:c3:d7:36:3e:6a:60:00:52:81:3e:11:27:e4:83:e3:01:d5:
         62:35:2e:fb:56:32:d1:44:34:76:09:c7:11:ab:f8:11:6a:0f:
         20:cb:29:8b:c2:e1:9c:64:24:b3:a5:9d:88:e1:0e:4b:9c:48:
         9b:ac:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org