Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.cer
File:                     098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.cer (raw, json)
Hash identifier:          VpgN+ftf0M8+X5edLZsiAg+eRSjRsf9iiYOrukQmylY=
Subject key identifier:   09:8C:CB:C6:E2:B1:AF:60:6C:70:E5:B3:4D:7A:0A:06:EC:1C:13:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F992F8D415D6CA6EADC34365C72FBA0F5C44DF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Jan 2024 14:37:30 +0000
Certificate not after:    Sun 26 Jan 2025 14:42:30 +0000
Subordinate resources:    AS: 262427
                          IP: 138.99.48.0/22
                          IP: 143.202.28.0/22
                          IP: 168.228.172.0/22
                          IP: 177.39.144.0 -- 177.39.155.255
                          IP: 177.71.24.0/21
                          IP: 2804:448::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:99:2f:8d:41:5d:6c:a6:ea:dc:34:36:5c:72:fb:a0:f5:c4:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 28 14:37:30 2024 GMT
            Not After : Jan 26 14:42:30 2025 GMT
        Subject: CN=098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:e3:2b:29:b6:41:50:6b:e4:90:9e:06:e9:
                    21:48:c3:3d:4e:66:bd:bb:36:ea:6b:c1:60:26:0d:
                    c7:43:b6:1d:b2:37:e7:7e:fe:1e:c4:19:6d:08:f4:
                    16:5d:eb:35:07:d8:65:16:ca:97:77:90:fa:c3:98:
                    f9:89:2a:31:ef:79:27:de:25:9d:81:e2:b4:33:c5:
                    76:ae:8d:e8:c1:77:be:7b:b8:af:c4:c1:9d:7d:bf:
                    c9:c0:69:1f:47:28:24:a3:dc:07:61:81:c4:3d:03:
                    6a:88:e7:0a:81:a2:22:c7:83:72:24:3d:d1:4e:51:
                    81:7e:c1:ad:2d:d1:13:7a:2e:d1:b8:6d:23:36:85:
                    7f:0a:5f:c9:1d:53:73:33:4a:35:01:47:72:06:67:
                    83:ed:56:f2:94:e0:b0:3f:41:a4:e4:f8:ad:14:d8:
                    5a:e8:44:79:bb:22:06:c7:20:5f:00:5d:50:1c:74:
                    1a:5f:fd:b7:2e:f4:5b:94:01:13:f3:d6:47:43:fa:
                    9e:a7:d9:5a:8f:4f:e1:83:3a:cf:e3:2e:49:92:e6:
                    97:ea:20:80:20:19:11:c4:88:b5:b8:8d:5e:28:49:
                    8f:59:a2:6a:f3:d2:29:d9:df:5b:f0:93:6d:48:a9:
                    9b:56:42:14:f7:c8:3b:cc:8e:79:80:d7:2d:38:4a:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:8C:CB:C6:E2:B1:AF:60:6C:70:E5:B3:4D:7A:0A:06:EC:1C:13:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/098CCBC6E2B1AF606C70E5B34D7A0A06EC1C1312.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.48.0/22
                  143.202.28.0/22
                  168.228.172.0/22
                  177.39.144.0-177.39.155.255
                  177.71.24.0/21
                IPv6:
                  2804:448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262427

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:4d:9e:07:e8:11:19:e9:11:d5:57:b1:81:ba:da:f2:fb:
         e7:22:56:05:7f:9c:2f:5c:c7:e6:82:35:2e:ae:f6:06:ff:29:
         16:e8:3e:27:b3:5a:a0:4a:ca:eb:67:89:0c:09:6e:57:66:d3:
         34:ed:69:82:36:ac:f5:81:f4:57:8e:89:c2:25:fb:34:41:32:
         84:f6:09:ed:1e:b9:f3:2e:73:16:8f:ab:1b:1f:de:d7:d7:70:
         83:69:ca:0f:d2:24:d5:bc:80:36:bf:11:94:4f:82:c4:45:7c:
         61:42:49:51:ea:c5:7b:84:7b:78:1b:0f:ad:5b:52:f6:1d:8b:
         56:0a:a1:83:75:6d:f9:0e:a7:87:82:7a:51:85:ec:04:7c:dc:
         d7:78:e2:70:6b:ec:a6:17:83:f0:21:50:06:61:bb:b5:f5:2e:
         7e:d8:b1:db:eb:b8:d6:4f:e8:09:74:57:2d:fd:df:66:11:90:
         21:49:0a:58:ba:0b:7a:ce:e3:38:3c:a0:03:24:89:d4:17:1d:
         f7:28:b7:e6:12:58:57:12:d0:d6:15:dd:58:e2:93:fc:cb:1e:
         89:9a:69:32:d5:61:5f:a5:4f:c0:16:ac:7b:13:9c:ae:c6:b2:
         b4:24:c3:da:53:41:80:f8:45:d4:89:8e:58:a5:a1:ae:24:d3:
         d3:20:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org