Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/09BB591721165BA3041893102503671F8674F6AA.cer
File:                     09BB591721165BA3041893102503671F8674F6AA.cer (raw, json)
Hash identifier:          3uHJSwFw10dHiWB5sj93PUhmyi4lCStCmv5I4W7lvCE=
Subject key identifier:   09:BB:59:17:21:16:5B:A3:04:18:93:10:25:03:67:1F:86:74:F6:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30639C01A55FBEB3C1FB51972815E798E43C5F1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/09BB591721165BA3041893102503671F8674F6AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Dec 2022 13:41:59 +0000
Certificate not after:    Thu 28 Dec 2023 13:46:59 +0000
Subordinate resources:    AS: 268269
                          IP: 45.237.100.0/22
                          IP: 2804:4e90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:63:9c:01:a5:5f:be:b3:c1:fb:51:97:28:15:e7:98:e4:3c:5f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 13:41:59 2022 GMT
            Not After : Dec 28 13:46:59 2023 GMT
        Subject: CN=09BB591721165BA3041893102503671F8674F6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:c1:a7:7b:0d:d3:ed:42:d1:dd:a4:49:89:
                    29:72:a0:75:50:88:36:6c:cf:be:a2:f3:aa:7c:02:
                    ac:43:0e:64:38:18:4f:a5:d8:e6:45:42:75:10:fb:
                    b7:02:bf:6b:49:60:57:a3:d0:8c:a0:5c:b7:c1:8d:
                    fb:e0:da:7a:65:c7:c8:41:ca:d9:09:df:c3:1c:65:
                    c6:e7:29:35:77:07:b5:38:bd:e3:5c:94:d3:08:52:
                    0c:48:a9:6f:f3:cd:43:6c:19:28:2f:1a:3a:91:43:
                    f3:6c:7c:7f:23:05:2b:a2:0d:2f:42:62:bc:47:91:
                    c3:e1:d5:35:5c:3e:14:14:52:28:7e:2f:4c:b6:12:
                    be:32:62:4b:22:68:c9:71:5d:e1:98:0a:71:fe:c7:
                    cf:d8:18:62:51:e0:3b:9a:2d:37:69:19:09:7c:a4:
                    59:b6:c3:47:38:8d:d7:5d:56:9d:c6:7e:b5:c6:b5:
                    de:ca:1a:81:66:af:2f:70:1e:d4:cb:dd:f9:ad:e4:
                    db:0d:d1:3d:bb:2a:b3:e9:a9:5c:3c:86:b3:17:ab:
                    cb:de:b1:c5:38:8b:1c:ee:76:6f:b5:18:3e:3e:08:
                    cb:a0:31:fa:9c:37:1e:46:38:c2:24:c7:46:18:12:
                    3a:8b:0d:ca:1d:da:bf:40:aa:f6:15:71:ec:13:38:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:BB:59:17:21:16:5B:A3:04:18:93:10:25:03:67:1F:86:74:F6:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/09BB591721165BA3041893102503671F8674F6AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.100.0/22
                IPv6:
                  2804:4e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268269

    Signature Algorithm: sha256WithRSAEncryption
         3e:dd:99:6d:1c:2d:24:2b:84:03:85:10:fa:67:a3:83:af:36:
         ea:eb:77:52:8c:19:d8:83:c9:3f:f2:ff:f6:8e:ff:25:2e:d8:
         22:2f:ca:b9:59:05:7f:76:b6:dd:a7:15:17:9c:2d:40:78:64:
         3e:53:41:8e:1a:8a:16:fe:82:65:62:5d:1b:cf:d3:fb:65:5b:
         0c:d3:87:76:c8:88:3a:b0:00:3e:80:c9:16:d8:f7:b9:df:7a:
         df:cc:a8:88:f1:5b:9d:98:ec:42:4e:a8:93:d3:31:2b:cf:8d:
         bb:d0:04:b7:f1:3e:6c:f1:f1:bd:7c:ec:a6:3d:01:22:59:cb:
         67:2d:dc:90:f7:a3:53:e2:70:ea:4e:97:4e:06:a2:f2:99:eb:
         07:df:1c:4a:25:6b:49:c1:b2:ab:32:f2:fc:64:6b:9c:a1:33:
         ca:ed:d3:f5:d7:39:85:dc:75:8a:c4:71:43:45:e1:33:65:07:
         9a:c7:2c:20:7d:14:c0:11:aa:96:a7:ad:e9:ad:2e:44:dc:35:
         b8:11:d2:b1:69:cb:69:67:83:68:ad:2f:ca:a9:67:73:fd:b7:
         8c:32:52:1a:18:a9:12:37:dc:f2:01:da:b3:ac:a7:7b:ee:38:
         28:09:33:1b:31:40:40:4a:1a:b9:00:9c:12:3b:5f:b2:b9:38:
         06:4d:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org