Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer
File:                     09C790C05FE7F95909ADE0C76BBA3670C6717819.cer (raw, json)
Hash identifier:          dJ2mtDW3W7a34ot4vwQkRelOso33uoeWZv/N3fNNQiQ=
Subject key identifier:   09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       512C969C707B1BC2C55D3C0D91F19FBE1C34A397
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.mft
caRepository:             rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 17:55:08 +0000
Certificate not after:    Fri 28 Feb 2025 18:00:08 +0000
Subordinate resources:    AS: 268074
                          IP: 45.167.132.0/22
                          IP: 2804:5798::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2c:96:9c:70:7b:1b:c2:c5:5d:3c:0d:91:f1:9f:be:1c:34:a3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 17:55:08 2024 GMT
            Not After : Feb 28 18:00:08 2025 GMT
        Subject: CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:2a:ad:2a:15:0e:61:31:3e:1f:23:63:d7:
                    d0:3e:5b:b3:52:07:31:94:08:4a:c3:45:c4:c8:70:
                    11:56:25:73:01:51:8b:f6:4a:1c:eb:d2:25:2c:a8:
                    2f:16:ee:9a:8e:48:2b:ba:09:e5:a0:6f:91:90:3f:
                    39:84:c1:2d:28:ec:b7:e6:ed:e2:c6:cc:32:6c:6a:
                    7c:f0:1a:71:8e:08:33:7c:f1:ea:96:48:f3:da:6b:
                    c9:b0:7f:7b:7f:e3:b3:c8:b7:0f:60:42:d9:73:2f:
                    e8:54:82:53:17:f9:18:ec:3a:af:f9:e9:0e:27:9e:
                    45:b3:6b:ed:46:18:3e:fb:c9:bb:af:8d:a2:a1:d2:
                    59:19:03:1d:74:28:52:29:b7:28:7e:35:ca:14:d1:
                    4f:8d:ce:3c:ef:8a:95:03:90:1e:7d:d2:1a:9f:3f:
                    88:26:12:84:94:2f:57:4c:60:10:05:86:9b:83:88:
                    48:60:3a:b4:b0:08:68:4b:7d:29:5d:9a:ca:3c:b3:
                    ce:30:80:35:23:65:2c:44:5f:af:fe:7f:4e:35:ad:
                    c8:b5:99:43:00:8a:61:69:16:f0:d8:db:f5:6a:2a:
                    2f:4c:2f:e6:d7:15:b5:dd:d0:dd:96:d0:37:a1:89:
                    69:09:f3:6e:39:e7:55:ef:86:e7:27:1f:ae:d4:91:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.132.0/22
                IPv6:
                  2804:5798::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268074

    Signature Algorithm: sha256WithRSAEncryption
         00:43:a2:82:46:2a:bc:f2:4a:1d:b0:f6:9d:00:41:89:e0:45:
         4e:bc:47:2b:a9:76:9a:90:7c:9a:75:50:42:92:78:9a:b5:3f:
         1a:78:65:52:81:bc:5b:86:ae:ce:c2:e9:8f:9d:52:cd:2b:3e:
         de:a8:ee:aa:7d:51:f5:7c:81:29:3a:3e:92:98:41:83:17:70:
         8c:e8:2a:eb:84:5c:6a:09:d0:25:c2:a2:28:88:d7:db:b5:60:
         71:40:19:0b:05:c2:3c:d0:34:d5:45:39:74:85:ad:07:ca:3f:
         42:3b:7b:88:8c:4d:11:a1:ad:78:28:88:22:5a:7f:b8:b5:82:
         a0:e7:f0:8e:ed:3d:ff:38:c8:74:61:dd:af:70:c1:1e:69:48:
         63:c8:ff:bd:e9:09:03:4a:cb:72:cf:15:57:06:c9:88:dc:f1:
         94:24:2a:28:c9:02:80:14:3c:4e:6a:36:ea:c6:9f:8d:1c:88:
         b1:6a:9b:9f:c2:54:b2:ad:e4:df:ac:d0:80:ea:03:2f:2e:0a:
         d7:04:36:95:c1:a9:78:de:85:e5:e6:65:4d:22:f1:ef:14:16:
         a5:ba:06:7e:25:70:ea:12:2f:67:f1:e0:6d:8a:99:79:21:65:
         6c:f6:43:05:d9:77:72:87:26:ab:a7:d4:23:77:cd:4d:f4:ed:
         f5:1b:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org