Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/09CCAF684DA4FF2945462E714E5B0D31675AD5D9.cer
File:                     09CCAF684DA4FF2945462E714E5B0D31675AD5D9.cer (raw, json)
Hash identifier:          oK1q+mIbJSB/LWkt9/JfT3FtY1jt2khakqPn30+axoo=
Subject key identifier:   09:CC:AF:68:4D:A4:FF:29:45:46:2E:71:4E:5B:0D:31:67:5A:D5:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D95E13E6759969AC7F2547A0EF723C41125C0E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EfL6AZAfHKt3byNJbuMjJokbnTNd3wEW7WuTvKCRG6L7/0/09CCAF684DA4FF2945462E714E5B0D31675AD5D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EfL6AZAfHKt3byNJbuMjJokbnTNd3wEW7WuTvKCRG6L7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jun 2022 13:58:35 +0000
Certificate not after:    Tue 13 Jun 2023 14:03:35 +0000
Subordinate resources:    AS: 272429
                          IP: 2804:8110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:95:e1:3e:67:59:96:9a:c7:f2:54:7a:0e:f7:23:c4:11:25:c0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 13:58:35 2022 GMT
            Not After : Jun 13 14:03:35 2023 GMT
        Subject: CN=09CCAF684DA4FF2945462E714E5B0D31675AD5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:71:29:50:e0:15:17:7e:e5:bb:fd:c8:d1:
                    fe:bf:b5:49:8b:c4:44:b8:36:b9:58:52:29:d3:50:
                    df:2b:2f:73:6c:a6:42:b4:78:d6:ac:24:f7:f8:3c:
                    30:42:71:49:34:24:b2:1b:6d:49:b7:84:76:5a:60:
                    ff:7b:86:7e:d0:1c:9e:4d:f0:b2:ed:7f:42:73:69:
                    5f:ed:a8:d9:9e:ea:0d:49:c9:0b:19:d8:e9:96:0f:
                    82:2d:02:4f:98:6f:c9:db:e5:ed:1d:d0:f9:04:3a:
                    28:23:f6:e0:08:47:d5:61:b9:c8:5a:76:d0:26:de:
                    b8:2e:b3:c1:56:3b:14:51:a4:94:6d:af:f8:88:b7:
                    07:6b:c0:7f:ba:fb:c4:57:65:21:69:29:9d:4a:fc:
                    aa:c3:ad:90:4f:21:03:4c:b4:bd:20:51:7d:49:0f:
                    2f:63:47:ab:a1:22:a9:e8:7b:56:99:48:ec:43:2e:
                    93:45:65:93:3c:eb:31:53:ee:84:6c:f8:d7:67:c9:
                    7e:f3:cd:49:d1:54:43:db:25:7a:9a:18:81:9b:c7:
                    be:ed:49:c7:52:ed:b6:b0:3d:d5:3e:cd:89:16:1d:
                    6a:82:f6:82:06:39:d3:1a:b0:ce:aa:5a:c6:b7:7b:
                    1e:41:d6:a2:d7:1c:f2:5c:2c:4e:f5:4d:7e:ea:f2:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:CC:AF:68:4D:A4:FF:29:45:46:2E:71:4E:5B:0D:31:67:5A:D5:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EfL6AZAfHKt3byNJbuMjJokbnTNd3wEW7WuTvKCRG6L7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EfL6AZAfHKt3byNJbuMjJokbnTNd3wEW7WuTvKCRG6L7/0/09CCAF684DA4FF2945462E714E5B0D31675AD5D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272429

    Signature Algorithm: sha256WithRSAEncryption
         10:47:43:2d:ed:3b:7b:f6:26:91:e6:07:c6:77:b4:62:d6:fb:
         7c:6c:77:6b:b2:ab:ac:82:6f:e4:45:7e:ff:f7:94:7d:19:d9:
         57:ab:f2:30:9b:cb:5e:0b:36:28:7c:3b:09:af:e2:03:d6:b4:
         16:06:b7:18:dc:2f:a8:5d:ca:8e:b6:75:d9:69:31:b2:1a:1f:
         06:e6:26:45:d4:19:2b:1c:27:89:57:12:78:62:26:54:7a:0f:
         4a:e3:67:b2:3f:8d:b8:63:e2:9e:b5:60:db:06:70:24:cd:36:
         c4:1c:14:01:0e:fc:dc:59:b8:03:b9:d1:b2:17:d0:21:68:93:
         71:6c:fd:ef:68:d2:52:2c:bb:82:9b:cc:8a:bb:7f:08:1a:76:
         6d:9a:9b:68:52:98:5a:58:71:90:85:2e:f1:6e:fb:f4:a9:84:
         ec:01:63:f6:d8:ae:87:54:e3:47:36:fb:ca:61:b2:13:00:37:
         99:51:57:88:74:ec:32:f6:4c:20:db:f1:29:6f:d0:05:57:1a:
         fe:02:5c:57:fa:9f:3a:ec:f8:60:6c:8c:f9:26:6b:1b:4e:ef:
         57:cc:33:65:47:26:0e:14:2f:e8:72:8f:9a:b4:06:1f:4d:41:
         0a:4d:63:ba:de:bd:d6:11:8b:6c:04:e1:b4:dc:35:6c:d9:17:
         31:f3:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org