Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
File:                     0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer (raw, json)
Hash identifier:          sYvqhqTWH9DKILQy0eceuYPYwalgSV7lSAj1/muHo/Q=
Subject key identifier:   0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       456983833532862FCFA7A1E8EE6707B10BAD8CF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Feb 2022 18:35:54 +0000
Certificate not after:    Thu 23 Feb 2023 18:40:54 +0000
Subordinate resources:    AS: 271130
                          IP: 179.42.70.0/23
                          IP: 2804:76b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:69:83:83:35:32:86:2f:cf:a7:a1:e8:ee:67:07:b1:0b:ad:8c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 18:35:54 2022 GMT
            Not After : Feb 23 18:40:54 2023 GMT
        Subject: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:cc:fc:5f:9c:bb:8c:9b:48:d0:0e:5d:d2:
                    b5:fb:c7:fa:86:5b:79:be:63:34:d6:72:43:39:b5:
                    d6:aa:e7:ff:1c:cb:33:83:f4:c8:0c:97:d1:88:26:
                    e1:ab:54:54:7b:7a:04:cf:88:ff:94:6a:4d:61:da:
                    c5:20:d6:b7:39:bd:fb:d0:49:68:ff:6a:f8:2a:0d:
                    b1:44:95:30:0d:3b:03:b2:08:d5:46:64:06:cc:89:
                    5f:a9:50:7b:0e:16:1b:1e:68:fc:aa:c9:cb:90:07:
                    95:43:c9:eb:19:07:58:17:4d:51:67:07:63:62:c1:
                    62:d3:e4:85:1e:7e:97:5c:fd:91:02:7f:41:2e:de:
                    de:ee:28:63:bd:9b:88:15:3c:a9:95:57:f5:54:9d:
                    8b:5f:1b:67:b4:f5:81:64:57:0d:6b:3a:cc:fb:8a:
                    23:72:78:6e:cd:e4:e4:16:61:f1:1f:bc:3a:8f:3f:
                    36:90:33:ab:80:05:f3:7d:43:8b:53:af:ed:16:69:
                    88:cc:c9:89:a6:d5:c1:b2:b9:50:6e:67:be:2a:6b:
                    8e:f5:3b:4e:30:a9:7c:39:ce:3b:da:8c:a2:7b:5c:
                    37:f2:db:38:1c:77:53:46:42:70:0c:6f:1e:13:77:
                    74:c8:8e:ff:22:69:81:8f:5b:46:2e:1f:63:d7:32:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.70.0/23
                IPv6:
                  2804:76b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271130

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:72:6e:7d:87:c8:59:55:ed:31:21:f3:c9:71:a7:e1:bc:
         4c:25:ce:48:d7:ea:c1:6d:8b:dc:d3:e0:50:51:8f:58:9d:1c:
         c0:fa:84:24:df:58:a3:a0:92:99:c7:8a:ad:8e:84:80:92:1e:
         26:66:55:91:c3:e9:91:0c:04:98:d7:b0:89:4b:a0:51:a2:e2:
         fc:63:45:c2:93:47:38:d1:c1:b9:fc:d2:24:76:f5:b5:c4:d8:
         0d:b0:47:37:81:5e:c0:5f:36:77:53:ab:c4:e7:ec:06:d5:94:
         8e:be:06:ad:de:39:58:e4:dc:59:cc:65:01:8d:ff:9a:26:08:
         a8:bf:20:75:8a:8d:ac:e1:ee:f5:2d:68:57:02:af:b9:94:bc:
         b0:db:14:0c:65:b8:e7:35:0b:7b:cb:a7:61:bc:22:43:5a:71:
         b4:55:50:a4:b0:9c:85:8c:b4:88:71:28:3f:7f:67:d1:c2:90:
         35:2e:2b:70:da:d9:64:0e:54:e0:80:4a:2c:ff:aa:51:30:c8:
         0a:bb:76:4a:b6:81:33:00:de:4e:b4:af:e1:14:28:fd:a4:74:
         a7:cf:43:03:df:a4:ae:83:0e:bf:2b:60:db:83:3f:14:8b:65:
         cc:c1:87:33:fa:77:82:51:f7:f5:75:48:0b:a8:4f:0c:a8:00:
         93:37:bf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org