Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0E9A1C6CC2D14C38A7B78D55124314B4D6CA573D.cer
File:                     0E9A1C6CC2D14C38A7B78D55124314B4D6CA573D.cer (raw, json)
Hash identifier:          5DJhNGpKzdEmazjVMF4Q0WDgruF1SJ6MTI83bNGnLb8=
Subject key identifier:   0E:9A:1C:6C:C2:D1:4C:38:A7:B7:8D:55:12:43:14:B4:D6:CA:57:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28C41257B47C06EED55A17CA6B4A417AB4EC2FA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/0E9A1C6CC2D14C38A7B78D55124314B4D6CA573D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 23:46:11 +0000
Certificate not after:    Thu 09 Jan 2025 23:51:11 +0000
Subordinate resources:    AS: 264200
                          IP: 138.97.192.0/22
                          IP: 2804:2414::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c4:12:57:b4:7c:06:ee:d5:5a:17:ca:6b:4a:41:7a:b4:ec:2f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 23:46:11 2024 GMT
            Not After : Jan  9 23:51:11 2025 GMT
        Subject: CN=0E9A1C6CC2D14C38A7B78D55124314B4D6CA573D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:09:af:cc:97:e9:f8:14:b9:90:b3:e9:aa:
                    17:49:98:ec:63:da:98:95:f6:0b:08:57:e3:6d:b5:
                    a7:42:87:4d:8e:1f:04:31:eb:1d:a0:20:3c:99:a4:
                    f6:a4:a6:1e:f7:33:f3:94:bc:e9:17:47:79:92:ba:
                    de:c7:bb:04:a3:c6:dc:d0:ba:10:02:fb:4d:a6:01:
                    94:25:18:21:a8:7a:21:f3:46:6f:e3:98:b4:9d:fd:
                    e8:e2:2f:ec:8a:cf:d7:03:db:06:73:5b:02:40:53:
                    36:4a:1b:1a:5a:fe:23:6f:e9:b6:66:4d:5f:44:7c:
                    3d:93:ec:fc:0e:fa:ec:53:5c:14:f5:53:82:8a:9e:
                    4b:13:74:4d:27:a5:c1:3a:63:c8:bc:23:75:9e:af:
                    07:50:ba:fe:48:2e:c8:13:2c:59:91:ea:19:a7:8b:
                    30:f3:4f:03:9e:94:f8:75:b4:52:82:ec:24:8b:01:
                    12:cf:23:7a:a8:10:9a:a3:c2:0b:c0:87:8a:11:21:
                    f9:95:38:1f:2c:69:ac:3a:ef:c3:a9:4a:49:0c:db:
                    eb:4f:68:80:ce:28:9a:ce:4e:eb:35:58:9f:21:6c:
                    60:70:19:84:1d:c8:6b:47:9d:5b:08:04:63:51:33:
                    c8:cd:19:23:14:5a:5f:50:73:d0:50:ff:c0:2d:62:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:9A:1C:6C:C2:D1:4C:38:A7:B7:8D:55:12:43:14:B4:D6:CA:57:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/0E9A1C6CC2D14C38A7B78D55124314B4D6CA573D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.192.0/22
                IPv6:
                  2804:2414::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264200

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:7e:08:e6:ef:2e:99:d8:a8:0e:3c:fa:e7:d7:a5:f3:44:
         83:42:f6:06:6c:23:59:8c:5b:b0:46:3a:f4:92:ff:30:07:32:
         cb:7d:63:87:da:0c:fb:4b:9b:3b:cf:dd:2e:f9:14:a4:c5:41:
         15:ff:63:d2:54:8c:56:68:c5:a5:f7:a0:ea:99:e9:f0:94:95:
         fa:51:ac:e2:80:93:55:db:f4:89:40:9e:c0:25:51:38:83:99:
         e6:d2:e9:f7:68:55:58:82:ca:29:f3:24:23:1e:c9:4f:5c:fa:
         0e:73:7d:2b:09:6e:6f:ae:57:3b:ec:0d:d5:1d:17:55:b1:8b:
         7c:28:45:21:2d:21:4d:44:e9:df:bf:e0:43:2a:70:fc:6d:16:
         ac:6f:1f:9f:f7:3e:91:7e:85:12:1e:0b:18:eb:8a:2b:03:df:
         a3:86:10:37:99:0b:a1:a2:37:be:be:d1:a7:a0:b6:62:fd:c1:
         a2:d3:fe:f8:fe:76:23:46:25:6b:74:e9:ce:ec:b9:82:0c:11:
         1e:b9:37:64:5e:bf:a9:76:bd:8f:6e:e2:0c:88:e0:97:ec:f0:
         c7:f8:90:7d:ca:4e:80:6b:4c:1d:19:43:36:a6:a3:25:c4:c4:
         cd:48:9a:c0:d0:28:8a:23:a2:3d:c2:52:b1:54:b9:e1:82:d4:
         57:53:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org