Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C9AD1989105397D60AD8F57F9DC07D1B9BCB022.cer
File:                     1C9AD1989105397D60AD8F57F9DC07D1B9BCB022.cer (raw, json)
Hash identifier:          s+AbEviyM15RkLJO5U/5jiua+3LT0CAKivUx36rDFSk=
Subject key identifier:   1C:9A:D1:98:91:05:39:7D:60:AD:8F:57:F9:DC:07:D1:B9:BC:B0:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38C18CDAB44E002F7E1E8B5E92BA61FDCCA5C859
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/1C9AD1989105397D60AD8F57F9DC07D1B9BCB022.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jan 2022 10:18:57 +0000
Certificate not after:    Thu 05 Jan 2023 10:23:57 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c1:8c:da:b4:4e:00:2f:7e:1e:8b:5e:92:ba:61:fd:cc:a5:c8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  6 10:18:57 2022 GMT
            Not After : Jan  5 10:23:57 2023 GMT
        Subject: CN=1C9AD1989105397D60AD8F57F9DC07D1B9BCB022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:9a:9d:e8:4c:c2:5b:fa:8c:5f:0a:3e:c5:
                    9e:f4:ba:da:da:ab:66:f5:ab:be:78:6e:f7:e6:f4:
                    38:60:7e:7e:f4:b8:2a:d7:52:bb:8b:76:0e:b2:45:
                    2e:96:b1:19:51:1e:84:fd:e3:c5:8b:3b:20:d5:0e:
                    fe:10:a9:c2:c3:f5:23:ba:0b:c2:84:cf:28:72:58:
                    1a:ea:d9:c7:0a:6c:eb:cf:e2:cf:15:93:cb:f5:d4:
                    8f:0b:7c:77:61:ce:70:6f:e2:81:b5:4e:8b:a6:a6:
                    67:6a:00:5c:ab:41:a3:66:b2:36:c4:28:8d:3b:29:
                    b9:79:ed:69:ad:6f:87:c9:f0:18:95:c6:cc:93:d9:
                    31:eb:26:72:5e:13:a3:cb:ff:5a:5a:b8:ef:5d:61:
                    43:e5:0c:b5:b2:09:37:e0:29:1e:9d:78:b4:3e:ef:
                    ea:aa:83:d2:34:b1:b3:47:29:35:d2:ae:02:46:d8:
                    24:3d:71:95:4b:63:71:2e:e6:6f:86:dd:7b:2d:40:
                    62:2c:79:10:62:8e:24:49:fa:9e:a7:32:40:69:b1:
                    af:35:74:a4:2c:9e:b8:0b:1a:fc:66:f4:70:0f:35:
                    8b:12:f7:c4:42:e6:db:35:f0:85:38:22:07:fd:4e:
                    be:10:90:63:59:95:da:7c:4b:82:7b:c7:5b:ff:e9:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:9A:D1:98:91:05:39:7D:60:AD:8F:57:F9:DC:07:D1:B9:BC:B0:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/1C9AD1989105397D60AD8F57F9DC07D1B9BCB022.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         35:10:b7:ea:8b:e7:13:95:1b:c0:11:e4:ee:e1:5c:17:6d:7d:
         a7:e6:2e:88:43:ac:49:7a:3f:f3:ca:af:71:b7:62:68:15:37:
         6e:2c:25:4b:4b:4e:7d:2e:fe:7b:20:fd:bc:0e:ff:cf:33:12:
         12:f9:f4:4a:3a:f5:54:7f:f7:59:39:6b:bc:68:fd:8f:80:d5:
         4a:31:20:86:c7:8a:0f:4d:0a:28:56:40:db:fb:ce:a5:43:07:
         8c:60:1a:20:73:02:4a:80:4c:8c:16:4f:4d:79:0c:34:f0:33:
         19:19:63:fa:0e:e7:6d:de:79:fb:89:f9:78:e1:7e:ba:14:1a:
         e1:63:cc:76:b8:68:78:83:e6:74:15:1b:28:e8:db:85:21:57:
         e4:b3:5c:09:bc:09:d3:54:85:dc:df:97:27:b7:a5:ff:62:5b:
         ee:60:fa:c4:f3:01:f7:da:40:c2:c3:f8:65:36:75:7e:06:b7:
         03:48:7f:78:29:f4:48:fd:c6:3e:4d:7d:b5:32:38:06:be:61:
         fa:9a:cc:e7:eb:08:4d:b6:23:ca:0a:ac:11:11:1a:b7:4d:75:
         a5:4f:5b:35:56:42:b2:d4:60:7e:62:5a:80:a6:67:a8:1b:eb:
         52:8a:60:3d:8b:c1:9f:2c:5e:ab:fe:b4:e4:fe:1a:81:98:ec:
         ab:18:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org