Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C9D9B9F903D2F3032F04380C3A2C28EC38B2700.cer
File:                     1C9D9B9F903D2F3032F04380C3A2C28EC38B2700.cer (raw, json)
Hash identifier:          RZnYnqbq8Fhar3uQKvYhR44mFtDJnD0TW+dtlR/o2Xs=
Subject key identifier:   1C:9D:9B:9F:90:3D:2F:30:32:F0:43:80:C3:A2:C2:8E:C3:8B:27:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A163E85E34A440795728B3ED8D8563472034D7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/1C9D9B9F903D2F3032F04380C3A2C28EC38B2700.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 18:12:39 +0000
Certificate not after:    Thu 08 Aug 2024 18:17:39 +0000
Subordinate resources:    AS: 269698
                          IP: 45.191.8.0/22
                          IP: 2804:6884::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:16:3e:85:e3:4a:44:07:95:72:8b:3e:d8:d8:56:34:72:03:4d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 18:12:39 2023 GMT
            Not After : Aug  8 18:17:39 2024 GMT
        Subject: CN=1C9D9B9F903D2F3032F04380C3A2C28EC38B2700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:de:5a:02:67:f4:01:b3:be:50:51:0a:fa:
                    9a:07:6c:af:7c:26:66:db:bd:a7:cd:5c:4f:e9:83:
                    03:16:80:e5:e3:bf:d4:83:8d:2c:63:c0:c2:35:e3:
                    f6:dc:2a:12:3b:85:dc:89:42:9d:05:e7:da:fd:fb:
                    7e:d4:bb:b6:89:0f:67:d9:04:5b:8a:dd:ae:89:e4:
                    77:ca:9b:03:3b:7f:c3:0a:d6:38:72:e7:7d:f9:fb:
                    18:0c:e4:2e:ee:5e:6a:f1:cf:30:62:c4:e7:3a:ac:
                    f9:ea:77:51:24:fc:53:62:8a:56:be:53:a3:0d:6c:
                    1b:96:36:f4:18:64:d9:5d:18:7d:2b:39:56:49:27:
                    5f:97:d6:28:7f:cd:42:fd:4e:81:23:61:ee:15:e3:
                    48:a2:3a:35:1e:6b:94:fe:6b:ca:85:ee:04:a7:d9:
                    d3:ea:38:ed:a4:54:23:39:ac:6d:3c:08:67:b1:57:
                    ab:fc:d1:dd:65:45:94:53:73:85:31:9b:51:36:a3:
                    be:a0:cd:ed:3b:2c:ea:b0:da:b5:a1:5d:dc:99:d6:
                    17:9a:b0:61:28:11:c8:d8:7d:4d:0b:fe:34:6d:5e:
                    e5:a4:76:68:e2:a6:97:c2:db:ce:11:c8:99:17:0c:
                    3a:f5:31:f5:9d:fd:52:4c:61:10:0f:ec:56:13:21:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:9D:9B:9F:90:3D:2F:30:32:F0:43:80:C3:A2:C2:8E:C3:8B:27:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/1C9D9B9F903D2F3032F04380C3A2C28EC38B2700.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.8.0/22
                IPv6:
                  2804:6884::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269698

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:fa:60:b3:9f:98:3d:ec:fc:fc:2c:94:4b:46:13:0e:1c:
         e9:9c:81:43:5c:e2:a5:80:bb:9c:24:41:63:75:39:43:3b:c4:
         6d:20:65:dc:2d:b7:8b:2d:20:89:f9:3e:1f:58:3f:7b:00:ee:
         71:20:05:88:9c:a1:00:ed:f5:6b:4c:7c:21:e3:7d:39:6b:35:
         7d:9e:9f:ad:38:68:b6:71:79:1b:f9:c5:b6:09:4e:d2:83:1b:
         89:c5:e8:aa:20:b0:d4:18:24:0b:b9:45:2c:b0:27:35:4f:88:
         53:66:a1:78:56:78:e6:85:37:54:2a:9b:ef:24:7d:61:fb:a8:
         45:a6:d0:dd:42:4c:5c:9a:3f:23:35:62:01:b2:56:b6:ed:3f:
         92:28:f8:ce:51:e0:20:2f:10:b1:9d:ee:4f:96:bc:f3:04:97:
         ec:eb:7a:04:26:f4:2d:a4:ef:04:04:99:0e:ee:1f:ad:bb:0a:
         0d:79:af:10:cf:2d:4d:92:9b:d3:c6:db:7a:d7:35:d2:57:f5:
         47:50:ba:f4:4e:02:a2:9c:da:30:68:a9:ed:64:d2:50:ab:95:
         b7:a8:41:e3:94:8a:28:67:75:a0:f0:a4:1c:34:1a:78:55:31:
         62:fa:9f:97:07:be:ec:78:4c:5b:a7:6c:45:db:72:9c:53:ce:
         e5:4e:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org