Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.cer
File:                     1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.cer (raw, json)
Hash identifier:          6QuyHECzapNvU7prDlyeJONcw8Iq6ftG06QEz2iRvd8=
Subject key identifier:   1E:9B:C0:E3:4E:3E:1C:72:FC:CD:D8:85:9B:B1:0F:3C:E8:28:A0:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D2FDA71102226394A199BEF90E27477E23D46C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Dec 2022 00:14:10 +0000
Certificate not after:    Thu 28 Dec 2023 00:19:10 +0000
Subordinate resources:    AS: 270539
                          IP: 189.84.44.0/22
                          IP: 2804:6d88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2f:da:71:10:22:26:39:4a:19:9b:ef:90:e2:74:77:e2:3d:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 00:14:10 2022 GMT
            Not After : Dec 28 00:19:10 2023 GMT
        Subject: CN=1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:34:69:33:bf:6e:28:e4:32:49:9e:c8:c1:
                    30:1b:97:7f:2e:39:5e:97:e6:5a:d0:0e:ba:6c:6e:
                    bc:c7:22:0f:f1:b2:9c:e7:d3:53:35:fd:57:eb:d7:
                    93:b0:5d:db:f6:d7:90:4c:13:10:21:54:d2:d4:ee:
                    25:85:04:16:d8:bb:90:bc:ee:8f:c1:7d:d4:57:e6:
                    17:e7:3a:4f:f8:bb:84:ea:87:d1:29:4a:96:05:72:
                    f6:c9:b8:0f:80:a6:b9:e4:d0:51:86:d4:99:dd:18:
                    3e:f3:59:84:07:89:89:a0:61:29:1d:63:47:e8:85:
                    ba:1e:f5:34:d8:30:db:8b:5d:1d:3b:83:45:0f:a9:
                    8c:f5:6b:da:b9:aa:04:5a:94:d3:2e:71:68:64:84:
                    b1:62:16:64:4d:c7:c7:b2:5c:60:e3:4d:a5:c2:b6:
                    46:16:bd:da:f7:9a:e0:58:06:cf:90:b5:96:af:10:
                    18:67:22:c0:b4:13:7a:a9:a0:69:f0:6e:43:85:e4:
                    1d:b0:a9:7b:99:af:f3:de:38:a9:a4:10:d2:40:31:
                    04:ec:11:f0:3b:5c:c5:fa:4a:64:a3:74:1b:93:3e:
                    bf:f1:b3:fa:6d:f8:7b:ac:02:71:ed:91:6f:1a:b8:
                    93:e4:d7:36:8a:99:55:2f:b4:de:de:79:e0:76:54:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:9B:C0:E3:4E:3E:1C:72:FC:CD:D8:85:9B:B1:0F:3C:E8:28:A0:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/22
                IPv6:
                  2804:6d88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270539

    Signature Algorithm: sha256WithRSAEncryption
         13:49:3a:13:32:d3:7c:77:18:b8:a9:4c:c1:3e:87:0c:0b:4d:
         52:fe:5c:0d:ed:7f:4c:a0:41:dd:8d:17:3e:22:d7:ce:9f:00:
         10:54:7f:be:8e:c4:c8:4e:23:a0:ab:c9:ea:45:a0:7b:9f:f2:
         8b:ec:61:e6:e8:f7:8b:aa:8e:e8:3a:c4:a4:29:76:eb:e9:af:
         c7:3b:13:91:2e:12:18:c7:73:5e:27:8f:8d:3a:76:1b:95:c3:
         92:00:9d:2e:6f:6c:b2:bc:ab:f8:7a:ac:86:64:4f:1e:07:65:
         c9:48:fa:f5:66:1e:64:b1:0a:47:70:6d:a3:bc:43:24:3b:3e:
         c6:d9:fc:f9:c3:e0:8f:bf:e6:b4:35:d6:86:d3:55:f1:51:e5:
         6a:cf:80:ed:c6:eb:2c:e3:93:a8:f9:cc:5e:e2:0c:a3:67:8a:
         a1:7c:6c:b4:3e:27:16:15:60:c1:0b:1d:7e:30:ac:7d:07:ee:
         79:89:ee:12:f9:96:ad:d8:ac:51:8b:5c:72:43:e3:8d:0f:69:
         7f:45:1d:f7:00:f1:28:d2:c9:3a:77:b1:bc:73:7b:70:a2:fd:
         68:d5:89:70:48:d1:06:1e:01:8f:fa:e7:d4:da:c3:f2:37:fb:
         58:f0:51:1f:fe:ba:d8:05:f3:50:cd:c5:fd:28:f6:e5:60:50:
         f4:36:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org