Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
File:                     209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer (raw, json)
Hash identifier:          rYW58qrrEbg/+UTFnR1TP5pCJg+pA9VJVsVUr52xWR0=
Subject key identifier:   20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29C120D977C06B19CB8BF7A208443CFFB007EC98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 12:47:20 +0000
Certificate not after:    Thu 12 Dec 2024 12:52:20 +0000
Subordinate resources:    AS: 265080
                          IP: 170.233.120.0/22
                          IP: 2804:3278::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c1:20:d9:77:c0:6b:19:cb:8b:f7:a2:08:44:3c:ff:b0:07:ec:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 12:47:20 2023 GMT
            Not After : Dec 12 12:52:20 2024 GMT
        Subject: CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:f9:25:5a:5e:00:07:78:8e:66:1a:27:7c:
                    a8:a5:ad:b5:72:cc:16:e8:8c:20:1a:64:27:e9:45:
                    58:ad:f5:15:d2:c3:d2:5d:fd:bc:06:5c:69:fd:8c:
                    0e:ad:f2:fb:15:19:4d:f3:2c:f8:1a:10:5b:be:b3:
                    59:06:fd:63:26:d5:57:ce:be:44:10:b7:33:fb:87:
                    74:69:b7:64:9f:f0:07:34:f6:0f:af:49:42:1f:86:
                    4d:ff:cc:43:af:60:97:88:f9:d5:eb:94:dc:0f:ba:
                    c4:fb:19:21:53:79:20:a0:f7:ca:d1:ac:04:a6:6d:
                    39:84:83:24:d7:8f:ac:9d:fe:39:e6:87:0b:2c:15:
                    00:bb:1c:c4:ca:38:a7:7d:54:23:f9:25:3d:b7:28:
                    13:5c:1a:7a:86:b0:97:f5:70:a5:bc:62:82:af:cf:
                    e9:bb:08:40:08:b8:2f:e5:8c:87:92:53:7f:83:4f:
                    5f:03:1e:64:64:04:95:05:b1:5a:80:ad:d4:a1:79:
                    b6:09:4d:f8:7a:11:3a:cf:b2:c2:ff:5e:cb:bf:54:
                    b9:73:e5:04:19:9d:c0:6c:e4:ca:84:38:8f:ae:ab:
                    fd:ed:c0:5f:ef:1a:27:44:90:90:97:8f:5c:99:a7:
                    c5:ca:87:ad:4a:5c:54:15:63:05:c0:10:52:65:23:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/22
                IPv6:
                  2804:3278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265080

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:6e:0c:e8:f1:cd:fa:97:1b:7b:0a:82:82:13:ea:35:76:
         55:92:c5:15:22:50:34:91:99:62:80:17:79:89:83:1a:5b:ac:
         dd:80:4f:de:86:68:98:01:af:e7:cd:60:15:83:73:93:7d:16:
         6b:fc:71:e6:37:16:f8:3b:67:15:38:7a:76:12:ba:ad:f6:db:
         49:99:e1:b2:02:32:d3:5b:93:2a:98:85:4a:f8:4b:77:21:09:
         bc:bf:df:de:13:9a:4d:9d:eb:29:69:09:e8:7f:e8:a9:77:19:
         83:2c:62:23:96:b7:ec:ca:fe:87:85:e2:bd:e4:b9:4a:d5:e7:
         72:93:26:87:0e:c0:04:07:8f:37:90:d4:87:c2:b1:94:d4:7f:
         7f:83:f0:be:54:32:66:16:5b:5c:de:73:4d:59:f9:42:ae:41:
         b7:23:0b:64:a6:77:bc:bd:8d:42:c3:18:f4:70:0e:f7:54:c5:
         a1:6f:a5:46:34:a8:8d:b4:95:a6:28:e1:52:0c:2d:3e:09:e1:
         16:7f:8a:39:dd:44:db:21:b5:6d:7c:ba:9d:7b:27:0c:4e:ef:
         a4:1a:2c:d4:9d:75:d3:88:fd:16:68:81:88:91:b5:64:41:4c:
         30:89:f0:c7:bf:1b:48:9b:52:9f:05:83:3d:88:4b:ea:f8:37:
         a4:80:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org