Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.cer
File:                     409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.cer (raw, json)
Hash identifier:          fJ47n4w7yUlGnqudADZHm/zOjZ2Z/v4bHaaSV9fgq2s=
Subject key identifier:   40:9C:ED:9F:E5:C8:C7:F6:A3:6B:A6:7D:E7:13:AE:E1:1E:91:FC:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       55F6DCCEDE21ACD2E2CC30EAEE456DA91C9A3079
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Nov 2022 22:13:09 +0000
Certificate not after:    Tue 28 Nov 2023 22:18:09 +0000
Subordinate resources:    AS: 270305
                          IP: 201.216.120.0/22
                          IP: 2804:6a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f6:dc:ce:de:21:ac:d2:e2:cc:30:ea:ee:45:6d:a9:1c:9a:30:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 22:13:09 2022 GMT
            Not After : Nov 28 22:18:09 2023 GMT
        Subject: CN=409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:69:ce:7b:9a:4b:4f:27:ef:25:34:80:1a:
                    b4:1d:70:49:94:21:27:4c:3d:05:65:0c:a9:b9:77:
                    d2:eb:f5:14:f4:c1:5d:13:2f:99:81:40:40:fe:7d:
                    88:a1:34:4e:08:f3:7c:24:bd:ce:27:a8:49:a2:dd:
                    14:42:5d:b3:8a:70:ef:36:dd:f6:d1:84:c2:59:2b:
                    9a:f0:87:d4:0b:be:2a:f2:1f:e3:9f:38:f3:95:63:
                    de:3c:ec:a9:b6:0d:09:64:49:f4:dd:50:33:91:5c:
                    21:c4:99:75:64:df:4b:9c:a4:fc:dd:28:95:e6:6f:
                    41:9e:8f:68:e4:92:c8:ed:8e:34:92:6a:34:06:b0:
                    a9:2d:fc:0a:a9:4c:bd:32:d4:6b:59:9b:80:b3:35:
                    2a:44:82:60:e4:e2:a2:04:6e:1f:4f:7e:5b:0a:0a:
                    d1:04:75:c7:36:1e:17:ad:83:19:c8:d1:b4:a8:6e:
                    48:8f:8f:36:93:4b:42:5e:df:ba:c0:c3:31:16:39:
                    c3:6f:a0:e9:04:8c:26:a0:50:c0:7a:fc:e4:80:b1:
                    34:1c:bc:d2:73:e7:4a:e8:20:ab:a5:23:3c:ad:ff:
                    0f:c7:3f:76:a0:80:73:d7:e5:86:c2:e8:b7:c8:56:
                    36:6a:90:17:87:8c:a0:70:db:10:49:31:ed:b5:27:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:9C:ED:9F:E5:C8:C7:F6:A3:6B:A6:7D:E7:13:AE:E1:1E:91:FC:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22
                IPv6:
                  2804:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270305

    Signature Algorithm: sha256WithRSAEncryption
         a6:71:bd:7d:a0:ae:38:8c:01:67:18:d7:16:3f:ab:97:05:81:
         82:a3:cb:23:6f:dd:e8:85:6b:3e:bf:dd:d3:82:c7:ce:5f:b6:
         86:e0:59:64:ec:c6:80:df:49:72:c4:d1:19:1a:fd:a2:90:00:
         d0:65:74:53:f9:ca:4b:39:7a:ce:73:c8:3b:23:99:b6:a7:b9:
         35:e2:c2:87:45:84:51:c7:b7:c0:30:80:2e:82:58:a1:32:9d:
         9e:98:99:01:86:90:ca:0f:c3:dd:d9:4c:03:a9:18:5d:95:d9:
         16:78:6e:15:bc:c5:cf:56:30:5b:2d:64:9a:58:36:5e:da:32:
         ad:43:c3:8a:5d:62:f9:e9:79:77:6b:d7:e0:41:e3:eb:03:01:
         e6:45:7b:6b:e7:0a:3b:29:dc:01:d0:b0:03:de:a3:dc:f2:12:
         52:af:1f:45:36:a3:6b:42:1b:cb:49:8c:c4:f0:38:21:d1:b6:
         c0:1b:84:25:97:c0:22:20:af:d0:4d:0a:5b:0e:35:19:9b:7f:
         8f:f7:6b:df:14:7c:15:cc:b3:ea:52:37:6e:0e:18:bc:4a:2e:
         11:04:1f:4c:9f:4a:6a:28:80:86:f5:6d:e8:e4:91:1a:93:ab:
         14:57:08:f9:de:44:e8:36:6b:22:b8:c7:f1:e0:98:dd:d3:37:
         95:2f:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org