Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer
File:                     896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer (raw, json)
Hash identifier:          9V9bAw5nwaZQU77WkkVh4CtGFtm6oOTBKZeicdXY6JU=
Subject key identifier:   89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5DD2B206B0053D28E3F2E99975BB666DD1FF1B39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 13:32:39 +0000
Certificate not after:    Mon 16 Dec 2024 13:37:39 +0000
Subordinate resources:    AS: 265086
                          IP: 170.233.32.0/22
                          IP: 2804:3294::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d2:b2:06:b0:05:3d:28:e3:f2:e9:99:75:bb:66:6d:d1:ff:1b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 13:32:39 2023 GMT
            Not After : Dec 16 13:37:39 2024 GMT
        Subject: CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:c2:dc:d5:a4:8d:a2:2e:59:82:f3:f4:4b:
                    de:74:a8:25:5f:c0:25:a6:88:fa:25:fd:bc:32:d5:
                    10:21:d7:4d:f2:99:4e:91:05:8a:e4:b6:44:ca:72:
                    b9:58:61:00:eb:f6:32:4f:de:6c:3b:92:a2:8e:d9:
                    f4:a7:74:7a:b4:71:41:80:13:ea:b0:b6:52:58:a8:
                    a9:16:bc:f0:88:2e:f0:02:6f:54:30:ab:73:c0:81:
                    67:60:b0:22:db:0d:fa:be:0f:4a:08:aa:ef:82:fe:
                    77:92:e0:33:26:c9:96:e8:e7:6f:9e:2d:6b:80:95:
                    7d:56:1d:db:65:09:72:a2:a2:2f:b0:92:27:a9:f6:
                    16:c2:28:5c:f5:03:7f:93:62:2c:59:b8:6f:dd:9a:
                    c0:6b:77:05:33:6e:28:a7:88:20:0b:6e:c2:75:09:
                    4f:4d:ae:a8:34:8c:a8:7e:7b:9b:dd:df:35:fe:6c:
                    be:88:68:8d:a2:e3:d5:8c:3b:04:6a:4e:83:4a:b7:
                    78:95:4d:2b:65:88:0d:17:c3:c2:68:54:a9:d7:99:
                    66:43:fd:10:86:1d:09:fe:39:d9:b7:04:45:e9:63:
                    a7:05:53:45:a5:2f:a6:aa:ff:fc:ff:89:90:a2:bf:
                    e5:c1:90:09:c7:30:00:46:42:aa:7c:75:22:15:f8:
                    58:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/22
                IPv6:
                  2804:3294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265086

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:e3:e1:b8:72:a9:30:df:b2:0b:d8:c6:9a:09:f9:74:fd:
         45:c3:18:71:01:18:8b:0b:52:3f:80:a7:77:6a:17:e4:e0:ae:
         36:f2:93:fa:6e:39:ac:6c:5c:09:13:28:6f:b3:32:50:6c:11:
         c4:e2:5c:e0:4a:84:94:1b:55:2d:6a:c2:a3:94:d8:a8:d4:bc:
         0a:a7:16:12:35:0b:7c:41:b4:da:98:9d:b4:96:95:30:f3:cc:
         06:6a:68:95:47:38:35:3f:14:08:46:e7:3f:6e:80:2b:ab:8d:
         7c:8c:9d:14:1d:c2:d6:ad:0a:6e:6f:fe:2a:93:be:a3:44:33:
         d5:f4:31:00:78:00:10:31:a8:ad:5f:8e:a2:ae:05:70:0d:50:
         bd:f3:2e:c0:7b:a3:63:9b:5f:d1:20:a8:eb:d2:3b:d1:af:ba:
         2e:2a:32:2a:d7:0c:92:61:66:cc:3d:6e:66:87:58:37:f2:dd:
         b4:e0:0b:d5:4d:d8:83:7e:5a:1a:7e:54:53:81:7e:f3:f1:9a:
         f7:e4:9d:01:9e:5f:23:77:a6:ae:80:c7:2d:ab:87:73:17:1d:
         99:f0:5d:03:1b:1a:7c:3a:13:9f:24:68:b6:c2:9d:27:9c:8b:
         ac:83:08:0d:3b:7e:64:e0:51:2e:3b:4a:1a:cc:de:54:d6:59:
         5c:3a:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org