Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/896F64699A24C2E23B5746346E4D57164325B11C.cer
File:                     896F64699A24C2E23B5746346E4D57164325B11C.cer (raw, json)
Hash identifier:          TbP1VSsrJ+fSQuXhjUZGvxTMP3ta7aubPLsBRyEd5t0=
Subject key identifier:   89:6F:64:69:9A:24:C2:E2:3B:57:46:34:6E:4D:57:16:43:25:B1:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E8FA09A1238C91D462FCFA794A71A689D90FFEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/896F64699A24C2E23B5746346E4D57164325B11C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 10 Sep 2023 18:50:25 +0000
Certificate not after:    Sun 08 Sep 2024 18:55:25 +0000
Subordinate resources:    AS: 267470
                          IP: 192.141.72.0/22
                          IP: 2804:41fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8f:a0:9a:12:38:c9:1d:46:2f:cf:a7:94:a7:1a:68:9d:90:ff:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 10 18:50:25 2023 GMT
            Not After : Sep  8 18:55:25 2024 GMT
        Subject: CN=896F64699A24C2E23B5746346E4D57164325B11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:f6:36:5b:98:b7:ea:ff:eb:ac:72:9f:d2:
                    b1:f4:34:cd:f7:28:c0:b9:05:10:2f:15:a4:9f:0b:
                    91:fa:fb:ab:a4:85:e4:be:2f:d0:a5:97:75:70:72:
                    59:ea:16:77:95:84:3a:27:66:b2:32:05:3c:4b:6e:
                    cd:c5:a0:7b:02:93:ba:b2:02:5a:ea:ab:ed:e6:72:
                    ba:80:91:3e:4a:13:98:b8:99:86:ec:25:0a:a9:41:
                    56:9f:4c:dc:04:70:a2:8b:c9:1b:38:9e:a0:95:bf:
                    78:50:64:eb:0b:b1:b6:9d:a9:ed:ae:17:60:9f:2b:
                    76:7a:f1:c8:7d:35:c1:5e:d5:17:32:44:94:74:ac:
                    92:eb:ca:58:15:69:05:87:64:5b:36:94:1a:c3:44:
                    09:56:b6:b4:4b:e3:dc:3c:53:76:21:88:2d:20:4b:
                    14:e5:22:a2:0c:55:cf:9f:62:fc:e4:df:f4:0a:33:
                    86:09:24:b9:e9:53:a2:03:44:15:7f:cb:64:be:33:
                    9c:82:0b:a9:9e:4f:6f:ca:08:42:a6:ae:25:a6:9d:
                    5e:2b:af:55:e9:d4:42:f1:7e:e8:3f:c4:e7:21:d0:
                    60:2b:37:48:ac:c8:50:3c:05:ed:ca:ae:c9:56:c4:
                    04:3a:9f:eb:82:19:a0:b9:db:48:aa:1d:58:05:a0:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:6F:64:69:9A:24:C2:E2:3B:57:46:34:6E:4D:57:16:43:25:B1:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/896F64699A24C2E23B5746346E4D57164325B11C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.72.0/22
                IPv6:
                  2804:41fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267470

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:ad:8d:c5:fd:c8:06:aa:91:b2:1b:e5:09:c7:b0:71:94:
         31:85:cc:30:86:e5:a8:94:b9:74:ce:9f:07:08:3e:3e:48:c5:
         36:9e:c6:05:93:75:8e:a2:d6:fd:be:c2:ba:d6:bc:36:14:a8:
         59:51:70:3c:09:98:d5:e0:c5:dd:e1:d4:dd:3b:00:5e:a3:0e:
         6a:96:14:ea:e2:af:80:db:70:44:2c:c4:f0:19:1b:02:7e:62:
         d1:cf:52:1e:ed:ec:50:48:fc:88:8d:41:66:9e:7e:b8:ca:c5:
         f3:e6:50:6d:a8:8f:e0:bb:76:17:ef:87:c3:ba:59:01:cd:ad:
         61:2d:9e:3c:8d:86:5c:a8:ef:2d:ca:f9:fe:65:1e:e3:03:d4:
         f2:b4:d0:4c:30:cf:67:62:71:fd:37:64:50:57:4b:84:1e:c6:
         29:8e:87:39:52:12:b3:8d:a0:c1:48:8d:63:09:47:35:c0:6e:
         80:4b:b9:9a:56:6a:8a:a5:67:c6:97:d3:e5:2f:58:cb:33:5d:
         2e:e1:5f:a4:fd:69:2d:9b:7d:d6:c4:65:f2:e5:a9:1d:63:3f:
         6e:88:a2:72:92:26:4c:21:cd:3c:1a:ff:ce:ef:49:be:c6:64:
         23:aa:a5:52:2e:d7:6f:c3:54:f6:aa:d8:8d:73:24:fd:ee:4d:
         0f:ec:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org