Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696.cer
File:                     89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696.cer (raw, json)
Hash identifier:          9V1o6WY9QUetFYJJrqPBfLN8XX+jlUudG0Hob5toBWw=
Subject key identifier:   89:FD:8C:72:F4:54:A7:AD:CB:40:CE:3C:6E:F5:8E:AD:CF:CE:56:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       047605A74BBD5BCB7A1CAF43784548888C0A2586
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 14:32:43 +0000
Certificate not after:    Tue 03 Sep 2024 14:37:43 +0000
Subordinate resources:    AS: 266009
                          IP: 181.191.104.0/22
                          IP: 2804:4130::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:76:05:a7:4b:bd:5b:cb:7a:1c:af:43:78:45:48:88:8c:0a:25:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 14:32:43 2023 GMT
            Not After : Sep  3 14:37:43 2024 GMT
        Subject: CN=89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:37:ca:93:d5:c5:c2:39:8a:5c:c8:24:0c:
                    99:83:fd:d2:37:83:20:12:6c:27:89:2f:9f:35:90:
                    7f:7c:e3:9d:36:dd:ee:f5:48:bf:e0:20:5c:3f:3d:
                    52:80:54:d8:66:f7:36:10:7c:d6:c3:b0:f9:16:f1:
                    ce:cb:39:a9:43:d1:f4:5c:8e:44:2a:5d:02:71:ae:
                    84:3f:65:04:2d:0d:c4:da:73:22:9d:d5:f3:bb:e1:
                    76:e8:84:6e:26:8f:8b:41:4b:ee:39:46:e1:db:b3:
                    a4:e4:14:f3:95:69:7a:7e:9f:64:5f:b7:29:a7:84:
                    3b:91:f4:b4:49:38:75:9b:89:c3:05:da:84:08:9c:
                    a3:ee:5a:f7:69:f7:6d:d1:68:2b:ea:91:91:48:83:
                    24:aa:46:85:12:c4:4d:31:5c:e0:7d:2c:ed:47:c0:
                    52:d3:28:cf:b9:f8:74:de:d9:6e:80:ac:44:4b:72:
                    42:4f:ad:25:7b:98:aa:30:d3:03:c8:58:16:d8:f5:
                    5c:65:80:0c:ae:d4:b8:65:2c:86:bf:00:77:11:27:
                    1b:07:20:07:3d:9c:28:9a:c8:f5:da:f7:bc:2e:56:
                    ba:c9:d0:cf:a8:2d:8e:b2:e3:ff:70:c2:c4:1e:7a:
                    d4:c7:fb:e1:e3:f3:f1:e4:ee:a4:8b:80:fa:2d:56:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:FD:8C:72:F4:54:A7:AD:CB:40:CE:3C:6E:F5:8E:AD:CF:CE:56:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.104.0/22
                IPv6:
                  2804:4130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266009

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:49:c1:9a:96:3b:17:f6:d6:3d:f8:56:3f:97:a9:74:a0:
         b4:15:bc:3f:b1:fb:7d:90:eb:c3:7f:fb:df:05:de:ad:fd:30:
         3b:12:e7:ab:5f:a7:4c:20:da:e5:58:2d:9e:2f:2e:a1:b1:c8:
         74:14:01:86:ec:f2:73:1b:46:35:89:af:13:e6:97:31:03:15:
         66:f1:56:e9:ae:26:24:ba:32:7b:5c:dc:40:51:88:be:21:2b:
         50:45:01:ad:36:c3:c9:ae:9e:fe:5d:d8:fb:d4:79:da:75:31:
         45:45:02:14:88:39:fd:a7:83:96:de:33:c9:34:5d:47:0a:b2:
         19:53:42:ec:b9:33:ae:2b:79:1b:06:61:53:ea:77:b1:05:10:
         72:14:cd:c1:a4:17:ff:92:6b:e6:74:a0:47:de:7b:d2:92:06:
         cb:5f:90:01:0f:00:f8:7b:9e:d6:b1:61:c1:ad:9a:ad:4f:e4:
         97:8d:24:4b:46:c5:10:de:ee:5c:e2:43:f4:bf:5b:88:25:da:
         cb:ff:d3:56:36:27:01:33:71:04:53:19:e7:e7:cb:17:8d:a6:
         66:87:25:eb:98:4c:ce:3e:e3:54:8a:a2:cc:91:d8:0c:d1:91:
         fe:28:3b:95:6a:1d:98:78:39:eb:cb:96:63:bf:69:63:d6:d1:
         ba:14:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org