Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/909B242E1AA11C195680F2163AA144101D705158.cer
File:                     909B242E1AA11C195680F2163AA144101D705158.cer (raw, json)
Hash identifier:          thVDofMYajgetyWWg6D5mbvLdqSieMe/hCNqPGfzscM=
Subject key identifier:   90:9B:24:2E:1A:A1:1C:19:56:80:F2:16:3A:A1:44:10:1D:70:51:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16D3432D7F3FADD328D116FF5E03F45A20C34532
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/909B242E1AA11C195680F2163AA144101D705158.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 12:01:49 +0000
Certificate not after:    Wed 23 Oct 2024 12:06:49 +0000
Subordinate resources:    AS: 266934
                          IP: 45.225.116.0/22
                          IP: 2804:458c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d3:43:2d:7f:3f:ad:d3:28:d1:16:ff:5e:03:f4:5a:20:c3:45:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 12:01:49 2023 GMT
            Not After : Oct 23 12:06:49 2024 GMT
        Subject: CN=909B242E1AA11C195680F2163AA144101D705158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:54:bd:37:d9:90:e6:b8:b6:99:50:b9:92:93:
                    ec:79:83:f1:4d:4c:0a:d9:be:70:06:eb:a8:1a:8a:
                    af:77:61:a3:81:2e:a6:81:63:db:d4:65:90:28:94:
                    9d:3b:5c:c4:c4:83:6f:b4:6a:f5:16:76:85:7e:3b:
                    c2:e1:71:b4:ff:28:22:3f:4d:c1:dd:e6:f6:3d:c1:
                    ab:56:59:09:69:fe:17:a1:c1:6d:c0:69:f8:62:fa:
                    3a:d2:d4:2c:fb:a2:31:40:b7:dd:4f:6a:8a:9e:b2:
                    f6:e0:51:82:b7:46:48:25:3b:1c:2c:04:36:48:f2:
                    44:9c:f0:13:19:a9:7d:06:4f:86:fa:87:e4:f8:16:
                    6b:12:3b:83:7f:01:5c:d4:a5:b2:ef:5e:4e:0e:3f:
                    6e:44:47:ad:54:88:17:b7:89:0e:3f:3a:2c:c6:bf:
                    fa:2c:10:cd:25:15:99:20:73:47:65:a8:93:64:be:
                    66:b5:7e:9f:fe:d5:79:40:b3:d2:89:d5:56:81:52:
                    4f:95:35:60:d6:35:19:df:24:16:5d:d6:b5:2c:d7:
                    55:f0:24:ca:26:bb:7a:85:8f:e3:cf:44:f0:30:2f:
                    12:9d:5d:52:54:c5:54:80:8d:56:f2:82:4b:4b:df:
                    31:63:9e:04:c4:0d:60:37:51:57:f6:93:f0:22:8b:
                    0e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:9B:24:2E:1A:A1:1C:19:56:80:F2:16:3A:A1:44:10:1D:70:51:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/909B242E1AA11C195680F2163AA144101D705158.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.116.0/22
                IPv6:
                  2804:458c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266934

    Signature Algorithm: sha256WithRSAEncryption
         7e:d0:cf:ac:f5:d5:56:da:fe:15:94:6e:01:51:1a:79:2e:59:
         71:1b:cc:eb:de:45:3a:cf:d4:a1:e3:0d:6b:9c:f5:c5:e5:80:
         af:07:47:cb:19:1e:85:fb:0b:06:91:e4:ac:cf:a6:e4:66:c1:
         20:2c:32:76:66:fb:95:f4:ec:a0:13:dd:8f:ba:ae:a4:28:71:
         68:88:06:72:8c:be:99:89:21:86:29:d7:5d:8c:bd:55:69:15:
         95:02:bb:e0:d9:04:db:a9:14:4a:92:b9:dd:8b:49:95:24:41:
         c2:49:0b:9a:bf:99:65:14:e8:50:b9:d6:d9:da:42:8b:85:ab:
         af:a2:6c:70:14:ae:32:63:91:1d:e5:71:22:e2:a7:58:b5:9b:
         9c:7f:61:6c:33:ce:de:11:10:1c:6b:7a:1b:52:0c:f4:1c:5c:
         b7:a4:d2:dc:aa:54:99:7d:59:10:19:15:38:81:26:7e:7c:bf:
         92:a6:de:45:13:72:3b:f5:47:dd:75:b2:be:61:a0:10:61:04:
         00:a7:2c:c5:5a:7c:2c:e7:18:75:cf:bd:32:e4:42:31:60:b1:
         19:fd:ea:60:7b:bc:37:7b:ea:4b:e6:b1:fe:3a:37:34:43:16:
         fa:33:fb:68:c5:f7:3a:2d:60:d7:b1:e0:59:ef:4d:60:4a:26:
         b6:ee:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org