Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/909D66A56DAB994D661A76537BBDF66696E55FAA.cer
File:                     909D66A56DAB994D661A76537BBDF66696E55FAA.cer (raw, json)
Hash identifier:          P2d3cnr3YztnjL8chGolwV9zFy2lkCp4CPQL7KE9e24=
Subject key identifier:   90:9D:66:A5:6D:AB:99:4D:66:1A:76:53:7B:BD:F6:66:96:E5:5F:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A8334FD1CB3C9E600D30DE9991100873E7AB3B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/909D66A56DAB994D661A76537BBDF66696E55FAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jul 2021 16:45:54 +0000
Certificate not after:    Mon 04 Jul 2022 16:50:54 +0000
Subordinate resources:    AS: 265943
                          IP: 131.196.160.0/22
                          IP: 2804:4030::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:83:34:fd:1c:b3:c9:e6:00:d3:0d:e9:99:11:00:87:3e:7a:b3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 16:45:54 2021 GMT
            Not After : Jul  4 16:50:54 2022 GMT
        Subject: CN=909D66A56DAB994D661A76537BBDF66696E55FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:a7:68:14:3f:5b:e5:79:80:75:3d:78:b6:
                    3d:ae:e1:33:2b:17:df:75:d0:c6:82:fb:e7:e3:14:
                    6a:d3:25:40:4f:1e:b6:3f:dd:11:2c:40:f4:ec:f5:
                    a0:07:77:f9:be:d9:34:c2:83:94:cf:a6:ed:bb:31:
                    ba:78:26:19:0f:ef:4a:43:47:77:24:7a:6e:7d:43:
                    e2:43:65:53:2f:e0:79:20:dc:2f:34:51:b9:af:3b:
                    9f:66:db:51:cd:58:5b:77:be:8b:7a:14:ab:b5:a5:
                    4f:ea:a8:4c:44:54:e4:1c:f8:ee:15:13:ab:6a:3c:
                    12:45:a2:94:93:48:b4:fc:57:c6:52:c5:ae:0b:6a:
                    42:ff:17:86:91:1e:5e:91:6c:c4:06:51:f6:e7:ff:
                    cf:b5:80:e7:4b:e8:75:54:30:d3:b5:2f:bf:a8:9b:
                    77:0c:89:ae:12:c0:c3:f3:ae:b5:d5:46:05:59:3a:
                    f8:ed:a0:9f:11:9d:61:73:d6:58:c1:52:c5:81:a1:
                    53:fa:12:9f:ac:4b:f5:d9:88:93:b5:b6:5b:44:4f:
                    d5:79:fa:04:1b:57:b0:64:12:c4:02:cc:95:ec:2c:
                    eb:0f:a1:f8:3c:f2:e9:19:89:ab:dc:eb:dd:49:7e:
                    ed:92:f4:d5:2a:8a:7a:9f:be:78:ae:11:34:2c:c5:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:9D:66:A5:6D:AB:99:4D:66:1A:76:53:7B:BD:F6:66:96:E5:5F:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/909D66A56DAB994D661A76537BBDF66696E55FAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/22
                IPv6:
                  2804:4030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265943

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:52:54:c9:90:33:a4:b3:f1:8e:9d:27:e9:2c:a4:6f:f5:
         b2:f1:91:77:57:cb:75:f8:0e:56:c9:fe:96:33:c9:bb:ea:ae:
         06:08:16:37:55:16:28:f7:48:bd:15:14:30:bf:e2:54:9c:1f:
         95:8e:08:de:a9:55:1c:00:29:f5:68:58:6d:30:ba:f1:07:1f:
         8f:05:20:b7:0f:1f:2c:a9:c3:b0:40:01:8a:48:dc:2f:10:90:
         78:4d:a5:11:01:81:69:db:eb:b4:8e:0b:68:bf:07:39:56:56:
         8e:f5:55:6a:6c:62:c6:ce:6c:f8:19:6d:84:8e:c4:16:ea:48:
         9c:49:6c:5a:e8:e7:35:4c:31:9e:c9:25:1e:f6:5e:e3:24:57:
         c5:1f:9c:ff:8c:e8:17:14:3f:e9:cc:02:3c:48:6c:67:ed:e9:
         71:b3:c9:1f:23:e4:20:16:37:4b:5d:e4:d2:6b:2e:80:0b:59:
         fc:10:f9:af:39:53:c0:f9:44:d8:1a:47:95:88:42:eb:5a:37:
         01:8e:3a:53:ba:8c:c6:c1:cd:54:71:53:cb:18:57:ac:be:5f:
         52:17:1d:c4:c0:78:bb:49:bd:d1:b9:dd:95:6b:6b:e7:ba:36:
         50:13:9b:39:7a:92:6f:68:94:81:d4:2e:1b:4e:b8:02:46:6e:
         3f:1d:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org