Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.cer
File:                     9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.cer (raw, json)
Hash identifier:          VpQGg7MSCZkUcqalqLjzHDwI5+5IOBVC+3dKpZ6vx30=
Subject key identifier:   91:84:FB:2E:87:2C:3E:A8:E8:0D:8A:10:1E:98:FB:E8:C5:E9:6D:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C8AC9E913F83CECFE610CDEB34B4007490900FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 20:25:27 +0000
Certificate not after:    Thu 12 Sep 2024 20:30:27 +0000
Subordinate resources:    AS: 268239
                          IP: 45.236.36.0/22
                          IP: 2804:4e18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8a:c9:e9:13:f8:3c:ec:fe:61:0c:de:b3:4b:40:07:49:09:00:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 20:25:27 2023 GMT
            Not After : Sep 12 20:30:27 2024 GMT
        Subject: CN=9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:80:1c:30:22:3a:0a:90:7b:7a:51:08:07:
                    9b:0d:90:5a:a7:5f:51:6d:84:bc:7d:dd:b5:ca:50:
                    5e:da:89:b8:04:a0:63:05:66:3b:b1:1a:95:37:66:
                    de:44:e7:ff:52:62:55:57:06:7f:bc:9d:08:5b:1b:
                    64:a7:db:a9:48:9f:a9:21:e5:ef:7c:97:0e:35:97:
                    a4:c1:7b:13:57:4d:a6:fd:cc:5b:c7:dc:c5:4e:65:
                    36:e1:90:24:7e:fa:51:a9:c6:74:87:af:33:28:48:
                    55:34:ed:93:11:94:49:6b:63:6d:21:0f:02:1f:f4:
                    52:59:1f:8b:d4:04:07:5c:6b:93:62:44:78:88:e5:
                    93:4f:fa:ac:f3:f0:fd:1a:cd:d9:88:94:8c:0a:90:
                    e1:55:96:d9:a7:54:c8:a0:d7:dd:c4:75:a9:b5:13:
                    4e:3e:22:6e:c9:84:63:c6:a3:5b:f2:fc:28:e3:27:
                    68:51:c4:1b:ab:6f:c2:8d:1b:55:d6:5d:e8:93:92:
                    66:29:a7:d3:a6:f2:ca:aa:59:8f:33:aa:be:82:0a:
                    12:ce:bb:db:71:8f:2d:7b:b1:d6:0b:f5:df:9d:83:
                    85:6a:03:73:d7:4d:bc:d9:18:f8:3f:32:3e:81:c6:
                    48:ed:19:cc:df:a0:36:68:9d:ec:41:3e:41:7e:b4:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:84:FB:2E:87:2C:3E:A8:E8:0D:8A:10:1E:98:FB:E8:C5:E9:6D:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.36.0/22
                IPv6:
                  2804:4e18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268239

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:91:a6:62:2a:9e:e4:c3:93:c7:20:82:79:f6:aa:18:e5:
         6f:5d:93:5c:90:ab:ac:f9:e6:c5:da:24:16:a7:6e:a2:e0:5b:
         bb:9f:fe:d1:72:36:f3:9a:be:a3:7f:9a:eb:7c:9e:eb:eb:45:
         0c:49:99:5e:26:c3:14:4c:a6:37:85:7c:0a:e9:96:ea:58:32:
         02:da:a0:5d:35:20:63:d3:ab:0b:cf:9e:19:58:5b:6d:13:0d:
         de:0f:99:79:d3:82:59:4a:de:31:31:cb:0e:f7:a1:08:b6:7c:
         1a:5a:14:ce:40:59:2a:89:3d:9e:ff:e1:12:50:61:f5:27:c5:
         bf:1a:75:86:4e:87:d6:5d:ba:65:70:4f:8b:78:93:cb:6f:40:
         db:f7:cb:7c:d7:d9:c1:1b:ae:15:a9:53:7f:d5:ee:41:89:25:
         6b:b2:03:78:ff:6c:26:64:e9:c9:d4:87:89:06:a3:e5:0c:63:
         dc:47:b3:0a:be:81:89:0d:03:bb:1c:70:8a:46:28:70:2a:2b:
         df:a7:f6:6b:55:eb:ca:56:af:11:11:08:af:0d:6d:5f:c4:76:
         b6:15:a6:75:6a:95:11:2e:34:a8:e9:7c:0d:8c:0f:9c:ae:4d:
         fb:95:eb:d4:b2:1e:10:1d:34:70:76:c8:99:cc:71:69:b7:f0:
         44:c4:f0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org