Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.cer
File:                     91BD56ECBC6C49278C61C353E8FF806FED55FD00.cer (raw, json)
Hash identifier:          zgQ9Dc+0XXYLZSdDi9g4JpmGp7yD0+IbZ4GK1zDlWEc=
Subject key identifier:   91:BD:56:EC:BC:6C:49:27:8C:61:C3:53:E8:FF:80:6F:ED:55:FD:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66B424FA6A3B9097CD5D8453DABF016F95581FBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 18:54:06 +0000
Certificate not after:    Wed 10 Jul 2024 18:59:06 +0000
Subordinate resources:    AS: 265405
                          IP: 168.194.152.0/22
                          IP: 2804:3394::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:24:fa:6a:3b:90:97:cd:5d:84:53:da:bf:01:6f:95:58:1f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 18:54:06 2023 GMT
            Not After : Jul 10 18:59:06 2024 GMT
        Subject: CN=91BD56ECBC6C49278C61C353E8FF806FED55FD00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:d3:66:37:35:7f:62:7c:8f:68:1e:cd:19:
                    b9:4e:c2:c7:de:ce:f6:72:1e:f6:fe:db:6f:a9:1e:
                    a2:3d:ea:bd:29:dd:7f:15:e9:1b:b5:59:6e:c7:b1:
                    41:18:a6:e3:ea:be:b0:66:6b:aa:ee:20:8f:e8:32:
                    d4:6f:70:b4:69:16:7a:c2:37:ed:d3:a5:f8:db:45:
                    ae:19:fc:71:46:3a:67:e7:86:e6:63:c3:d6:2e:0f:
                    bd:32:c9:3f:fc:0f:0e:82:5e:8a:d9:db:fe:4e:15:
                    af:50:85:2a:4e:1c:b7:4c:c4:24:8c:68:b2:17:3c:
                    0c:cb:34:91:a7:ce:05:7b:24:19:b5:3d:c8:71:00:
                    4b:67:fe:8d:7c:35:c9:f0:62:9d:ca:83:1f:3a:61:
                    5b:a7:2f:3d:76:77:cc:b0:67:87:27:4f:01:a0:cb:
                    bc:b5:e5:54:21:2a:78:38:6e:59:bb:2b:bb:59:99:
                    b1:24:90:c9:31:3a:6e:10:a0:49:06:28:73:da:26:
                    e9:3c:f1:8d:95:7d:72:1f:94:3f:52:36:7c:95:41:
                    ec:8d:02:ca:bb:81:5d:10:9f:97:87:7e:f2:96:0c:
                    9f:6a:f0:88:f1:d6:7c:08:8b:85:2b:5a:2d:a5:0b:
                    4e:01:4f:06:f9:9e:7f:03:a2:08:8b:eb:3f:27:ee:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:BD:56:EC:BC:6C:49:27:8C:61:C3:53:E8:FF:80:6F:ED:55:FD:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.152.0/22
                IPv6:
                  2804:3394::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265405

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:8f:dc:22:81:2b:93:39:1a:e4:8e:a8:f6:60:54:48:68:
         53:99:c3:1e:a6:7e:55:db:da:16:f4:a2:a3:e8:85:1c:bd:3b:
         1a:99:68:43:28:4f:f7:8a:14:83:65:39:47:32:b0:12:f4:45:
         9b:b2:86:56:dd:de:6d:51:c2:35:5f:03:e5:83:82:36:6d:4c:
         78:bf:12:b2:54:80:b6:42:b0:36:11:bf:49:5b:e6:9a:bc:aa:
         4e:2a:31:07:f6:b0:7e:b1:b9:9f:92:c9:79:88:e6:11:bd:90:
         ae:d1:eb:ae:10:91:fa:c2:da:87:ab:0e:ed:9c:75:5b:02:48:
         8c:52:f6:6b:88:81:2c:40:d7:c3:2a:64:b7:6a:b1:d1:a3:86:
         7f:68:89:be:2d:a8:e2:c5:87:b9:20:42:a4:c6:d4:b8:07:01:
         f6:9d:81:3b:bb:8d:50:04:4d:d9:20:06:d0:21:b4:48:a5:a3:
         07:7c:f5:40:33:43:b6:de:1e:6f:93:4e:07:59:26:1e:60:b3:
         7d:3b:b0:e7:5a:a5:11:09:6a:3d:3c:28:d0:55:70:33:a5:bc:
         d6:4e:6e:88:f6:27:9b:8d:98:e7:68:97:7f:01:37:1f:20:d1:
         22:8c:61:ce:a2:d7:e7:ba:36:c2:5e:af:49:f1:a0:57:0e:89:
         52:8c:f9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org