Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.cer
File:                     91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.cer (raw, json)
Hash identifier:          Z8K/QH1OS082c/s9557J1it45I/lw6xN2a+jzrdgoh4=
Subject key identifier:   91:EB:2E:70:18:26:E3:D8:9F:C9:60:9A:6F:9A:CE:7F:C2:45:16:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FD6B30EE4A1B7C9D301F2A1DB77D2EA22A68D77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 14:25:09 +0000
Certificate not after:    Thu 11 Jul 2024 14:30:09 +0000
Subordinate resources:    AS: 266117
                          IP: 45.6.12.0/22
                          IP: 2804:3ae8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d6:b3:0e:e4:a1:b7:c9:d3:01:f2:a1:db:77:d2:ea:22:a6:8d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 14:25:09 2023 GMT
            Not After : Jul 11 14:30:09 2024 GMT
        Subject: CN=91EB2E701826E3D89FC9609A6F9ACE7FC24516EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:13:11:0d:80:11:ff:1b:28:7e:15:22:47:
                    fd:c2:df:0f:63:05:a6:3e:f7:af:ff:63:33:31:94:
                    0d:83:72:9a:4c:6d:17:0f:1e:c5:55:1a:3e:2a:5d:
                    81:0b:e3:f2:66:e3:8b:6d:73:f4:f2:14:e1:cf:20:
                    84:04:7e:8e:b3:c4:7f:ad:9b:8c:bd:fc:64:12:22:
                    bb:37:49:f5:6c:63:6d:8e:73:11:b0:6f:3f:42:b5:
                    98:32:35:9d:8c:41:21:8a:54:8d:dc:5f:b8:8e:95:
                    37:46:85:f9:b3:12:c0:7b:dc:af:02:ea:df:26:37:
                    62:bc:20:c7:f8:4f:41:56:5e:61:fd:a2:7d:2d:d0:
                    98:65:77:80:d6:d8:b4:cd:5f:2a:21:27:9e:d8:6e:
                    51:c0:59:1c:b9:4f:ac:cb:d2:7a:25:f4:a7:1d:73:
                    e0:bb:8d:3a:3f:f5:73:29:0d:92:da:ad:0a:0e:ff:
                    d4:d8:39:33:e8:17:c6:ec:ab:e0:58:bf:5c:bb:30:
                    52:37:69:f3:e6:26:32:d2:a6:e7:c8:b1:80:29:a7:
                    3f:7e:14:6a:94:3a:e0:49:28:b1:e9:26:c9:60:96:
                    1e:78:74:40:0e:9d:f4:67:11:f9:7b:02:c0:0a:5f:
                    86:f7:d5:e9:40:2c:0d:29:5f:04:b3:26:61:56:e2:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:EB:2E:70:18:26:E3:D8:9F:C9:60:9A:6F:9A:CE:7F:C2:45:16:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.12.0/22
                IPv6:
                  2804:3ae8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266117

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:24:30:a7:9a:75:46:64:7a:24:76:c4:35:9a:26:cf:b6:
         ae:1a:15:30:c2:f1:5f:c8:99:1e:d8:25:ae:64:e2:84:8e:89:
         b9:2e:2f:5b:01:a3:f5:fc:dd:73:f5:f9:49:2c:cb:ac:a8:ba:
         71:46:9b:7d:24:cd:06:30:53:e3:cb:35:3e:2f:e4:bf:43:31:
         56:03:88:5f:5e:0b:e5:1e:04:c0:fd:b6:f9:4d:11:49:1a:be:
         eb:9a:b0:d6:a3:aa:96:62:76:7f:92:ca:24:ab:60:88:17:ef:
         ca:f8:78:1c:be:c5:6f:59:9e:46:23:aa:ca:24:4c:e8:c6:d6:
         7f:dc:8a:e1:23:ce:c2:b0:17:b3:18:00:b0:b6:88:dd:e8:ec:
         2f:85:a5:18:e0:bf:36:e9:79:16:31:80:7e:63:7a:72:9d:af:
         51:eb:d7:f3:0e:21:77:3c:f3:4a:c6:f8:76:64:4c:aa:7e:cf:
         51:e6:4d:36:16:f1:e8:c1:82:cc:05:33:ec:57:bf:77:a3:19:
         b9:af:c1:a0:56:38:58:44:2c:dd:79:21:6e:29:a3:7e:25:1a:
         eb:27:1e:c2:bd:53:12:7a:8a:18:1e:94:66:0f:48:93:30:6d:
         03:19:70:f2:25:66:1e:96:37:a6:31:31:af:01:b4:2b:d0:14:
         66:f7:72:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org