Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.cer
File:                     91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.cer (raw, json)
Hash identifier:          YaksI9MRnPuBbV0R1gbh7yD0Hf4z1uJkkpG1wB76Rs0=
Subject key identifier:   91:EE:C0:86:A6:EB:98:D1:FC:0A:E2:BA:0F:FB:6B:7B:E3:BE:FE:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C9883DC907FAFCF9B6D3B5FA503FBFF9B379CC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 20 Nov 2022 16:55:41 +0000
Certificate not after:    Sun 19 Nov 2023 17:00:41 +0000
Subordinate resources:    AS: 271298
                          IP: 200.53.84.0/22
                          IP: 2804:7950::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:98:83:dc:90:7f:af:cf:9b:6d:3b:5f:a5:03:fb:ff:9b:37:9c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 20 16:55:41 2022 GMT
            Not After : Nov 19 17:00:41 2023 GMT
        Subject: CN=91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:30:34:45:5f:75:58:83:8a:47:e8:7d:79:
                    8c:a7:78:48:17:09:f4:0a:1f:a8:cc:dd:f0:ba:e0:
                    9f:54:9a:be:bc:ba:db:9a:ba:da:96:5a:c4:68:e5:
                    34:64:c9:77:6b:31:04:d3:96:5d:49:3f:a0:54:a5:
                    89:c7:1b:98:02:15:d3:36:06:3e:b7:08:c9:4e:de:
                    d6:ed:52:0f:1a:3b:c2:7e:b2:9b:96:91:aa:29:7c:
                    de:a9:7f:07:99:9a:bf:b9:e5:53:37:45:fc:8e:3e:
                    ff:40:e7:7c:35:79:15:50:9e:50:9c:94:b6:93:67:
                    8e:21:6d:33:c8:89:db:86:d6:ae:2f:3b:5d:f7:ae:
                    ce:07:4d:d8:c7:7b:bc:b2:3b:51:08:0c:eb:6a:70:
                    57:e6:55:70:aa:b7:ed:8b:db:e1:d1:6c:19:85:03:
                    8a:7a:1a:b7:45:36:34:38:e2:dc:7c:bc:da:67:db:
                    2a:ff:6b:2d:b4:97:bc:36:f8:44:25:12:a7:96:2d:
                    a9:ae:fd:21:5a:31:c2:7a:84:90:64:f5:f3:e4:9e:
                    03:c4:3c:2d:c1:60:43:d0:a4:32:59:90:af:30:69:
                    ca:06:dc:96:6b:8c:e1:24:47:bb:0f:ed:4a:f1:a6:
                    b4:da:8e:4c:cd:ca:11:ce:56:e6:61:40:55:19:92:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:EE:C0:86:A6:EB:98:D1:FC:0A:E2:BA:0F:FB:6B:7B:E3:BE:FE:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/91EEC086A6EB98D1FC0AE2BA0FFB6B7BE3BEFE0F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/22
                IPv6:
                  2804:7950::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271298

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:25:e6:51:cd:00:d8:c0:eb:59:a3:a5:fa:dc:eb:db:c8:
         6b:24:54:d2:d9:e2:4a:e2:b5:58:6b:98:dd:db:33:74:5e:54:
         fe:ad:8f:7a:ff:60:b0:a4:ff:00:67:ee:2b:36:b3:a1:68:d2:
         0e:d6:f0:42:fc:0a:ce:c9:5a:79:cf:d2:29:82:74:34:b5:85:
         c6:3f:d8:6d:86:79:48:fb:c2:4c:ca:15:00:b5:2c:c8:73:a6:
         7c:ab:f0:96:c1:8a:c0:c4:08:e5:b1:81:8a:c2:dd:db:38:36:
         bf:e5:ed:7a:ff:7f:8f:73:e4:9c:f4:3f:cf:98:02:0c:a1:18:
         40:50:b5:7b:17:f0:81:8e:f0:5b:d7:5d:29:c5:67:ac:56:a0:
         3d:6f:aa:3a:45:3b:90:12:30:43:53:06:98:06:a6:f4:22:7b:
         a9:3e:c5:1d:88:c4:2a:45:34:5f:50:0c:a2:e0:6d:e6:cb:4a:
         e1:5b:2f:45:5d:75:4d:57:d9:85:db:89:07:81:54:b5:20:11:
         52:79:63:6c:3f:72:0a:a8:f2:a8:82:d6:38:e0:b3:04:61:57:
         49:b2:7d:35:76:0d:de:ca:22:92:e2:42:da:09:ea:fd:a8:aa:
         d4:c4:c9:b8:b9:fa:f2:29:42:b2:42:ca:d9:2b:fc:0d:a1:b1:
         27:af:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org