Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.cer
File:                     9356F0DC1FA71405D421A557EC8963E7AFD2E363.cer (raw, json)
Hash identifier:          Kywk87anHplrEGIrJkPGHW6wTe0VKBgUUk0MFHdbwFo=
Subject key identifier:   93:56:F0:DC:1F:A7:14:05:D4:21:A5:57:EC:89:63:E7:AF:D2:E3:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F31BCC62EE12031F24DD03ECAA37327EE5A95D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Feb 2023 15:44:40 +0000
Certificate not after:    Thu 15 Feb 2024 15:49:40 +0000
Subordinate resources:    AS: 53181
                          IP: 191.241.64.0/20
                          IP: 201.33.160.0/20
                          IP: 2804:113c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:31:bc:c6:2e:e1:20:31:f2:4d:d0:3e:ca:a3:73:27:ee:5a:95:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 15:44:40 2023 GMT
            Not After : Feb 15 15:49:40 2024 GMT
        Subject: CN=9356F0DC1FA71405D421A557EC8963E7AFD2E363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:35:ff:c1:73:78:7d:fc:e2:81:1d:bf:00:
                    7a:02:13:d3:80:98:b2:39:6d:a9:d3:22:d6:f0:a3:
                    50:67:77:38:f4:32:f3:30:45:10:7b:70:55:4d:bc:
                    38:b8:41:02:90:32:e3:ed:e3:47:12:d8:65:3c:da:
                    4e:c6:b9:ea:81:90:1a:fc:85:65:e5:ab:4b:37:b0:
                    96:46:eb:07:ab:88:a9:7c:5d:9c:11:da:33:a2:8c:
                    bf:d3:ff:ca:75:8a:8f:fa:49:73:07:6e:22:17:d8:
                    72:ae:b3:ac:46:90:83:c9:df:aa:b8:f4:3f:34:95:
                    a2:a6:76:20:9e:26:74:61:41:50:28:de:73:ab:f1:
                    83:38:36:73:ae:9b:fe:da:89:98:ae:8b:95:39:cd:
                    80:f2:b8:fc:e9:85:ae:86:81:55:e0:6e:f6:ad:69:
                    c5:83:d7:80:2d:1d:f2:ef:a5:72:43:bb:8f:41:02:
                    3a:b1:db:b8:98:2b:90:e0:99:9b:39:86:0e:b1:bf:
                    ae:0c:f2:ca:81:36:b9:6d:70:ae:8a:be:27:30:71:
                    2b:9d:6a:12:5b:10:c1:59:6d:6d:2e:1d:66:35:96:
                    15:db:f6:ca:eb:b0:13:c5:fd:13:f7:ec:38:d3:5a:
                    91:c9:c1:d5:3d:d1:d8:61:7d:93:f2:11:ed:02:74:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:56:F0:DC:1F:A7:14:05:D4:21:A5:57:EC:89:63:E7:AF:D2:E3:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/9356F0DC1FA71405D421A557EC8963E7AFD2E363.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20
                  201.33.160.0/20
                IPv6:
                  2804:113c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53181

    Signature Algorithm: sha256WithRSAEncryption
         95:6a:8e:dd:3e:71:bb:ab:1a:bc:b4:01:e4:d9:14:f7:0f:10:
         9d:2c:d9:e4:43:7c:c4:91:7d:87:01:c2:e8:f3:6f:3d:60:e9:
         13:14:f4:24:0d:0b:ed:c5:4a:01:b3:c2:cc:c8:86:80:74:68:
         be:29:90:ee:25:24:2a:f1:0a:7b:02:11:14:49:38:ba:1f:aa:
         e8:a9:e5:67:ac:d5:e1:41:3f:e0:e7:5a:15:70:9e:1f:19:73:
         19:39:1c:5e:72:de:c6:a5:22:c1:28:7a:48:d1:95:c5:ee:6c:
         9c:6a:23:de:a8:a4:2a:cc:06:d3:78:bb:94:fc:fe:bc:04:c0:
         d7:87:20:75:20:b5:20:4e:04:67:6c:fa:3d:8b:2d:fa:c9:7c:
         48:08:56:ca:6f:1c:01:1e:61:62:07:1b:73:9d:4b:61:f8:f7:
         ce:cc:17:b1:b6:61:0a:b6:32:00:db:ab:a2:b8:c5:a2:1d:41:
         be:80:91:16:c3:79:da:04:f0:33:1f:83:ae:d2:d0:ec:8a:bf:
         a2:72:d0:0b:6a:b2:2a:cd:74:61:47:4b:07:51:c5:bb:07:94:
         ca:c2:ee:94:27:b3:83:2b:32:e4:ca:98:c1:24:ad:bc:d5:fc:
         77:fc:b5:95:01:68:bd:cc:f0:e6:61:2b:74:0d:f1:e2:27:7a:
         cb:09:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org