Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.cer
File:                     93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.cer (raw, json)
Hash identifier:          PW21ktfIsDd6b3vxBASeyIliySttlt+5RfPnrVHovnI=
Subject key identifier:   93:FB:DF:B8:EA:F3:EC:10:0A:E0:F1:09:08:DA:14:85:AF:F4:30:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32D857D67A4542ED83AD671EE843E6780A20A1D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 24 Sep 2023 20:27:11 +0000
Certificate not after:    Sun 22 Sep 2024 20:32:11 +0000
Subordinate resources:    AS: 262403
                          IP: 177.38.96.0/21
                          IP: 187.61.88.0/22
                          IP: 187.85.60.0/22
                          IP: 2804:3e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d8:57:d6:7a:45:42:ed:83:ad:67:1e:e8:43:e6:78:0a:20:a1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 24 20:27:11 2023 GMT
            Not After : Sep 22 20:32:11 2024 GMT
        Subject: CN=93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:28:3a:1d:04:bd:37:c5:4f:09:ff:48:80:
                    2a:17:34:57:c3:0f:0d:75:75:7f:4d:60:2d:af:22:
                    49:3b:96:e4:d9:66:4d:f4:2d:a5:a1:63:d7:07:34:
                    1f:c4:6a:9e:71:f8:90:05:0e:11:14:37:d0:00:8c:
                    0a:f8:b1:d1:35:b4:1d:f8:f3:2d:dc:a4:5f:e6:a4:
                    7a:c4:30:cf:cd:f2:52:f1:9c:51:b9:d8:05:02:64:
                    fc:96:ab:9c:15:d2:1b:19:ba:4d:4f:b8:52:10:da:
                    6c:13:a8:8e:f0:d2:25:29:5b:22:f0:0b:dc:b2:62:
                    33:2a:16:98:64:d5:06:a9:c5:75:54:91:bc:b0:1c:
                    fa:7b:97:4e:df:2a:2e:1a:b3:d6:de:5e:2b:d4:55:
                    30:e5:ee:50:38:b0:55:28:93:be:6f:e2:b4:f6:96:
                    15:d2:42:5b:b4:45:53:73:f5:fb:6c:9b:1e:5d:d4:
                    ce:8a:db:f4:4b:b2:54:2d:9e:3e:1b:dd:64:64:73:
                    3a:b6:bb:16:a9:25:21:6e:5f:8e:4e:6f:e5:e3:18:
                    8c:d7:a2:e6:48:38:5b:4d:5f:1e:09:7c:b9:82:11:
                    59:16:d5:f2:1a:f6:9b:39:63:a7:83:26:79:b5:bd:
                    69:2d:0a:76:59:0d:f9:3d:a1:0e:52:e8:90:b8:d7:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:FB:DF:B8:EA:F3:EC:10:0A:E0:F1:09:08:DA:14:85:AF:F4:30:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/93FBDFB8EAF3EC100AE0F10908DA1485AFF4306C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.96.0/21
                  187.61.88.0/22
                  187.85.60.0/22
                IPv6:
                  2804:3e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262403

    Signature Algorithm: sha256WithRSAEncryption
         26:81:ec:83:3a:86:a4:17:48:f7:6b:0f:a7:d3:cd:c1:15:0e:
         90:06:84:17:53:e6:a5:fd:12:45:dc:d5:59:13:29:7e:99:b7:
         c7:da:77:d0:e3:e9:44:20:ca:d8:42:bb:26:1f:91:17:26:8c:
         be:eb:f7:a0:18:bd:3f:fe:a0:45:b2:ae:93:ec:ce:84:c7:ca:
         fd:e9:8f:bc:43:94:8a:7d:31:db:12:83:bf:3d:3c:e4:81:fb:
         0c:d0:72:70:53:8e:b7:b0:c2:ae:20:98:46:02:76:1e:88:8d:
         ca:02:a1:12:34:c9:09:78:bf:93:ff:75:26:8b:40:2b:3e:40:
         3d:49:e7:dc:d0:ad:b0:ef:40:64:96:35:a4:93:e8:02:e9:57:
         47:e4:6d:98:14:c6:af:b6:af:5f:84:c4:bd:68:3f:f9:5f:a6:
         8b:f9:92:58:96:a2:23:d2:54:f0:4b:ab:d1:da:17:5c:e4:cb:
         32:be:7f:16:78:89:2a:0b:46:51:bf:ed:5e:8e:fc:13:4d:68:
         61:8f:f0:f6:6b:d2:8e:48:2d:d2:d0:96:fd:73:1c:3e:bc:4f:
         a9:61:95:bd:b0:f9:2c:a6:83:1c:bf:92:a9:b6:40:7d:75:42:
         a4:46:9d:c5:e5:d7:8e:68:2a:34:3e:5c:4d:16:c4:34:f1:20:
         6d:56:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org