Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
File:                     94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer (raw, json)
Hash identifier:          KAnKXT1WOw1YjqQsf1m3e2a4ISDDsBBD70wmc+hyJ1U=
Subject key identifier:   94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       739409CC89F9BF41D56674B4BA74EBBEA704A40D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 17:56:05 +0000
Certificate not after:    Wed 05 Mar 2025 18:01:05 +0000
Subordinate resources:    AS: 52780
                          IP: 168.205.84.0/22
                          IP: 177.39.204.0/22
                          IP: 2804:2e94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:94:09:cc:89:f9:bf:41:d5:66:74:b4:ba:74:eb:be:a7:04:a4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 17:56:05 2024 GMT
            Not After : Mar  5 18:01:05 2025 GMT
        Subject: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:43:70:bc:68:d5:6e:0d:e4:0f:7f:92:e3:
                    23:16:ae:9a:60:96:67:97:b0:15:9a:3e:a6:6e:f3:
                    ea:f1:1d:c8:b6:b6:3f:0a:1c:7d:81:8a:a3:f1:8d:
                    cd:c6:9e:96:bd:90:8a:77:5a:5f:85:38:7b:bf:8d:
                    90:cf:11:3a:df:d8:0c:da:1d:f7:31:16:f7:4b:44:
                    2f:74:7c:65:05:94:8f:a8:40:71:e5:04:4d:f5:99:
                    dd:26:0b:38:8f:64:bb:a0:df:e3:89:38:b4:2f:4c:
                    52:6f:dc:31:29:f9:44:10:31:6a:0b:fd:f7:a2:fe:
                    a0:19:e0:20:09:0a:de:bb:15:cd:cd:e8:17:01:80:
                    2b:c3:9f:92:cd:2a:56:3d:ae:62:51:5d:98:83:61:
                    61:02:a2:0b:31:aa:ad:14:30:87:c7:8a:ab:0d:e3:
                    99:9e:89:11:e6:79:16:67:5c:14:fb:46:43:be:01:
                    dc:b0:60:5a:60:27:7a:f6:c3:3f:5f:01:1f:72:3e:
                    90:35:cf:a3:01:5e:f0:91:81:15:5e:2c:4d:58:38:
                    04:b8:31:ee:8a:56:04:9d:64:c4:58:a9:fb:50:7a:
                    ec:18:1e:13:fb:77:94:6a:7c:e0:31:54:17:44:0c:
                    12:46:1a:ae:7b:e0:eb:bb:fd:6f:ee:d6:2b:80:cb:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.84.0/22
                  177.39.204.0/22
                IPv6:
                  2804:2e94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52780

    Signature Algorithm: sha256WithRSAEncryption
         91:15:91:4e:49:58:20:7d:c9:1f:7e:de:0b:7e:58:d1:ed:e5:
         d5:87:c0:d1:25:d9:91:45:60:55:b8:6c:af:78:99:65:c6:2a:
         3d:6d:ac:40:fd:89:4c:d5:86:df:22:9a:c2:96:d5:18:b2:6e:
         cc:73:0a:73:cd:da:c1:44:bb:54:e4:a2:5f:e9:74:06:e3:49:
         9b:94:30:72:5f:00:07:6a:0e:30:93:e1:ae:52:8f:b2:a6:c2:
         07:c5:25:52:58:21:a3:25:7d:34:0f:58:34:9a:f6:de:09:96:
         42:fc:34:9f:58:91:e2:f1:04:75:61:8d:78:8d:cc:b6:9c:b9:
         dd:9e:3a:58:af:8e:f7:54:95:48:ca:0f:5c:e0:8f:b9:af:04:
         c8:9f:07:65:d8:f9:1c:86:25:33:4a:2a:a2:e5:10:04:d3:69:
         8c:10:56:3a:f9:37:99:bd:e8:99:df:ab:62:bf:11:a2:ce:b9:
         00:c0:83:01:b7:e0:f1:fd:01:7c:27:c6:ad:34:4c:36:c2:6f:
         02:9b:5e:0b:2f:aa:d2:ca:fc:d7:0a:1a:19:45:2b:6d:2e:01:
         30:aa:7f:d9:89:3a:20:36:e7:88:a5:12:de:d5:cc:c6:5a:72:
         d7:81:2d:c0:27:f1:b6:7d:77:83:38:3a:a6:32:d7:04:3d:82:
         9c:c2:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org