Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
File:                     9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer (raw, json)
Hash identifier:          6ESeYzyH+t29CwP0xEklr8hHoUrvzr8cMD1hWb5Zx7k=
Subject key identifier:   95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C6DB22C159B06C7CDB14B72C1630E1394874BA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 03:25:16 +0000
Certificate not after:    Mon 24 Feb 2025 03:30:16 +0000
Subordinate resources:    AS: 22177
                          IP: 131.100.172.0/22
                          IP: 189.51.0.0/20
                          IP: 200.162.128.0/20
                          IP: 2804:534::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6d:b2:2c:15:9b:06:c7:cd:b1:4b:72:c1:63:0e:13:94:87:4b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 03:25:16 2024 GMT
            Not After : Feb 24 03:30:16 2025 GMT
        Subject: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:33:6d:a9:3b:10:ff:01:5f:b2:45:29:d1:
                    80:3f:58:a4:e4:d9:9b:e4:8f:32:f4:cd:dc:9f:d7:
                    38:11:2a:58:7d:f1:6a:3e:ca:77:d6:b9:bd:98:d0:
                    7c:c5:7f:9f:a0:00:16:58:74:e1:c2:f8:6d:6c:8e:
                    4c:1f:e3:e9:5e:67:af:08:68:e8:e2:56:e2:d0:d0:
                    70:89:f3:ce:32:aa:63:89:0a:29:8a:92:14:9b:98:
                    7c:d1:dc:80:6d:d1:14:8d:0b:fe:80:40:0c:9e:a6:
                    d6:6a:da:e9:f0:3f:8e:ba:f0:58:de:dd:e6:08:e5:
                    59:8b:4a:6d:59:6c:d4:c2:e6:7f:82:3a:37:2f:24:
                    c3:21:01:61:3b:d0:12:24:b3:9a:3e:15:1d:84:bc:
                    de:ee:8c:ec:66:84:34:8f:8f:c0:6b:38:1a:27:f3:
                    c3:47:41:84:8e:a6:b3:8b:c9:96:c0:39:c7:df:0f:
                    f4:32:82:0d:88:72:dc:5c:08:20:7c:f9:b3:d7:eb:
                    be:85:1d:40:86:61:7a:2d:cf:7d:7a:59:c8:f3:ff:
                    94:82:75:eb:88:ce:2f:64:b4:64:5e:c8:11:7b:aa:
                    a1:cb:0b:08:ff:69:8b:27:4d:f2:18:58:fb:d6:4e:
                    0c:5f:0c:a6:6c:84:52:ae:1f:fa:e6:2a:87:5f:e1:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.172.0/22
                  189.51.0.0/20
                  200.162.128.0/20
                IPv6:
                  2804:534::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22177

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:8e:56:c0:67:e4:74:86:6f:be:f6:0e:83:1c:10:f6:0e:
         94:50:a5:a1:78:1c:03:0e:6c:45:bf:cd:7b:97:c1:27:86:43:
         f3:34:44:bc:bd:9a:5a:03:da:ea:76:3d:f6:92:f5:10:ef:f4:
         68:62:ba:96:cb:a3:8e:0a:5a:cf:2a:04:91:b7:6b:5c:c8:4d:
         04:fd:46:4b:59:a5:fd:1c:82:62:0b:46:0c:fe:4d:58:3d:0c:
         25:fc:a9:71:f4:b9:eb:e9:65:cd:31:38:1b:d0:73:03:1a:eb:
         37:d4:42:c0:68:36:88:b7:09:09:21:68:b5:1f:b3:40:2c:97:
         d0:a0:ec:05:94:49:f7:53:9b:64:7c:ca:73:a4:25:d8:91:f8:
         78:62:65:59:44:99:03:0d:c8:25:78:21:f1:1e:d9:43:5c:a9:
         f9:2c:7f:a0:c0:26:15:6e:56:bf:bb:f2:7e:43:5e:0c:5d:72:
         6b:42:b0:2d:fa:cc:85:22:93:db:7a:00:7e:93:1f:3e:0c:3d:
         b3:bb:94:66:64:57:08:5b:94:f2:f4:e1:dc:4d:2e:fe:cf:b0:
         03:82:e8:02:82:a2:3f:5e:b9:5b:ba:43:2a:f4:b9:c9:d0:ec:
         b3:40:de:4e:b6:44:e5:51:78:e5:8e:74:32:a1:76:2b:cd:31:
         1a:f0:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org