Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.cer
File:                     959989DAB46A5ED6ACBD127CD9E4DC559D45F057.cer (raw, json)
Hash identifier:          MbudN/tw3bnhfBRT/hdVuJ17JXnpA0gDVhJ/gY3a478=
Subject key identifier:   95:99:89:DA:B4:6A:5E:D6:AC:BD:12:7C:D9:E4:DC:55:9D:45:F0:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       757D5DCC719EB823838E384A4F1F725D192C69B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 19:54:42 +0000
Certificate not after:    Thu 11 Jul 2024 19:59:42 +0000
Subordinate resources:    AS: 271417
                          IP: 187.63.144.0/22
                          IP: 2804:7b34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7d:5d:cc:71:9e:b8:23:83:8e:38:4a:4f:1f:72:5d:19:2c:69:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 19:54:42 2023 GMT
            Not After : Jul 11 19:59:42 2024 GMT
        Subject: CN=959989DAB46A5ED6ACBD127CD9E4DC559D45F057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:e6:5a:a6:76:0b:27:5a:d7:a9:9d:6f:df:
                    fe:5b:65:2c:46:f2:5b:b0:74:17:35:81:bd:ff:3f:
                    c6:0b:26:56:5d:14:fd:19:b1:e8:1b:b4:14:7b:16:
                    97:6e:c8:f6:68:af:65:da:26:1b:4d:5c:da:b4:60:
                    24:02:af:d6:88:b1:90:20:96:46:e2:87:43:f5:38:
                    d7:d7:82:ae:dc:63:12:d4:a6:9d:b6:56:39:11:9e:
                    bf:77:38:29:d8:f8:49:d5:b2:bd:21:29:77:78:74:
                    12:e8:86:70:58:73:10:a9:48:c8:95:70:a4:61:de:
                    7a:24:b0:de:c3:b1:df:77:90:89:95:58:55:23:f7:
                    3c:44:59:c5:86:2f:86:c0:9f:df:2d:21:74:51:fb:
                    b3:a3:dc:b3:da:a3:13:16:a6:de:a1:34:9f:37:0e:
                    57:1d:8b:b4:27:7a:35:9c:bd:1c:90:a5:d7:b6:1f:
                    10:2a:3a:df:a7:0e:e6:28:4d:4e:64:b3:e5:fd:a4:
                    27:61:aa:49:b9:ce:a7:f0:2e:58:82:9b:cf:48:88:
                    ac:9f:c1:8d:43:b5:37:92:4f:b3:34:0e:ff:a1:23:
                    5d:a0:ed:e8:de:4d:a4:2d:61:5e:ed:9d:88:52:c3:
                    42:46:02:15:20:42:93:d2:74:e3:62:ea:01:ac:28:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:99:89:DA:B4:6A:5E:D6:AC:BD:12:7C:D9:E4:DC:55:9D:45:F0:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/959989DAB46A5ED6ACBD127CD9E4DC559D45F057.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.144.0/22
                IPv6:
                  2804:7b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271417

    Signature Algorithm: sha256WithRSAEncryption
         b2:b6:e3:27:3c:11:5a:28:f1:73:c0:0e:35:c3:f4:60:08:f2:
         e4:32:01:da:7f:e4:03:77:93:60:cd:9f:32:1f:a4:28:89:cc:
         c6:2a:72:e9:33:61:49:d0:87:a6:19:35:88:c2:a5:8e:af:0a:
         c6:87:89:d0:30:16:d1:cc:1a:f0:3f:28:70:fb:20:17:6c:c4:
         e4:66:c2:9a:4d:90:6f:60:b8:da:9a:aa:ad:59:3e:74:3a:9c:
         36:78:e2:ca:88:ae:06:1a:39:82:3f:b7:79:ec:70:df:d8:10:
         b2:9c:4d:bb:13:31:23:ed:cd:58:92:8a:a2:73:82:a2:4a:23:
         99:d5:f0:a7:dc:c5:89:11:80:f0:12:b1:5d:86:8f:9b:28:9b:
         e8:f4:53:18:ab:6d:92:3a:96:61:83:19:4e:a0:f3:b6:54:3f:
         64:dd:37:b6:2c:ec:f6:fe:9d:f8:43:8a:60:a0:9d:46:52:ad:
         e9:9e:4b:5c:d3:21:cd:df:62:3a:fd:91:94:99:42:07:68:74:
         e5:29:e9:1f:2d:bb:d4:46:6e:fb:6c:a8:4e:bc:ff:6d:cd:9e:
         d9:f6:11:c0:67:6d:af:96:ff:61:c3:41:9b:51:00:2d:b3:78:
         6e:a5:87:22:b5:cf:b0:42:ea:13:b8:17:2f:ad:e3:8d:a6:41:
         3a:01:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org