Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer
File:                     959F004623105A3C7B4F85C41B8104B26D38122E.cer (raw, json)
Hash identifier:          wMqgBsjP/bmq1ZhFFYL23z/nT6xlS3lIBfytKGLw+h8=
Subject key identifier:   95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5ACB593B45F900447B653FEE80F8CD35E5D95E51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:01 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:01 +0000
Subordinate resources:    AS: 267426
                          IP: 181.191.160.0/22
                          IP: 2804:4150::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cb:59:3b:45:f9:00:44:7b:65:3f:ee:80:f8:cd:35:e5:d9:5e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:01 2023 GMT
            Not After : Aug 10 02:59:01 2024 GMT
        Subject: CN=959F004623105A3C7B4F85C41B8104B26D38122E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:c6:c3:ad:82:7b:a1:12:69:a5:b4:2e:27:
                    c8:67:49:59:68:0f:71:fe:2e:3c:d5:82:d5:ef:dd:
                    36:2e:b8:03:c2:46:1f:d5:78:95:0e:d1:97:a9:34:
                    da:fa:16:d2:63:58:25:9d:58:17:22:62:22:e4:84:
                    90:9f:fd:5f:5e:49:68:f5:b9:3e:f4:e7:13:79:4a:
                    b8:54:19:e5:81:ba:d1:de:94:f1:c1:47:7a:8b:ea:
                    c8:74:39:4c:e1:91:e2:e4:12:43:de:40:c6:0d:c4:
                    a7:2b:0f:40:d7:de:5d:ff:7f:7c:b1:61:a8:81:ce:
                    d2:38:89:d2:91:f4:7e:29:2c:cf:81:b7:3f:ac:04:
                    87:2a:b1:9e:d9:de:07:c3:0f:44:c1:7f:3a:79:f1:
                    90:34:1f:2a:2f:64:f3:96:93:14:cf:85:58:5c:56:
                    f3:7b:b7:df:f7:2f:65:21:33:44:49:eb:be:36:0f:
                    e7:c0:82:30:93:07:f8:e2:a9:a1:e9:ff:74:fc:ea:
                    ff:19:e1:82:00:67:fb:28:29:f1:15:f2:71:05:df:
                    a9:2e:4d:cf:35:cd:25:8c:54:39:5e:cf:1c:cb:ae:
                    5d:9e:29:9e:d0:89:ff:d6:a7:0d:5d:87:b6:ed:2d:
                    aa:13:ad:f0:61:29:ce:94:8e:e0:82:c9:5c:de:5f:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.160.0/22
                IPv6:
                  2804:4150::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267426

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:e2:5d:52:6e:11:a6:1c:c4:5f:f2:b8:87:fe:5d:ab:41:
         43:0f:49:cf:e8:7d:45:96:ec:58:9a:0e:d5:53:c8:e5:25:80:
         e2:6a:de:4b:e5:d3:54:ce:ed:25:14:8e:82:fb:b5:51:61:22:
         46:22:4c:1a:f2:8e:27:91:b2:c6:d9:76:03:11:41:e4:59:1b:
         c5:2f:a3:c7:31:ab:79:ed:f5:05:d7:10:0c:d8:f0:fe:7d:de:
         e3:19:ac:5c:70:e4:17:1e:df:e2:0c:65:3e:65:50:be:4f:f4:
         ab:6a:7e:1b:c5:f4:a0:10:54:60:7a:06:cc:57:59:d8:f2:30:
         ff:f8:94:78:b1:2f:c7:d9:16:15:4f:44:a4:a6:21:5f:62:72:
         bb:48:f4:23:e9:a6:c6:68:50:9d:ee:7c:00:51:31:46:ea:c0:
         68:a0:2e:19:38:1b:af:c0:94:7f:38:b8:a5:ca:40:d4:ac:de:
         58:82:94:b4:3e:41:a7:4a:bc:55:5c:b0:60:db:dc:b1:06:3c:
         68:d7:b1:86:bf:86:1e:2b:8c:26:b9:b0:c9:f4:ac:62:f3:e6:
         3a:38:08:29:1f:26:2e:5e:87:0f:e6:ba:e9:38:81:40:6e:53:
         ae:35:f0:00:94:7e:4e:7b:c0:10:6a:38:5d:7e:ca:1f:92:27:
         1b:50:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org