Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.cer
File:                     9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.cer (raw, json)
Hash identifier:          AYZXfQe4EO4ZZwYhKb2BTh4eLGlqkcnngpxL85luqOo=
Subject key identifier:   96:16:A9:68:23:A2:E0:0E:4A:5E:1F:65:F4:EE:1D:33:91:FC:6D:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       586184A6E2FA21CD5E9BDCEA59E78F6AD1F8A725
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 23:45:29 +0000
Certificate not after:    Tue 09 Apr 2024 23:50:29 +0000
Subordinate resources:    AS: 262342
                          IP: 143.208.208.0/22
                          IP: 177.125.112.0/21
                          IP: 186.227.216.0/21
                          IP: 2804:a14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:61:84:a6:e2:fa:21:cd:5e:9b:dc:ea:59:e7:8f:6a:d1:f8:a7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 23:45:29 2023 GMT
            Not After : Apr  9 23:50:29 2024 GMT
        Subject: CN=9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:11:9c:82:ca:c0:30:c2:b5:10:50:92:8b:
                    a5:48:d4:42:11:cb:15:a7:c6:ae:05:15:74:5b:6c:
                    a5:34:b0:c6:0a:12:8f:8c:c4:49:b9:ac:94:5e:10:
                    fa:fa:5d:9b:8e:b9:b2:05:dc:a0:49:51:57:da:ab:
                    ec:d8:e4:4b:2d:f9:3c:5a:4c:97:46:69:3d:53:83:
                    eb:e2:d0:0a:4e:5c:c6:fc:0f:5c:e5:4a:ba:3a:6c:
                    da:c8:81:df:4e:18:80:1f:d3:9f:62:29:e2:c8:3e:
                    ab:df:c3:2e:9c:1e:29:40:5a:0b:71:ff:97:b0:88:
                    1f:f8:a0:7e:2d:15:30:48:d2:f5:a5:7c:8e:f1:7c:
                    38:6f:df:39:77:3a:49:c6:70:30:b4:ce:ca:f1:74:
                    01:40:38:50:78:20:1f:de:37:87:32:2c:f0:3b:fa:
                    cb:e8:d3:c2:41:44:66:71:40:3b:30:59:cd:2b:74:
                    43:ac:99:13:07:40:b5:41:58:8f:ab:a4:48:c3:52:
                    09:19:13:fe:97:45:76:71:ea:6f:50:cb:02:dc:87:
                    71:a0:c2:f5:64:b4:02:4e:5b:f2:42:29:f0:84:e8:
                    2a:96:e8:f4:9f:09:52:13:bc:73:a0:cf:d5:c1:e2:
                    fa:09:46:c0:35:fc:e7:c6:48:a1:91:17:50:a5:ac:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:16:A9:68:23:A2:E0:0E:4A:5E:1F:65:F4:EE:1D:33:91:FC:6D:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.208.0/22
                  177.125.112.0/21
                  186.227.216.0/21
                IPv6:
                  2804:a14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262342

    Signature Algorithm: sha256WithRSAEncryption
         29:7f:36:e5:3d:ae:75:9e:40:45:de:5c:95:56:b1:f7:03:66:
         7d:9e:3a:03:96:c2:e5:44:cc:87:e5:dd:1c:a4:ec:ed:82:c2:
         5e:0f:65:e7:6b:f2:a5:3b:95:6b:c4:5e:a3:df:50:66:df:47:
         ca:b4:dc:0c:10:77:fc:af:00:55:64:1b:7a:c5:1d:a8:b6:6e:
         8c:03:eb:69:8c:66:f7:26:cd:ae:42:f0:c3:f5:36:7b:55:ec:
         d2:ee:0c:e4:02:6d:ec:5d:8f:40:ca:3c:26:26:ae:2b:92:9f:
         f8:47:02:57:18:03:05:66:d5:4f:33:3f:ac:16:66:ee:7a:da:
         44:77:44:a0:b9:34:71:36:06:e7:fd:a4:c8:fe:1b:fb:11:fe:
         73:ea:bd:95:05:ab:1b:74:4a:46:43:92:c7:d8:88:10:66:a8:
         16:4b:0f:b4:63:05:fa:3d:0e:c0:a9:20:0c:f1:49:ec:99:cb:
         93:a2:4c:aa:23:6c:d4:09:5b:89:83:44:67:59:05:a1:e0:11:
         3b:bf:85:e3:fc:0c:5a:45:03:5c:47:8c:93:de:50:5a:03:ec:
         b8:00:e4:a5:a2:71:14:0a:95:ff:c4:58:1b:69:0f:c3:3d:0d:
         2b:d4:4f:28:ea:a3:3b:a8:44:b5:66:03:2b:46:84:e6:ed:bc:
         a0:ea:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org