Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.cer
File:                     96241E2937532ADFA240CD6F40331679CB3DEFD8.cer (raw, json)
Hash identifier:          /YBGOTCTLILfasHAksAsFT2EjXO0odCNeoxIg8GDEew=
Subject key identifier:   96:24:1E:29:37:53:2A:DF:A2:40:CD:6F:40:33:16:79:CB:3D:EF:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E44367B1C9D4ADA9AAC6F80AD3C8F8F2AC4134E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 17:50:21 +0000
Certificate not after:    Mon 29 Jul 2024 17:55:21 +0000
Subordinate resources:    AS: 265442
                          IP: 168.196.40.0/22
                          IP: 2804:3434::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:44:36:7b:1c:9d:4a:da:9a:ac:6f:80:ad:3c:8f:8f:2a:c4:13:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 31 17:50:21 2023 GMT
            Not After : Jul 29 17:55:21 2024 GMT
        Subject: CN=96241E2937532ADFA240CD6F40331679CB3DEFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:06:12:56:86:a2:70:0a:8c:5f:ca:71:21:
                    a6:90:56:d9:96:23:bd:3f:d8:57:d7:84:90:1b:88:
                    9f:13:f5:89:7d:3c:a7:b1:2f:6e:71:a4:e5:a0:bb:
                    9a:04:30:96:f3:64:e6:b7:74:55:26:e8:e2:c5:4d:
                    76:c1:b9:02:99:35:e4:83:d0:7e:31:85:75:73:71:
                    76:cc:ab:1e:b2:0f:58:06:ae:f3:75:8a:21:06:75:
                    6a:28:7d:6e:b3:cd:f9:6a:79:72:8f:ca:69:ca:08:
                    ce:68:71:bc:ea:65:4a:0b:cc:8d:fc:8b:50:f5:24:
                    0f:6f:98:fb:fa:29:e0:0d:79:44:2c:a0:26:4f:fe:
                    5e:1c:c9:6f:ee:15:0c:ce:8c:b4:6b:c1:2b:ec:1e:
                    fc:1c:7b:5b:bf:ee:8a:af:ed:29:68:36:cf:83:50:
                    03:c3:25:46:72:14:86:e2:b5:72:60:e6:74:0b:c8:
                    3a:f9:20:cf:75:93:c7:f5:40:43:3a:86:41:f3:cb:
                    d3:2c:e5:6d:62:15:be:98:5b:bb:01:cb:fa:b0:36:
                    d4:1c:70:1d:6e:ae:1b:23:97:4e:21:09:9e:06:f6:
                    58:12:ff:f4:62:9d:e0:54:17:50:77:9e:10:ae:2f:
                    da:1e:bb:04:af:71:1d:4e:79:cc:87:3d:bb:56:5b:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:24:1E:29:37:53:2A:DF:A2:40:CD:6F:40:33:16:79:CB:3D:EF:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.40.0/22
                IPv6:
                  2804:3434::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265442

    Signature Algorithm: sha256WithRSAEncryption
         1d:7e:7b:0c:aa:ce:9f:e4:4d:9f:be:17:31:d3:9f:24:4a:c9:
         66:0a:86:a5:68:cc:f4:48:b8:66:43:a9:57:15:99:01:13:7c:
         13:8e:40:f6:9c:7d:09:db:ba:c3:c9:80:67:c4:8b:e8:60:45:
         cd:97:e3:7f:5d:65:ac:c8:5d:7d:a5:97:52:cf:39:99:1c:62:
         5b:e6:0f:cd:5c:a2:e8:5c:06:b2:a8:24:90:22:45:e4:c8:65:
         1c:2a:6f:de:91:c1:30:83:3b:55:de:1e:4b:73:76:89:bb:14:
         1c:8a:e0:23:23:28:d7:64:59:45:a4:99:37:14:bf:24:80:3f:
         d4:e8:e3:b2:00:8f:0e:24:33:11:34:e6:d5:71:d1:de:a0:31:
         52:ac:eb:21:4f:1a:80:aa:ee:5a:3f:93:e2:d7:f5:d0:ae:39:
         97:76:a7:0c:97:2d:ae:a5:47:4a:96:0b:dc:9b:47:2f:f1:15:
         3a:98:70:8c:da:76:d7:91:c3:66:60:16:28:a7:19:17:73:b9:
         c1:4e:ed:85:8b:af:35:5c:65:89:10:a1:2a:9e:36:92:12:58:
         f7:12:30:f6:f2:c8:3c:d5:b7:84:05:b3:75:06:75:d9:3f:eb:
         5e:e5:58:d6:49:f8:36:62:d1:41:56:54:02:2e:f5:d5:a8:3b:
         9f:54:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org