Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/966322EBF60EAC72722BAA489C53B18FD38FE811.cer
File:                     966322EBF60EAC72722BAA489C53B18FD38FE811.cer (raw, json)
Hash identifier:          FBUMEk+5eD4SmNq4n8ljAHwqLaNPizK1DCkzRB5DbuI=
Subject key identifier:   96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0168046CD6CAF551AA77A26F8E98F3750C3EA04F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/966322EBF60EAC72722BAA489C53B18FD38FE811.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 15:48:45 +0000
Certificate not after:    Mon 16 Dec 2024 15:53:45 +0000
Subordinate resources:    AS: 270338
                          IP: 190.112.132.0/22
                          IP: 2804:6a78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:68:04:6c:d6:ca:f5:51:aa:77:a2:6f:8e:98:f3:75:0c:3e:a0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 15:48:45 2023 GMT
            Not After : Dec 16 15:53:45 2024 GMT
        Subject: CN=966322EBF60EAC72722BAA489C53B18FD38FE811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:84:69:e6:86:e7:34:6e:48:a1:16:6e:9e:a5:
                    14:e0:4c:bd:ef:88:20:c8:01:e3:d6:fc:18:36:93:
                    37:f2:b0:6c:9a:62:00:e9:fb:5f:ce:57:d8:8d:84:
                    3b:7e:34:c4:13:91:59:a4:cb:5d:1e:cb:e7:bc:c7:
                    36:dd:56:64:d4:16:76:04:7f:7c:f4:41:46:18:6e:
                    90:14:ed:6c:ff:63:82:9b:69:06:18:40:ff:a6:df:
                    e0:de:7f:c9:bc:20:1c:03:0d:93:53:1b:ed:da:6b:
                    63:9c:2a:ee:7f:50:5b:bd:55:44:b2:3c:da:f2:93:
                    8d:e6:ad:74:71:7e:7b:f7:b1:17:14:c7:ba:01:39:
                    d7:89:9f:05:b3:7c:44:70:d9:df:19:39:20:c3:8f:
                    06:7b:28:21:6f:a9:11:a1:90:bf:35:9f:e6:d9:de:
                    91:f8:eb:5a:ac:a9:75:e4:33:5c:71:c9:71:b9:1a:
                    90:e3:53:89:89:68:64:0b:6b:7d:4d:55:60:e5:f1:
                    af:0f:44:9a:dd:61:a1:8d:a7:d7:d0:af:4f:9d:84:
                    df:81:ae:b0:af:08:03:02:69:74:7d:68:d6:3b:8f:
                    8e:dd:51:40:55:93:aa:1f:01:5a:50:b6:f4:1e:4f:
                    12:a5:5c:8d:d2:6e:31:8f:7b:b1:89:5c:5f:ab:0e:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:63:22:EB:F6:0E:AC:72:72:2B:AA:48:9C:53:B1:8F:D3:8F:E8:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/0/966322EBF60EAC72722BAA489C53B18FD38FE811.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.132.0/22
                IPv6:
                  2804:6a78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270338

    Signature Algorithm: sha256WithRSAEncryption
         34:40:0c:01:d0:ca:dc:4d:51:5c:2a:77:42:8b:b8:1f:cf:e2:
         a9:ec:01:d4:ac:3d:f4:42:a6:b6:3d:22:7c:d9:e2:25:f5:cc:
         a7:86:4f:cc:a2:64:d3:35:08:46:5f:d1:85:16:78:5f:79:46:
         e0:99:96:a1:47:f1:3d:26:48:c3:44:d2:43:cd:f2:e9:53:55:
         bd:2a:e8:fa:27:58:b9:15:8a:d1:aa:45:32:63:90:2d:c8:82:
         cc:17:e6:df:9c:da:f5:23:59:23:50:13:c5:cf:92:9a:69:f1:
         1f:c2:ce:63:00:ce:f0:18:e1:36:07:e6:c3:9c:13:dd:8a:7d:
         9f:ca:9c:93:15:8d:8c:4d:d4:3d:e8:aa:30:34:7f:e2:38:dc:
         7b:c4:1c:c6:63:84:0c:1e:89:6f:84:23:c1:10:ac:d9:98:cc:
         e1:c2:aa:f8:17:30:14:4b:76:07:bc:26:06:dc:97:63:b2:22:
         3e:ff:fc:4d:95:8f:63:7e:2a:55:f4:93:97:b1:68:e8:89:c3:
         20:b3:8b:28:2e:18:48:13:1f:b2:f4:75:f9:04:a4:82:d0:6b:
         e0:b6:7b:38:c9:cb:fa:ce:71:bc:6f:a8:7d:af:3d:2f:04:20:
         d1:67:c9:69:ab:30:d9:90:8c:87:69:c6:ad:0f:cd:18:78:b1:
         fb:18:04:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org