Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer
File:                     9669B55ACA2805661E847E4C5F8AC24659AC717D.cer (raw, json)
Hash identifier:          YNKY0WMEi+brGq6ByLHv5IWgDtqpzS5P0jh2qIlKxwA=
Subject key identifier:   96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1ACF0F2689736631D8997155BFF67F453695B4D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 16 Oct 2022 18:15:13 +0000
Certificate not after:    Sun 15 Oct 2023 18:20:13 +0000
Subordinate resources:    AS: 263090
                          IP: 186.250.72.0/21
                          IP: 201.150.88.0/22
                          IP: 2804:1974::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cf:0f:26:89:73:66:31:d8:99:71:55:bf:f6:7f:45:36:95:b4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 18:15:13 2022 GMT
            Not After : Oct 15 18:20:13 2023 GMT
        Subject: CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d7:d7:79:a4:b8:84:71:d3:b2:a9:d1:45:ee:
                    c3:56:7c:84:8b:3c:f8:79:62:43:d1:b5:ff:17:e2:
                    17:ad:d9:aa:2f:1f:c8:59:3f:5a:f1:20:63:6e:c4:
                    28:3b:65:e5:e5:cc:23:f2:05:01:35:5f:a9:79:74:
                    62:56:e8:56:e7:68:84:37:f0:e0:a6:e8:61:f4:94:
                    e4:93:80:df:3f:1f:34:36:c6:0d:93:c4:81:64:49:
                    5f:fc:82:ef:0f:b1:a6:2a:3f:3e:8f:d6:68:75:79:
                    00:45:f9:33:1e:0f:a9:0b:10:cb:8b:e5:d3:25:f5:
                    2b:1d:67:af:16:d5:57:40:ed:82:53:44:d5:81:39:
                    d9:f1:0e:c5:cc:e8:76:02:88:07:fc:5c:6a:83:f5:
                    31:63:84:2d:8a:2b:5e:73:42:01:ee:bb:f6:f9:35:
                    45:41:7e:c0:bf:72:cd:a9:45:c4:58:92:0a:67:c1:
                    95:3a:9c:a0:d2:8c:6f:81:71:78:3f:e7:a9:61:26:
                    cb:44:2f:03:42:56:4e:3f:06:25:91:20:08:08:d2:
                    a7:72:2e:9d:ec:4c:60:12:02:81:d3:35:44:40:0a:
                    a2:09:e3:9a:9a:ae:95:a8:7a:d3:9e:41:cf:1f:e6:
                    33:9f:2c:c1:4b:19:9d:ae:bb:04:a1:11:a9:af:b3:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.72.0/21
                  201.150.88.0/22
                IPv6:
                  2804:1974::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263090

    Signature Algorithm: sha256WithRSAEncryption
         9d:03:7d:4b:a0:6a:7e:34:cb:ff:4d:4e:00:2c:0b:87:9b:53:
         7c:28:5c:21:7d:d8:88:97:cd:5c:90:75:5d:50:56:31:e3:b7:
         6c:f0:16:72:0a:09:c0:84:b2:19:c6:f2:4c:b6:87:0d:8d:a4:
         ea:c4:6f:85:18:4e:9e:98:73:e6:16:d7:93:b2:6a:8b:17:16:
         dd:43:67:5f:ba:5e:6e:30:a2:7b:83:8e:97:0d:89:23:88:77:
         48:c8:3f:14:c8:82:86:27:08:89:75:f8:02:bf:0d:14:e1:36:
         24:da:06:ad:fc:44:f8:bb:14:62:67:f0:05:9d:79:bc:aa:86:
         9f:e3:63:47:22:0a:f4:e8:37:8f:10:a6:4c:d1:76:5e:f3:eb:
         fe:fe:b3:1c:79:a0:ca:78:0a:3e:d4:9e:53:9f:6b:01:5e:3f:
         79:df:98:d6:a1:ce:d8:b8:86:7d:a8:d6:ec:1d:f7:56:ca:03:
         5d:61:af:68:e3:04:0e:bb:c3:27:8b:b3:df:1b:8d:17:27:d5:
         8b:c2:4d:e3:78:b2:bc:47:ef:50:ba:5b:0e:ac:40:4b:e8:94:
         9b:59:b4:58:b3:27:94:02:b6:b8:14:ce:45:f4:ad:5b:9b:fb:
         bf:ae:1a:ce:5f:a7:50:c2:69:30:6f:fe:5d:0a:c4:cf:50:49:
         cf:f8:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org