Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.cer
File:                     9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.cer (raw, json)
Hash identifier:          vLp3uN7fKRW7GAaAePT0g41C2AxEncs5rdQidjN5/34=
Subject key identifier:   96:89:C1:7D:D6:A4:0C:06:1C:6D:BF:B1:53:8B:BF:7E:CE:CD:B8:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0577458B036261A93835A1D110596487FF6E87A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Sep 2023 22:15:09 +0000
Certificate not after:    Sat 21 Sep 2024 22:20:09 +0000
Subordinate resources:    AS: 269425
                          IP: 45.186.32.0/22
                          IP: 2804:6464::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:77:45:8b:03:62:61:a9:38:35:a1:d1:10:59:64:87:ff:6e:87:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 23 22:15:09 2023 GMT
            Not After : Sep 21 22:20:09 2024 GMT
        Subject: CN=9689C17DD6A40C061C6DBFB1538BBF7ECECDB848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:16:e0:0b:32:6b:b5:e3:40:5f:0a:aa:a0:
                    14:c0:47:6c:bb:98:92:2b:1b:17:46:bf:1c:1c:18:
                    57:78:4b:ef:60:87:fa:2d:ed:ff:d5:09:32:c6:f6:
                    d1:80:a9:dd:f6:9c:bf:42:9f:18:b3:92:d5:11:bb:
                    d4:16:b1:6e:74:c0:fa:f5:c3:01:36:2e:6b:d3:f3:
                    40:5a:c5:15:99:2b:9e:3e:4e:67:c6:da:e1:29:f8:
                    3c:be:a9:b6:95:ec:49:e1:bd:b1:0b:fc:70:39:35:
                    2d:9b:21:a0:66:de:bf:cd:35:b5:c4:03:1a:ff:40:
                    1f:fc:b5:ef:e4:8d:02:30:5d:a3:32:54:ab:3c:60:
                    ac:88:b6:04:11:7b:a6:2f:a2:ea:ef:6d:75:8b:a5:
                    58:f7:2a:c9:c0:c4:34:6d:9b:31:80:be:a5:ee:84:
                    43:d6:2f:e4:9e:6e:33:87:f4:fd:46:b9:3e:3e:56:
                    c2:e3:02:2c:99:29:29:21:d9:30:6f:83:af:bf:3a:
                    53:3c:96:1d:f1:7a:e2:c9:1b:ae:eb:bb:54:11:cf:
                    88:4b:cb:eb:0b:e7:8c:91:06:5c:e1:ba:e9:66:44:
                    36:38:3e:43:ff:ed:fc:c9:43:db:8c:97:c7:ca:fa:
                    4d:7b:0c:c8:73:d0:52:ac:4a:37:6b:1e:97:48:69:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:89:C1:7D:D6:A4:0C:06:1C:6D:BF:B1:53:8B:BF:7E:CE:CD:B8:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/9689C17DD6A40C061C6DBFB1538BBF7ECECDB848.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/22
                IPv6:
                  2804:6464::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269425

    Signature Algorithm: sha256WithRSAEncryption
         5c:a0:89:6b:61:5b:18:02:d9:35:4f:ba:98:60:db:6a:58:0f:
         86:70:31:52:0d:9f:89:68:ce:1d:3c:26:50:fa:66:1b:82:c5:
         1e:da:dd:41:40:95:97:48:3a:7e:b3:b2:b8:93:84:b5:f1:fd:
         64:68:c0:84:46:3c:93:c1:45:8b:b4:e4:5f:2f:98:69:70:66:
         fa:a3:36:fa:b4:ce:4c:c3:28:5a:19:4f:0f:af:b9:3d:8a:de:
         9c:47:71:71:41:95:c9:12:db:80:df:8d:ce:c9:51:78:9c:94:
         d8:2d:5c:42:65:00:48:68:b4:62:63:03:a0:e2:2a:53:27:b7:
         95:e6:c2:86:7b:91:5c:ac:93:7a:63:60:8b:61:73:3c:91:28:
         5f:76:6a:be:93:b5:34:bd:42:b3:a6:8a:7c:7a:a7:2d:59:0f:
         f1:60:91:f6:8f:40:50:7f:56:d7:12:c5:5e:6b:e8:45:2e:06:
         d4:9c:70:03:7f:81:97:e2:a0:e6:b2:1d:a2:d2:f1:b9:37:d0:
         5f:40:3b:fc:80:37:2f:5e:83:08:a8:28:cb:bf:ac:11:e8:7e:
         ac:42:83:c4:bf:93:f0:6f:03:46:06:5e:18:09:59:36:7f:fe:
         ab:47:b7:77:76:88:02:50:42:dd:6e:8b:5b:fe:46:56:95:22:
         19:b2:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org