Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/969254D2DB85A18DB3D557DA33FED57331030D2D.cer
File:                     969254D2DB85A18DB3D557DA33FED57331030D2D.cer (raw, json)
Hash identifier:          G7QL9Fszye9dqGcwGMUOrQjQWMHtrFoKxKjJ1k6qqsw=
Subject key identifier:   96:92:54:D2:DB:85:A1:8D:B3:D5:57:DA:33:FE:D5:73:31:03:0D:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F45F0FF724335FBD56E977627E1394A63F3C2EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/969254D2DB85A18DB3D557DA33FED57331030D2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 18:02:24 +0000
Certificate not after:    Mon 09 Sep 2024 18:07:24 +0000
Subordinate resources:    AS: 28665
                          IP: 177.12.0.0/18
                          IP: 177.136.128.0/19
                          IP: 189.1.128.0/20
                          IP: 2804:f88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:45:f0:ff:72:43:35:fb:d5:6e:97:76:27:e1:39:4a:63:f3:c2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 18:02:24 2023 GMT
            Not After : Sep  9 18:07:24 2024 GMT
        Subject: CN=969254D2DB85A18DB3D557DA33FED57331030D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:79:5e:68:c3:64:c6:85:82:41:73:c9:ba:
                    10:0f:62:dc:77:45:55:d0:f8:bc:37:d7:01:f8:00:
                    46:19:cf:9c:cf:3d:8e:9b:e7:bd:2d:3f:9d:50:b7:
                    8b:3e:5c:51:ec:06:77:d4:28:30:59:0f:c1:d1:99:
                    6f:0a:63:04:7b:c2:cb:5b:20:9a:e7:92:eb:64:69:
                    b5:99:aa:47:42:80:5b:df:ac:40:06:80:fc:90:21:
                    b6:a8:92:22:e3:d7:0c:b1:16:ad:55:36:96:c5:7b:
                    13:eb:ed:9a:05:85:e9:32:d2:a1:ba:db:41:62:a3:
                    80:45:c5:26:ba:10:8f:5a:7d:3b:af:59:55:ee:12:
                    22:9e:c5:25:f7:49:f0:17:a1:14:b9:07:bd:46:b6:
                    8c:03:17:bc:18:1f:dc:97:98:a4:27:d5:63:d9:c5:
                    b5:0b:3b:93:21:85:aa:fc:30:fb:08:b3:6b:1a:8a:
                    59:ee:40:42:48:8d:dd:16:33:f7:ad:e9:33:1a:ff:
                    cd:df:00:8a:ce:2b:b4:47:4e:07:17:6e:42:85:d0:
                    9f:c5:c4:d3:5c:00:51:7a:d2:d3:90:4c:50:f9:e4:
                    f4:cc:93:61:ef:c5:4a:79:6c:d2:11:fb:cc:6a:14:
                    fe:c8:e9:1d:ef:f7:0d:18:51:4f:0f:4c:09:cc:99:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:92:54:D2:DB:85:A1:8D:B3:D5:57:DA:33:FE:D5:73:31:03:0D:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/969254D2DB85A18DB3D557DA33FED57331030D2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18
                  177.136.128.0/19
                  189.1.128.0/20
                IPv6:
                  2804:f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28665

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:35:44:57:2b:c7:23:0c:fc:1a:ae:31:57:22:52:ac:ba:
         69:7b:78:83:5e:e0:e1:b1:ee:c5:4a:d1:3c:ba:6f:f2:59:28:
         f1:17:f1:6a:23:61:dd:a3:44:c3:b8:98:ad:71:e6:fa:b7:c7:
         9d:19:f5:7d:a2:58:77:dd:d2:89:35:c9:d6:f1:bb:23:18:0c:
         2e:65:15:de:d8:f7:50:c3:b6:ca:cd:b4:07:1a:0d:8c:e8:55:
         dd:ce:1c:3e:15:c1:e9:b5:f9:da:aa:04:cb:68:9f:63:52:2a:
         be:cd:a9:f4:12:c8:25:dd:3a:6e:f3:62:6a:ed:7e:f5:c2:a6:
         e9:c8:6b:19:c8:34:7d:0c:64:c0:e7:b1:5b:ee:58:3d:a8:99:
         05:60:5a:3f:2a:5c:3c:13:91:23:5b:df:37:7d:38:3e:8b:c8:
         4d:ca:c0:b5:49:d9:08:24:6d:88:2c:60:31:a8:93:c0:e6:76:
         cb:bb:dd:a5:37:fc:3f:b6:22:2e:89:af:11:47:f2:50:7a:7f:
         90:cc:dd:0c:a2:a1:75:85:54:59:65:f7:b6:6d:a2:44:74:9d:
         10:80:31:69:76:16:ba:35:25:08:3b:82:de:0e:81:5f:87:6f:
         5c:4f:96:c0:7c:26:5e:b2:27:c2:7a:4c:ec:07:48:c9:b0:c7:
         88:61:73:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org