Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.cer
File:                     9696D17A0AA09553DE77DE6DBAAD33755AFE7131.cer (raw, json)
Hash identifier:          AZBPN/DIcqR1c2xQLgLUXSG3uDLFXIcwtprBIDpkOw4=
Subject key identifier:   96:96:D1:7A:0A:A0:95:53:DE:77:DE:6D:BA:AD:33:75:5A:FE:71:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43745A7E4D9CE9B3C487A164ED933007ECB4AB78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 17:21:14 +0000
Certificate not after:    Wed 18 Sep 2024 17:26:14 +0000
Subordinate resources:    AS: 263546
                          IP: 191.6.16.0/20
                          IP: 2804:13b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:74:5a:7e:4d:9c:e9:b3:c4:87:a1:64:ed:93:30:07:ec:b4:ab:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 17:21:14 2023 GMT
            Not After : Sep 18 17:26:14 2024 GMT
        Subject: CN=9696D17A0AA09553DE77DE6DBAAD33755AFE7131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:47:e5:5e:40:bd:d2:c3:d9:30:d6:38:b5:
                    16:d3:cd:82:43:80:8c:fb:4f:0d:cc:85:4a:29:f4:
                    8a:15:92:54:a4:91:a7:af:02:35:23:d0:9f:fe:c2:
                    cf:a8:36:e3:b8:7c:2c:93:28:6c:c6:05:3a:d0:05:
                    af:ef:67:a9:5c:ce:2e:10:a7:1e:cd:fa:0c:b2:d9:
                    3c:68:3f:0f:0b:3f:ac:7a:60:30:25:15:ef:68:35:
                    d2:58:3a:17:3d:38:c0:59:2d:e0:06:a9:61:93:19:
                    e7:32:90:66:fb:31:ad:2b:3b:63:a0:1b:38:a6:d9:
                    40:00:6e:4d:6f:75:12:f9:45:5f:f7:ad:f6:65:00:
                    a1:4c:d5:5c:6c:52:3c:2d:9e:7e:f8:3f:a3:0f:6c:
                    82:52:b0:25:aa:76:70:ea:0f:dc:3c:f8:07:88:09:
                    e4:ab:0f:bc:78:76:da:72:ca:e8:cf:59:31:51:f4:
                    1a:82:61:14:13:7d:9b:ef:a1:bc:8b:05:67:97:b3:
                    61:be:e1:74:44:1a:91:d1:a8:d7:2a:79:3f:69:13:
                    14:c0:a0:56:de:ee:09:4f:06:69:4b:4e:8b:8f:6e:
                    a9:30:f4:1f:36:cd:1d:2d:60:4e:29:f2:92:88:d6:
                    d8:f2:42:1f:08:63:76:65:bd:3a:a9:c4:d7:c8:7b:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:96:D1:7A:0A:A0:95:53:DE:77:DE:6D:BA:AD:33:75:5A:FE:71:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/9696D17A0AA09553DE77DE6DBAAD33755AFE7131.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.16.0/20
                IPv6:
                  2804:13b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263546

    Signature Algorithm: sha256WithRSAEncryption
         38:13:37:14:47:3e:4d:29:6b:4e:06:75:a8:f6:13:c7:9b:fb:
         5d:62:a3:02:2f:9c:17:39:e9:89:c7:0e:03:0e:24:ea:8a:74:
         22:07:56:db:f6:06:24:b8:28:e1:8d:f0:39:cc:57:3e:3b:1f:
         f7:45:39:19:7b:77:26:cb:1d:35:cc:23:66:97:70:6d:06:b7:
         3b:02:b1:3a:60:82:45:ba:17:88:46:4d:b2:0b:de:2f:9a:1e:
         1f:76:7f:45:55:3d:0c:65:d9:6a:47:46:91:e8:fa:7d:c9:da:
         63:c9:bc:99:b3:74:e3:df:f0:d8:96:f1:e9:f3:35:42:b7:f8:
         11:e0:7b:53:e1:66:b0:d5:9b:e7:e2:33:b6:16:52:be:63:a7:
         4a:67:65:4c:ad:ac:b2:14:c4:f8:98:b8:69:6e:ee:0b:e0:da:
         ea:91:dd:56:6c:38:10:57:98:ed:f5:ae:70:e3:6f:9d:f0:f5:
         12:0e:75:f7:a0:dd:c2:fa:84:cc:55:41:fb:02:0a:15:05:63:
         98:e2:89:47:62:33:76:88:b0:0f:9d:c5:b3:d3:70:0c:a3:35:
         18:af:8f:74:d1:85:b4:0b:a7:a0:ac:ae:a6:65:25:32:21:97:
         da:8d:cf:a1:81:dc:53:14:1d:92:18:53:ad:8d:84:97:23:00:
         bb:46:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org