Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.cer
File:                     96D6AE6D52F298970A86B774958FB5B4488CAF64.cer (raw, json)
Hash identifier:          gyYocGgcVklo/pcQzgT1tP5V0UtRxrEPZuelL4rXgrk=
Subject key identifier:   96:D6:AE:6D:52:F2:98:97:0A:86:B7:74:95:8F:B5:B4:48:8C:AF:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7AE8A508068994B7414D0A5384EB5CBEA9B316C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 13:25:08 +0000
Certificate not after:    Thu 02 Jan 2025 13:30:08 +0000
Subordinate resources:    AS: 271387
                          IP: 200.215.224.0/22
                          IP: 2804:7ab4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e8:a5:08:06:89:94:b7:41:4d:0a:53:84:eb:5c:be:a9:b3:16:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 13:25:08 2024 GMT
            Not After : Jan  2 13:30:08 2025 GMT
        Subject: CN=96D6AE6D52F298970A86B774958FB5B4488CAF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:7d:39:67:4b:1e:74:8f:53:c1:a0:c2:b8:
                    7c:51:92:ac:3c:31:99:73:c8:99:21:48:49:36:04:
                    21:f1:cf:52:c4:c4:28:af:f8:e7:c6:a6:c8:7c:7a:
                    4b:9a:52:38:c9:af:19:a6:98:b5:d3:60:d0:ec:10:
                    af:df:f2:b1:8a:23:4f:00:fc:f1:30:52:c3:7c:99:
                    e0:41:93:5b:99:b2:69:41:12:81:2d:50:4b:90:af:
                    2f:f7:8c:28:ad:d3:a8:bb:8c:fb:69:f6:31:d2:a8:
                    f3:36:70:3c:6c:2b:4d:19:bc:b5:49:60:e1:29:78:
                    30:b2:d2:5b:77:ff:14:b3:db:69:90:21:20:9a:20:
                    e3:47:0e:f0:46:2e:25:3f:3b:e6:54:b7:e8:aa:6c:
                    9d:fe:0a:b2:21:2f:97:b2:58:c7:40:57:c3:79:79:
                    d8:25:a7:67:ba:78:3f:d2:e3:1b:9d:c6:c2:e1:b0:
                    6b:2b:e4:04:04:09:cc:37:9c:33:08:a4:fe:24:58:
                    0d:b7:96:fc:31:dc:92:af:39:43:83:9c:33:49:c4:
                    db:ee:c7:da:67:4e:3b:5f:37:cf:5f:cf:43:9b:15:
                    07:b8:9d:67:82:a8:a0:3e:eb:09:60:14:a7:3e:f3:
                    3e:b8:45:a1:f7:70:20:c1:cc:69:41:ce:3f:b1:7b:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:D6:AE:6D:52:F2:98:97:0A:86:B7:74:95:8F:B5:B4:48:8C:AF:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.224.0/22
                IPv6:
                  2804:7ab4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271387

    Signature Algorithm: sha256WithRSAEncryption
         87:75:02:7d:1b:34:05:2f:53:65:f3:cb:21:d4:71:59:a7:25:
         95:c6:db:31:eb:53:ef:de:f3:0a:5f:de:4d:69:87:cd:ac:f8:
         f6:e2:e7:cc:51:2d:d9:8a:d8:23:96:0b:a5:56:a5:55:7d:13:
         98:17:0d:7a:18:ba:05:43:3a:f8:0d:1c:df:69:48:07:ae:05:
         09:74:b5:14:f5:f9:1d:f3:82:30:f1:3b:32:7c:54:c5:07:96:
         0d:12:8b:a6:90:55:63:7f:c5:b6:62:b9:6b:c2:b1:da:8c:23:
         b6:b8:c3:28:33:3b:fe:35:4c:8a:55:b3:1c:5b:63:03:d8:ea:
         f4:d3:3d:5b:70:38:48:eb:a8:05:0b:fc:72:61:41:b7:5a:f5:
         ae:18:39:e9:dd:19:26:5b:48:db:1b:24:10:43:0b:80:54:df:
         2f:ba:e8:04:1a:2d:aa:a0:49:42:b0:3a:8a:a1:f4:c2:16:d2:
         3c:e0:90:ba:0c:8a:a5:26:ce:6b:b3:38:d2:a8:93:4b:06:fa:
         2b:74:65:45:d6:88:5f:be:de:d9:ea:39:95:91:48:f2:f5:56:
         6d:e8:74:62:d2:ac:8b:fc:e3:7f:dd:63:10:09:55:27:99:34:
         82:72:fa:da:b6:c1:b7:5c:df:21:35:fb:52:a2:32:30:1d:53:
         13:a3:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org