Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer
File:                     96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer (raw, json)
Hash identifier:          d5ZvKM5u4WhhCvkbkCDUhA9HW72JTnrMagX3dzwoa5s=
Subject key identifier:   96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50043C0A53E8798640D61B63D3DDFF2B40C6D878
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 15:08:04 +0000
Certificate not after:    Wed 25 Dec 2024 15:13:04 +0000
Subordinate resources:    AS: 265919
                          IP: 131.196.196.0/22
                          IP: 2804:3fd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:04:3c:0a:53:e8:79:86:40:d6:1b:63:d3:dd:ff:2b:40:c6:d8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 15:08:04 2023 GMT
            Not After : Dec 25 15:13:04 2024 GMT
        Subject: CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:99:7a:86:a4:d3:44:9e:e4:2c:1e:45:94:
                    63:23:c2:68:f6:21:14:68:48:00:fc:77:0e:94:be:
                    7c:38:68:59:77:6b:76:6c:ec:5a:23:3c:e2:94:1e:
                    ae:d6:be:af:76:a1:ba:fa:f8:82:a8:f4:e5:f8:ce:
                    14:62:ff:83:51:14:42:6d:e6:65:c9:fa:20:aa:dd:
                    3c:c4:79:6a:bd:fd:6a:3e:8b:a8:97:00:eb:4d:e4:
                    11:ff:02:99:ef:20:a6:76:a3:4d:8a:c3:f0:71:16:
                    af:86:aa:05:e4:ee:bb:a3:ab:9f:ae:77:5c:93:b8:
                    0e:80:d0:a3:a5:36:cb:1a:14:df:2f:84:66:33:a4:
                    21:fb:c4:07:f0:7d:53:f3:f4:62:0c:61:bf:aa:24:
                    3b:68:a3:4d:f0:39:86:b9:66:90:bf:dd:15:02:0a:
                    2b:37:d8:85:a6:c1:3a:10:1a:71:35:e9:bf:06:28:
                    0a:95:fb:c7:54:ec:8d:73:8b:9a:d4:da:3d:3b:92:
                    0f:d4:7a:e2:3a:8a:c6:50:e0:2b:ec:ff:69:e7:49:
                    a9:14:2b:ec:c5:a2:18:7d:b4:dc:4c:fb:a6:c8:92:
                    86:24:28:68:80:8a:41:fe:7e:d9:71:33:ee:08:b4:
                    5d:44:84:d4:7e:c3:c3:e0:10:17:02:76:8d:93:9b:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/22
                IPv6:
                  2804:3fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265919

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:61:a0:e9:c6:e9:45:9d:73:d6:f4:00:24:f8:ef:4c:0b:
         3f:49:a0:08:37:ea:24:0b:eb:ed:10:36:bb:bc:02:94:26:d1:
         c4:37:e7:a7:64:e0:02:ee:68:74:4d:37:f7:44:ec:eb:e0:38:
         29:66:ea:2f:d3:fc:94:88:8b:09:69:89:92:aa:4e:eb:eb:8b:
         e8:2e:31:f0:05:e9:03:c4:8e:36:46:50:2a:b7:18:8c:d5:4e:
         26:8f:77:52:cb:f8:aa:d6:d9:2f:db:1b:c7:51:18:78:ee:8c:
         e7:03:5b:cf:98:1c:35:9a:e1:65:f2:1f:55:0a:57:c8:87:83:
         09:65:0d:eb:86:c9:e0:eb:53:75:05:26:fd:6d:a0:ac:31:c8:
         c8:f3:8b:22:99:64:f0:c0:12:01:14:f4:10:fa:b3:94:49:ae:
         b8:28:2c:47:fd:bb:d9:75:1c:9f:f6:52:4a:8a:3b:40:e8:e5:
         4f:33:51:7a:15:1f:25:6d:0e:a4:3c:fa:5e:b2:b6:08:02:a1:
         09:d3:b6:db:5e:1e:63:34:dd:fb:a1:e2:95:ef:37:60:1b:47:
         26:1d:6f:5c:4d:00:78:46:8a:20:e0:df:af:48:ec:b8:84:3c:
         93:d9:34:94:8b:4a:27:87:2e:c2:fd:2e:00:14:c1:3c:8b:58:
         cb:92:20:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org