Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97077B6235C5D006BC066E68AB539CAE97F60803.cer
File:                     97077B6235C5D006BC066E68AB539CAE97F60803.cer (raw, json)
Hash identifier:          Q2w+G2LFx9figF13pyqrd0yA19eVT7qAObs2Zv52W4s=
Subject key identifier:   97:07:7B:62:35:C5:D0:06:BC:06:6E:68:AB:53:9C:AE:97:F6:08:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FDB9C9B6EFCDE891A5E461BB3DE806D29E6C4F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/0/97077B6235C5D006BC066E68AB539CAE97F60803.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 19:31:09 +0000
Certificate not after:    Thu 12 Dec 2024 19:36:09 +0000
Subordinate resources:    AS: 53102
                          IP: 186.195.48.0/20
                          IP: 187.103.160.0/20
                          IP: 2804:928::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:db:9c:9b:6e:fc:de:89:1a:5e:46:1b:b3:de:80:6d:29:e6:c4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 19:31:09 2023 GMT
            Not After : Dec 12 19:36:09 2024 GMT
        Subject: CN=97077B6235C5D006BC066E68AB539CAE97F60803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:58:84:d1:80:a3:90:d6:5f:c5:1d:fd:6e:
                    ca:1b:47:62:3c:56:51:8a:03:52:e4:e6:ca:e9:33:
                    dd:c8:d7:ef:ac:2b:de:ca:e2:ca:ef:6f:0b:50:2e:
                    9e:22:04:ab:86:bc:e0:b5:99:1c:62:f7:bc:92:92:
                    72:f1:a7:dc:9e:78:cc:1a:d1:aa:15:33:af:d9:ca:
                    74:ed:d4:b4:01:26:4f:a8:fb:02:e3:7b:3b:bb:cc:
                    5c:d5:a0:dd:75:99:63:a6:bc:37:3a:9f:03:b4:b2:
                    49:ce:f8:2d:07:3a:97:df:36:31:99:f0:9e:08:7a:
                    28:b6:de:88:20:fb:7a:e5:2c:ae:68:46:bd:4c:3c:
                    1d:51:fd:ae:7b:5c:43:bb:2b:01:76:c4:05:0b:24:
                    b4:c4:7b:5d:64:15:8e:b9:2d:9e:37:d2:c0:fd:13:
                    d0:37:2d:ea:60:eb:e5:d2:36:53:7d:3e:4b:76:b7:
                    81:2f:cf:0f:f4:53:28:85:b3:3f:c5:da:94:0f:0f:
                    37:aa:c9:8e:dc:9a:bc:da:ef:7d:68:35:69:db:3d:
                    3b:da:c5:5c:de:9c:b3:4b:35:ea:c7:ed:66:be:c7:
                    e4:a4:c3:4b:78:50:d4:11:50:ef:09:d1:25:91:dc:
                    60:73:6e:06:fa:dc:9d:3b:c2:16:ff:df:48:cc:ff:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:07:7B:62:35:C5:D0:06:BC:06:6E:68:AB:53:9C:AE:97:F6:08:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/0/97077B6235C5D006BC066E68AB539CAE97F60803.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.48.0/20
                  187.103.160.0/20
                IPv6:
                  2804:928::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53102

    Signature Algorithm: sha256WithRSAEncryption
         30:c8:31:6b:db:a7:af:81:42:64:7e:22:97:ca:16:1b:cc:24:
         ab:8b:25:13:c6:b0:63:1d:6d:23:dc:47:e7:3f:b1:c3:58:b4:
         5c:ea:a4:d9:b9:05:41:44:5f:2f:e0:af:a2:c1:a5:aa:d9:4b:
         7a:0b:90:42:c2:3c:8e:7d:c0:ec:61:9b:d7:32:7e:12:76:f7:
         d2:d8:69:6f:7f:af:a3:1a:e4:9b:ce:9f:29:99:21:29:06:7d:
         16:3b:49:cd:3b:ec:ad:ba:d1:11:6f:be:a3:0f:cb:c7:17:27:
         88:5b:e9:f8:92:4d:14:6a:17:46:c9:79:e6:17:0b:c8:40:3b:
         f9:42:f0:f9:b1:0c:53:9b:6b:1d:ca:46:21:89:1d:30:3f:1d:
         08:4f:10:b4:9c:16:e2:43:ce:dd:01:38:ee:89:c6:47:b1:c3:
         85:19:bc:f5:81:12:b0:5b:b6:4a:0c:37:41:f3:e3:1e:dd:dc:
         d3:aa:f2:28:a3:cc:3a:41:8f:78:fb:bd:f0:22:c1:c7:c9:84:
         f0:f5:91:d5:2c:de:26:0a:2d:6e:08:67:3f:91:ce:51:7f:32:
         24:af:ca:ce:e0:ce:b8:82:82:80:fc:95:50:25:99:e6:2e:64:
         22:4b:07:69:14:34:67:f9:46:31:a5:72:07:3e:74:49:fd:49:
         57:fd:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org