Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.cer
File:                     971CA79E3512081B739CC0A56B10F347EDF9FFE9.cer (raw, json)
Hash identifier:          n6JYbGThU4a70RFgWk+h68JJnb+s+k06lMctCQ1mScY=
Subject key identifier:   97:1C:A7:9E:35:12:08:1B:73:9C:C0:A5:6B:10:F3:47:ED:F9:FF:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       09AB2B4C4D2C8456283D41C77D0BA17556AE296A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:46 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:46 +0000
Subordinate resources:    AS: 271639
                          IP: 177.86.152.0/22
                          IP: 2804:7eac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:2b:4c:4d:2c:84:56:28:3d:41:c7:7d:0b:a1:75:56:ae:29:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:46 2023 GMT
            Not After : Nov  5 03:58:46 2024 GMT
        Subject: CN=971CA79E3512081B739CC0A56B10F347EDF9FFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:83:24:7b:96:78:7f:fa:22:20:c1:7a:b7:24:
                    0b:51:1f:92:8d:c0:22:30:1c:f0:40:ae:b5:31:9d:
                    5e:d7:75:c7:53:8f:d0:f0:fe:cb:65:3c:04:a8:0e:
                    ad:80:b0:80:b5:4c:4f:19:ff:a3:6b:a5:68:1c:8e:
                    a6:be:23:a0:ab:0e:a1:ff:54:e0:ae:0b:4b:dd:ff:
                    3e:b7:5d:e0:8d:40:2e:a5:69:91:93:b5:e6:67:5a:
                    0d:9d:90:d3:54:d9:5c:cc:d7:8a:17:f5:4d:06:f8:
                    bc:d0:ab:ea:c0:eb:ab:c5:c2:dd:43:f5:89:e3:5e:
                    d9:a7:9b:fe:e8:e6:86:23:dd:21:9e:2c:72:e4:30:
                    ea:66:58:38:3a:69:26:e8:36:51:c6:b0:a2:ad:16:
                    7c:79:8d:8c:1f:ae:9e:67:05:e8:6b:f6:af:04:b3:
                    b4:17:e0:f5:14:e1:c7:5d:98:13:a1:26:f8:ae:35:
                    0f:78:bc:fe:42:5d:1a:e1:75:2d:b9:7b:7d:84:c0:
                    2b:8b:13:d4:be:ae:8e:37:31:a6:38:e3:aa:bd:4f:
                    92:c8:0b:e0:47:5f:29:6a:6e:1b:1e:f3:5a:e1:f5:
                    e4:cc:7e:f3:1d:97:95:2e:c7:2a:02:45:c7:97:8f:
                    4f:c0:62:43:00:d2:43:61:85:49:18:85:95:7f:53:
                    62:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:1C:A7:9E:35:12:08:1B:73:9C:C0:A5:6B:10:F3:47:ED:F9:FF:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/0/971CA79E3512081B739CC0A56B10F347EDF9FFE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.152.0/22
                IPv6:
                  2804:7eac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271639

    Signature Algorithm: sha256WithRSAEncryption
         60:bd:76:ec:fa:bf:cb:be:47:27:81:8e:ea:15:68:72:23:fa:
         26:75:c4:1d:41:3a:67:5c:0b:a7:41:36:37:f8:e0:80:b0:f5:
         23:64:05:4a:df:41:2c:cf:36:c9:18:51:3d:2d:a1:15:f2:c5:
         b2:3c:d1:e5:4c:6b:1c:92:d2:2c:69:77:2b:6d:e2:68:37:aa:
         70:d3:b1:4b:e2:eb:23:1a:1a:b7:3d:cb:6f:df:87:f3:bc:b5:
         c9:54:bb:bd:66:37:88:60:5a:e1:c3:e9:87:f1:34:71:b4:51:
         15:66:a4:0f:1e:a9:d4:e4:f9:1a:2e:6f:e5:77:80:14:e9:01:
         a7:c6:74:c2:32:6e:4c:10:b1:45:23:bd:d6:db:4e:f6:75:3b:
         a5:1b:61:44:5d:af:9c:be:b9:62:73:7d:a8:86:71:fb:d7:e2:
         63:a8:18:4b:02:c6:28:2c:0f:87:49:0b:44:8e:c4:dc:6a:d5:
         6d:2f:38:dc:59:28:19:da:38:ae:36:fd:8d:43:ae:a9:f2:3c:
         3d:bd:29:9c:ea:91:3c:cb:cd:68:5e:0b:0d:62:28:b2:ce:1e:
         87:c6:40:44:7a:ad:9b:12:8c:4f:8a:00:b5:1a:28:ef:d4:cf:
         45:35:bf:f4:5f:67:bf:ba:70:1d:e7:cb:97:23:85:32:1b:de:
         96:44:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org