Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
File:                     9730624448067D83E834AFD11E9657DD8E199199.cer (raw, json)
Hash identifier:          RXPxkphbZDzjcHp8i+eaqPPm/hCIH7FOE9tD7wCtDiU=
Subject key identifier:   97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3AAF76D46F959EE68AD96B00E4BAC1715DBEECC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 11:36:56 +0000
Certificate not after:    Thu 20 Mar 2025 11:41:56 +0000
Subordinate resources:    AS: 11921
                          IP: 200.150.128.0/20
                          IP: 200.194.96.0/20
                          IP: 200.233.64.0/20
                          IP: 201.49.0.0/18
                          IP: 2804:1470::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:af:76:d4:6f:95:9e:e6:8a:d9:6b:00:e4:ba:c1:71:5d:be:ec:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 11:36:56 2024 GMT
            Not After : Mar 20 11:41:56 2025 GMT
        Subject: CN=9730624448067D83E834AFD11E9657DD8E199199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:13:2f:9e:89:06:f1:6f:75:8a:7a:9c:ae:
                    1b:66:c3:54:01:21:15:71:d6:9f:1b:e1:c9:16:67:
                    b5:57:af:59:96:df:a3:b2:d8:fa:be:e8:c8:25:cd:
                    cd:65:c3:0a:4a:6e:15:b2:69:8f:b3:80:9f:58:90:
                    01:81:d6:2c:d7:28:e8:91:d7:33:00:f3:04:eb:2e:
                    15:ac:a0:5b:c7:5d:8e:76:d8:8d:30:ac:5f:08:3c:
                    87:53:2f:d0:76:a6:fe:2b:b3:76:65:a6:42:6c:98:
                    71:0e:1f:92:62:98:22:7c:69:03:e5:f3:51:04:0a:
                    6a:ed:9e:ec:0f:56:bf:87:94:1a:b4:79:e7:f5:35:
                    e5:70:91:c3:23:44:ca:92:aa:fb:0c:48:84:1c:40:
                    3d:51:8a:37:9b:54:60:44:a0:52:f4:c5:f8:16:03:
                    3f:92:b3:40:d3:14:62:12:75:a0:16:08:91:0d:db:
                    24:bb:e7:2f:5a:9b:76:72:45:36:7d:f2:8b:6b:43:
                    50:ca:a4:e9:9b:86:a4:74:f6:0c:8b:28:52:2c:c7:
                    74:ea:91:c1:f4:ae:bd:6a:4b:f5:e1:ad:6b:95:02:
                    2a:65:ad:6c:47:8f:52:b2:6f:38:ea:ae:05:33:f2:
                    f1:50:00:9e:7c:37:2f:b9:44:c4:ca:69:33:ff:21:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/20
                  200.194.96.0/20
                  200.233.64.0/20
                  201.49.0.0/18
                IPv6:
                  2804:1470::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11921

    Signature Algorithm: sha256WithRSAEncryption
         56:77:dd:4f:9c:27:69:51:6e:80:6a:64:5c:83:c4:62:da:5f:
         99:7a:d8:48:90:36:de:bc:3a:1c:95:46:3b:84:bb:bf:ea:be:
         91:14:c6:ef:ea:43:ab:43:5d:9f:b8:9d:06:62:6c:6f:37:29:
         2f:09:af:eb:2d:3f:93:09:3d:85:37:db:7f:7e:e1:44:dc:2c:
         82:e0:a7:88:1d:38:d4:9b:dd:c6:28:0f:90:c9:f9:73:80:a6:
         27:04:59:c9:11:d1:80:c0:a8:69:e5:c4:17:9d:9a:1d:81:90:
         10:d8:03:93:24:67:69:8c:e6:bf:60:ac:35:6b:ba:04:fb:bd:
         ae:1e:13:04:67:c9:98:2a:32:ac:03:f6:67:9f:35:58:a0:01:
         3b:9e:3e:02:6b:e8:21:b3:c2:8d:15:cc:01:30:4c:6f:0b:a6:
         e1:16:4c:6f:63:ac:11:0f:f4:df:06:29:8f:c6:94:c6:e1:56:
         9e:b5:d6:f8:d6:ef:5e:d6:22:99:35:bf:a2:6e:17:c4:6c:95:
         d7:a7:0a:48:76:b4:76:14:4c:db:31:de:35:c5:47:78:ad:10:
         16:f0:9b:19:e2:92:df:c5:21:64:2d:0a:7c:12:0a:15:24:ec:
         dd:0c:43:1c:05:71:24:99:77:8c:bd:83:97:11:4f:da:1d:30:
         a3:86:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org