Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9732DC70B09CAC30F50CEDED7F3008DD7D10124A.cer
File:                     9732DC70B09CAC30F50CEDED7F3008DD7D10124A.cer (raw, json)
Hash identifier:          pqjUuxSw8HGplbuoQL5PYyq+mwui1a5ipK4H81cJJK8=
Subject key identifier:   97:32:DC:70:B0:9C:AC:30:F5:0C:ED:ED:7F:30:08:DD:7D:10:12:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5199D789349FF9B0F25DCB3E37BE30C778A3D594
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/9732DC70B09CAC30F50CEDED7F3008DD7D10124A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 19:20:33 +0000
Certificate not after:    Tue 18 Jun 2024 19:25:33 +0000
Subordinate resources:    AS: 269298
                          IP: 45.183.188.0/22
                          IP: 2804:6274::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:99:d7:89:34:9f:f9:b0:f2:5d:cb:3e:37:be:30:c7:78:a3:d5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 20 19:20:33 2023 GMT
            Not After : Jun 18 19:25:33 2024 GMT
        Subject: CN=9732DC70B09CAC30F50CEDED7F3008DD7D10124A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:ac:35:a5:65:d2:4b:b4:17:9a:74:de:2f:
                    73:a1:63:65:5b:f1:1a:8d:63:c9:0b:e7:6c:75:08:
                    bc:3b:99:fb:78:d7:44:dd:84:75:6d:16:6a:1d:91:
                    06:4f:40:d5:27:37:ed:cc:3d:db:4c:f7:f2:a7:07:
                    80:6c:d5:0f:c0:5f:53:ce:59:ff:be:12:23:7e:44:
                    43:88:8c:01:e7:94:d0:36:ac:49:8a:5b:86:02:37:
                    71:c7:ce:33:cd:a7:04:bc:e6:77:bc:ba:95:f9:02:
                    21:a2:0c:d0:9b:fa:34:31:52:b4:2e:95:e9:e4:be:
                    af:85:47:78:ce:69:b1:31:e2:fd:19:af:43:0d:f2:
                    fd:ea:e2:aa:32:a4:0e:d5:01:ef:ef:5c:3d:ed:0d:
                    98:45:08:f2:f0:89:27:81:82:33:40:84:5a:bc:7c:
                    b1:b3:f3:80:58:ff:a3:3f:a2:64:0b:80:a6:03:be:
                    5c:2a:0b:b9:de:14:f6:48:ba:0a:44:6d:36:c7:5e:
                    b8:00:01:96:c5:ff:56:84:17:53:25:03:85:1c:d3:
                    c4:ca:cf:b1:cd:e1:6d:a9:50:02:64:9e:ff:c4:47:
                    ed:d7:10:8b:c2:d4:69:1e:10:7b:42:50:07:14:db:
                    14:d8:56:75:ea:23:1d:0e:bb:b1:78:f0:fd:ef:03:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:32:DC:70:B0:9C:AC:30:F5:0C:ED:ED:7F:30:08:DD:7D:10:12:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/9732DC70B09CAC30F50CEDED7F3008DD7D10124A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.188.0/22
                IPv6:
                  2804:6274::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269298

    Signature Algorithm: sha256WithRSAEncryption
         98:79:67:1d:77:3e:bf:87:dd:7e:e7:0f:ce:5c:43:49:f4:b2:
         d5:da:48:e3:b9:e5:2a:82:4d:41:1d:cc:3e:0b:10:2c:c2:74:
         eb:e8:f8:ec:44:78:4d:d6:60:e1:2c:86:a7:14:ea:b8:76:37:
         0b:35:89:2a:b4:3c:ff:8c:00:6e:1a:76:c8:a3:ef:b7:57:36:
         8c:70:cc:c5:51:b5:26:cd:dc:98:b4:f9:7a:ba:a1:ed:24:43:
         4a:1e:cf:52:31:d3:5e:c9:ef:44:58:36:8f:2e:7c:da:ef:d8:
         bf:fa:8c:ed:2a:a5:3a:24:dd:db:7d:d2:53:10:51:6f:b5:4d:
         7a:24:ef:60:98:95:f6:12:3d:60:7e:bb:af:39:93:af:04:91:
         33:ec:dc:27:35:07:0d:8e:99:9d:1c:86:e5:d6:ba:ae:81:26:
         9e:7a:c1:78:8a:7b:be:3d:d3:52:4b:da:d2:26:a8:78:5d:64:
         7a:0b:5f:d8:19:8a:88:bb:9d:1f:f8:d0:d6:6d:f2:ba:19:ae:
         1f:f5:48:a3:b3:e1:dc:4b:81:60:45:03:a9:f4:95:15:6e:aa:
         68:0c:4e:60:82:8a:71:b0:34:6f:91:21:da:36:a4:db:97:b1:
         0e:26:2a:6e:68:35:fb:b9:19:3d:29:41:93:88:9b:e5:f0:1d:
         10:86:74:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org