Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9739A0AEBEF76203809AB4886FAA9AF3898DB482.cer
File:                     9739A0AEBEF76203809AB4886FAA9AF3898DB482.cer (raw, json)
Hash identifier:          xz/wj2vF8a95kcbABI+UCkfKINIO1piHbtK7wKJ7McA=
Subject key identifier:   97:39:A0:AE:BE:F7:62:03:80:9A:B4:88:6F:AA:9A:F3:89:8D:B4:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       578ECB6D99471CE5E2066E841FCFD80811778F1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/9739A0AEBEF76203809AB4886FAA9AF3898DB482.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 12:19:51 +0000
Certificate not after:    Mon 24 Jun 2024 12:24:51 +0000
Subordinate resources:    AS: 271383
                          IP: 200.36.212.0/22
                          IP: 2804:7aa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8e:cb:6d:99:47:1c:e5:e2:06:6e:84:1f:cf:d8:08:11:77:8f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 12:19:51 2023 GMT
            Not After : Jun 24 12:24:51 2024 GMT
        Subject: CN=9739A0AEBEF76203809AB4886FAA9AF3898DB482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:46:10:66:c7:91:46:27:bf:4e:c8:b5:f8:
                    7b:c2:17:85:b9:fe:af:b5:c9:8a:b6:8d:f1:e8:a8:
                    05:95:98:50:7d:e9:80:2b:07:dd:96:95:4d:01:bf:
                    d2:6f:be:b3:ff:ae:68:bd:0c:98:ee:89:f8:c5:8c:
                    15:db:4f:ba:ae:a0:0d:63:44:42:9f:dc:54:29:9b:
                    c1:a3:a0:77:de:5c:64:60:c8:29:b1:86:39:c1:eb:
                    9e:06:c0:3e:e7:bd:7d:87:8f:cb:a0:cd:64:71:b9:
                    27:6d:2f:28:9c:8c:0e:23:37:f0:ac:c9:7e:d6:e9:
                    1a:34:6c:b8:d7:b5:65:cd:a8:b4:8f:67:8b:6c:61:
                    19:5d:6e:65:dc:03:6d:45:ee:be:7b:2c:80:29:9f:
                    a7:4d:61:f3:3d:9b:c6:ac:c7:f9:76:fa:83:a7:d6:
                    db:00:e1:7a:dd:16:bc:3c:cc:02:b1:b4:67:b8:ee:
                    fe:d5:ca:d4:ac:e4:9c:8f:fc:24:f7:51:42:6f:57:
                    84:3e:22:31:c0:fe:c9:48:ff:19:c5:23:0b:be:92:
                    c4:4f:51:bd:59:5d:20:57:82:49:d2:30:df:88:83:
                    26:a5:e0:49:64:e4:1f:c0:d7:6c:45:f7:2b:15:96:
                    9d:6d:7c:5e:99:8c:7f:c3:48:09:04:07:f3:73:32:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:39:A0:AE:BE:F7:62:03:80:9A:B4:88:6F:AA:9A:F3:89:8D:B4:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/9739A0AEBEF76203809AB4886FAA9AF3898DB482.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.212.0/22
                IPv6:
                  2804:7aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271383

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:15:18:b6:66:f5:eb:d0:c1:41:db:da:e3:7d:6a:0c:a5:
         41:de:f0:b4:f8:7d:01:a6:04:b1:e6:a9:44:1a:9d:7e:a6:d2:
         66:46:ad:18:5d:98:e3:91:2a:db:8d:e4:db:bb:c2:9b:4f:6d:
         12:94:59:df:34:85:5b:c3:d7:30:b4:94:07:7d:b0:47:db:cd:
         de:e0:d0:78:8a:8f:69:59:5b:fe:fc:5e:24:34:a9:9e:47:f6:
         18:11:96:a4:ee:b3:9b:d4:a7:66:19:26:82:5d:e3:f0:f7:77:
         0b:d0:35:df:b8:2e:bf:5c:ce:4a:b8:f6:e4:46:96:f5:d1:91:
         2c:43:b7:44:e3:3f:cb:7e:42:bd:33:92:40:52:e3:a0:3e:c8:
         25:fe:06:e2:02:46:61:6d:df:fd:b7:5e:07:2c:87:44:3e:3d:
         3d:6b:21:f3:f8:d5:77:40:ee:69:9f:6a:e9:87:a8:df:ea:e9:
         b4:aa:a2:03:84:8f:5a:97:59:3b:2a:25:34:67:c1:1d:3b:9b:
         a8:5d:41:c1:8a:53:9d:91:df:66:70:fd:e5:22:cb:29:16:49:
         e1:f9:e6:2d:55:97:fe:e2:c9:3c:bb:c1:86:b7:50:0a:78:da:
         e5:a6:93:9f:f1:46:9a:2b:be:17:13:bf:ec:e0:cd:cc:cd:57:
         24:ed:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org