Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer
File:                     97417F3E236E218F6CACD83DB7C3A791582C6461.cer (raw, json)
Hash identifier:          F4VZ6ng9l6uLg8K8L3ULvqnD7ZAO521GPy23uISvBM0=
Subject key identifier:   97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DE52DDB2A8AA3085EEDC6C08D4A9589D884626A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 17:07:52 +0000
Certificate not after:    Mon 10 Mar 2025 17:12:52 +0000
Subordinate resources:    AS: 28610
                          IP: 186.209.88.0/22
                          IP: 2804:dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:2d:db:2a:8a:a3:08:5e:ed:c6:c0:8d:4a:95:89:d8:84:62:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 17:07:52 2024 GMT
            Not After : Mar 10 17:12:52 2025 GMT
        Subject: CN=97417F3E236E218F6CACD83DB7C3A791582C6461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:04:fc:d8:5c:c5:55:60:a8:f2:43:94:ce:
                    a6:1f:c1:e5:69:99:80:b3:8e:33:c7:05:58:a7:95:
                    ef:88:cb:90:35:99:57:14:57:1b:6e:86:98:fb:e8:
                    10:10:47:ad:57:44:fa:27:96:44:dc:9b:44:a6:be:
                    75:1c:58:dc:5a:65:11:4a:26:e3:e9:f9:8c:84:d5:
                    3a:f3:64:16:f1:4f:cc:f4:b9:a4:8e:45:a1:61:11:
                    24:72:18:6d:4f:44:1f:c9:ca:43:92:53:1b:88:b1:
                    51:54:25:bf:dc:8e:8f:bd:b4:a6:fa:25:01:5b:18:
                    46:0d:d4:52:e7:ed:69:57:a4:60:17:d0:68:d3:bb:
                    3d:1f:82:d0:3d:78:d0:41:79:b6:32:5e:5c:d1:bc:
                    02:a4:a7:52:02:cc:58:dc:b4:63:8e:8c:33:a8:d9:
                    a0:fd:ef:9a:a6:e8:0b:f7:54:d7:c8:86:73:6c:34:
                    d5:21:96:7c:7f:23:76:7e:67:af:be:a1:59:65:a1:
                    46:c1:f6:67:47:e6:1d:9f:59:27:76:ae:24:48:f2:
                    fd:60:01:eb:ad:4e:67:f8:27:73:33:68:7d:58:b3:
                    62:b7:aa:88:9f:14:03:7a:4c:02:01:36:e1:0f:37:
                    18:53:fd:1f:e1:3c:fd:df:3b:90:b9:36:c3:d0:cf:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.88.0/22
                IPv6:
                  2804:dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28610

    Signature Algorithm: sha256WithRSAEncryption
         33:96:33:b4:01:b3:4f:63:c9:26:ab:07:05:7d:f7:f4:92:06:
         69:79:c9:1c:84:63:d6:e5:d0:8e:47:20:06:8f:4d:42:ba:2b:
         18:7d:ed:e8:65:63:de:15:0f:60:b2:7b:49:14:ae:b4:bb:f2:
         10:74:e1:68:50:64:19:b3:3c:14:15:73:ed:f3:45:8c:1a:25:
         42:9a:f2:8d:0b:1c:0e:ed:7e:88:68:fa:3a:7d:6e:b6:38:b5:
         b6:50:9f:95:97:5b:8d:4a:42:2a:4d:d9:f9:ca:f2:c0:7f:e0:
         f7:79:cc:58:50:33:16:89:31:61:c2:af:7d:fc:48:6e:69:ff:
         e1:31:2f:b7:fb:ee:a8:26:c8:4a:68:b9:ca:79:1c:a5:63:6e:
         cf:a4:00:2d:86:1e:0e:72:64:38:cc:28:ab:d9:45:16:14:42:
         01:02:54:fa:1a:13:5b:8d:7e:e2:23:f4:5e:11:54:a1:4e:e8:
         f6:ea:d4:b5:c3:01:7e:c8:60:7d:fc:84:08:c0:b0:e5:c6:db:
         51:1a:b7:99:56:27:71:bd:2e:4c:16:9e:d4:fa:f4:49:1f:29:
         a8:88:bb:83:8f:06:82:64:75:a6:df:c6:4a:11:65:67:06:ae:
         94:6c:9c:37:24:99:b3:4b:b9:b8:8d:09:25:50:5d:ff:83:5a:
         ed:18:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org