Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.cer
File:                     9768BDC37FF7E5159B4DABAF6DA723EC511778CB.cer (raw, json)
Hash identifier:          cxY8WJcg5ALuIgseyBbOt9048HJaegGFHboAreFQ9d0=
Subject key identifier:   97:68:BD:C3:7F:F7:E5:15:9B:4D:AB:AF:6D:A7:23:EC:51:17:78:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C405402FC8517EDDF47DFCBAA86E53F4DBBCCC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 18:52:36 +0000
Certificate not after:    Thu 11 Apr 2024 18:57:36 +0000
Subordinate resources:    AS: 266021
                          IP: 170.245.36.0/22
                          IP: 2804:3940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:40:54:02:fc:85:17:ed:df:47:df:cb:aa:86:e5:3f:4d:bb:cc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 13 18:52:36 2023 GMT
            Not After : Apr 11 18:57:36 2024 GMT
        Subject: CN=9768BDC37FF7E5159B4DABAF6DA723EC511778CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:47:6e:a5:ce:39:50:c5:c6:a9:db:97:ff:
                    b0:1c:be:03:6d:20:92:56:81:ac:a9:c7:55:18:d6:
                    36:3e:4d:be:35:bf:da:b5:e5:03:a7:ce:a7:e7:b0:
                    72:10:19:ae:d8:b7:40:01:c3:89:b5:d4:6c:8f:13:
                    4a:36:97:36:aa:98:e4:42:90:76:a2:36:e9:4b:3c:
                    7f:2e:93:09:ad:2b:ed:30:6c:9b:34:d3:93:0a:24:
                    24:1a:22:7b:00:0f:bf:af:db:c5:0b:53:01:0e:11:
                    b9:9a:d3:35:a7:bc:e2:c8:c9:11:96:82:87:9e:d8:
                    cb:4d:73:4c:00:5b:52:09:72:6a:f2:7c:c6:de:25:
                    d3:20:d9:f9:c6:17:2a:e7:4d:c9:f7:4f:f7:b7:e8:
                    2a:5a:d6:5e:86:0b:b4:07:80:20:3b:de:39:85:62:
                    80:7e:7f:d7:03:18:ed:06:c5:47:0a:c8:a4:69:bb:
                    d6:09:ac:66:f8:1b:3e:6f:e7:41:b0:c4:93:2a:e4:
                    91:64:93:db:ed:4b:1f:30:01:80:05:8c:f3:04:6b:
                    9f:43:84:2c:bd:4e:3a:22:8a:80:d8:9b:3b:5f:4a:
                    57:68:85:c4:7b:bc:c7:c5:d0:50:23:7f:a7:9b:7c:
                    0b:11:fd:18:a4:ad:02:2a:db:9f:12:d2:a2:14:88:
                    5c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:68:BD:C3:7F:F7:E5:15:9B:4D:AB:AF:6D:A7:23:EC:51:17:78:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/9768BDC37FF7E5159B4DABAF6DA723EC511778CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22
                IPv6:
                  2804:3940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266021

    Signature Algorithm: sha256WithRSAEncryption
         9a:16:90:d1:e9:e3:7f:45:e3:bc:7a:05:d5:de:da:3f:4b:69:
         2d:c7:64:fe:a7:6d:15:d8:37:e2:ab:5f:0e:36:17:39:ef:33:
         a3:30:f0:94:a0:cb:88:08:2d:fd:73:70:b2:69:74:51:74:37:
         70:2a:b6:be:0f:65:9a:4a:84:80:dc:43:1b:d3:a8:c0:97:8b:
         9b:5e:d1:da:72:71:4d:e7:e9:7b:9e:ad:28:ba:bf:a2:23:b0:
         90:72:fe:2c:e3:1f:e8:b9:09:f2:e0:3a:1a:01:47:35:e3:c0:
         7a:c6:33:7f:fe:79:f3:00:65:dc:c0:d8:02:9b:0f:e4:8e:e7:
         a8:8a:0e:ad:cc:8d:c4:5e:32:4a:a0:d8:ce:ad:21:86:ee:d3:
         73:5c:76:e8:63:30:3b:8a:9d:4a:1c:90:49:d8:64:9a:d1:6e:
         2f:c5:5e:f7:70:9d:7e:9f:32:c5:73:34:f9:36:3a:3e:2a:8b:
         01:a5:95:bc:6f:e5:72:d0:27:99:12:14:03:0f:f7:a7:6d:d1:
         30:a4:4a:4e:1a:df:c5:ef:75:e2:35:93:7b:ca:41:84:e0:92:
         6d:50:0a:0a:64:65:58:7f:7a:89:77:b7:c7:38:d8:34:c7:2f:
         26:7a:eb:52:41:b9:2e:00:c8:ff:91:e7:09:55:f6:60:04:50:
         a8:c5:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org