Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.cer
File:                     97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.cer (raw, json)
Hash identifier:          v4oMWrtcw4vnUbCbYgPkjhOV0h4lEK7D2zOsICK1it4=
Subject key identifier:   97:A1:1D:CC:2B:F9:05:A9:53:B5:DA:BF:2E:0E:2D:7A:85:C9:F2:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B8FDC1F8853AD2124EC01528D84F32E73E42235
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 18:29:50 +0000
Certificate not after:    Wed 25 Sep 2024 18:34:50 +0000
Subordinate resources:    AS: 268487
                          IP: 45.161.248.0/22
                          IP: 2804:51f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8f:dc:1f:88:53:ad:21:24:ec:01:52:8d:84:f3:2e:73:e4:22:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 18:29:50 2023 GMT
            Not After : Sep 25 18:34:50 2024 GMT
        Subject: CN=97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:0a:bc:ff:26:2f:fa:f0:67:96:e0:6d:f9:
                    11:bf:8b:29:e9:12:90:28:34:00:3d:5f:8c:52:6f:
                    3c:e9:59:ad:a4:9a:69:b2:8a:d9:fe:be:65:a6:fd:
                    c4:ba:07:58:0b:58:3e:9a:92:e4:7c:9d:8d:6e:c6:
                    8b:24:dc:55:b9:9a:72:b2:bd:3e:0a:96:54:62:db:
                    1b:c2:94:7a:40:25:a0:48:00:e3:9f:98:fc:78:cd:
                    3e:21:d7:5b:64:45:3c:4b:ee:1e:43:e2:72:36:e3:
                    91:0a:58:d0:4d:0a:f0:b6:3e:d1:27:c4:6d:5b:29:
                    d5:8e:5f:5b:28:d2:ef:2c:06:e0:b7:94:01:85:9b:
                    06:24:07:be:c2:f9:2d:5e:6a:5d:83:04:a2:30:44:
                    76:bb:4f:79:89:a7:71:93:6e:75:21:9e:39:ea:33:
                    75:a9:5e:63:28:7f:35:ee:89:05:9c:84:3f:7d:f4:
                    fc:80:d8:a9:44:65:f2:44:5f:e3:5f:65:a4:74:27:
                    8e:6e:7e:f1:b4:dd:b3:d2:13:28:28:27:c5:67:f9:
                    19:a2:fb:8e:31:5d:3b:ce:0d:43:72:1e:45:76:f3:
                    4b:54:c9:82:8a:46:3c:12:09:bc:88:1e:11:81:05:
                    85:43:18:59:2e:d8:d3:28:80:35:b3:25:da:f3:38:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:A1:1D:CC:2B:F9:05:A9:53:B5:DA:BF:2E:0E:2D:7A:85:C9:F2:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.248.0/22
                IPv6:
                  2804:51f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268487

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:ad:ad:fa:14:42:16:eb:ac:cc:4e:f3:cd:ad:c5:27:89:
         75:ec:aa:6f:76:b4:29:ac:b2:24:c0:90:fa:af:38:9d:32:7d:
         4f:ac:d9:e0:44:16:ab:05:97:0f:e5:e0:f1:e7:43:29:80:6b:
         19:ae:fa:94:db:b5:fc:cf:b9:fd:07:c8:db:d8:21:81:98:f6:
         ba:e2:c6:a3:67:5e:80:d7:dc:23:e0:2b:2d:78:48:79:42:10:
         f5:76:d8:64:5f:0e:4f:e2:9a:93:1c:43:d1:c3:22:c7:90:0e:
         7e:5e:2b:1a:62:7e:cb:1b:d7:2b:8a:ab:9b:17:49:3a:b1:dd:
         df:f4:f2:82:cc:e1:b8:20:42:3e:e6:fb:c8:a6:0c:e4:25:eb:
         6a:0a:9a:59:17:f3:6f:ae:db:93:81:26:48:e9:9f:d1:69:f7:
         db:22:0b:ce:43:0d:e2:c0:22:81:5e:30:e2:f3:87:f6:d7:ab:
         69:2f:39:79:72:a4:07:08:02:ce:1a:52:44:cb:b1:b0:40:e6:
         14:e4:e6:8b:9d:79:1e:c5:21:37:fd:86:77:3b:30:72:9b:7c:
         ca:f0:40:a3:82:0d:fe:3e:52:35:ff:2f:0a:6d:99:db:af:ae:
         8f:48:f8:9c:2e:0a:09:a7:6f:99:18:45:c5:4d:20:1b:0d:84:
         e9:e6:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org