Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9889F852B3CCC6A413A96CBFC14A2C32AF8FAC2B.cer
File:                     9889F852B3CCC6A413A96CBFC14A2C32AF8FAC2B.cer (raw, json)
Hash identifier:          +eGhCA4znSe3UkA0YLyeifXMMvXOWwzz09bxMWnUdww=
Subject key identifier:   98:89:F8:52:B3:CC:C6:A4:13:A9:6C:BF:C1:4A:2C:32:AF:8F:AC:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C53D727D1D747300134FEBBF9BEB115F4334B74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/9889F852B3CCC6A413A96CBFC14A2C32AF8FAC2B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2023 14:22:06 +0000
Certificate not after:    Thu 28 Nov 2024 14:27:06 +0000
Subordinate resources:    AS: 61942
                          IP: 45.239.100.0/22
                          IP: 131.255.68.0/22
                          IP: 168.196.72.0/22
                          IP: 168.205.40.0/22
                          IP: 170.233.164.0/22
                          IP: 170.239.8.0/22
                          IP: 192.12.112.0/22
                          IP: 201.131.68.0/22
                          IP: 2804:1898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:53:d7:27:d1:d7:47:30:01:34:fe:bb:f9:be:b1:15:f4:33:4b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 14:22:06 2023 GMT
            Not After : Nov 28 14:27:06 2024 GMT
        Subject: CN=9889F852B3CCC6A413A96CBFC14A2C32AF8FAC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:60:00:6b:22:e9:3b:66:49:cb:ee:4e:3c:
                    ac:8e:a8:28:8e:f5:f1:66:51:89:7f:2e:db:2c:4b:
                    2c:6d:83:39:3a:d1:e9:54:bb:ba:a8:43:1a:13:ba:
                    34:fb:dd:5c:b1:b9:63:e2:09:bf:6f:6a:0c:ed:a0:
                    f8:4e:23:c9:79:f7:50:5e:7e:8f:a9:54:5c:ab:31:
                    09:9a:c9:02:26:2b:bf:2b:b3:a2:aa:af:ad:dd:c5:
                    cc:39:12:21:dd:ca:bd:c7:20:8f:0f:4b:b3:cb:25:
                    55:c0:fb:1e:ad:e9:e6:a7:28:2d:f5:0d:9e:80:5f:
                    c6:35:06:e1:29:8d:f4:68:ed:85:ff:4d:a3:64:5c:
                    8f:2d:7d:1a:4d:ac:9b:be:6f:5e:da:e4:0f:ed:63:
                    cb:e5:23:ae:a8:c9:69:4b:85:5f:71:57:3b:d1:57:
                    fa:8b:1b:09:c3:17:87:07:50:ae:34:af:86:64:bd:
                    3e:7d:cc:75:ba:8a:e8:82:e3:bf:79:3d:85:33:96:
                    85:b3:fb:e2:3b:6a:90:56:96:c5:d8:69:26:4e:82:
                    91:f5:ae:db:ce:90:fa:0a:5e:35:ad:32:34:cf:e7:
                    90:93:a5:21:5a:8c:65:b9:ed:69:cc:59:0f:82:8a:
                    21:1c:ce:24:78:4d:c5:2c:92:a9:aa:5f:68:90:4b:
                    13:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:89:F8:52:B3:CC:C6:A4:13:A9:6C:BF:C1:4A:2C:32:AF:8F:AC:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/9889F852B3CCC6A413A96CBFC14A2C32AF8FAC2B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.100.0/22
                  131.255.68.0/22
                  168.196.72.0/22
                  168.205.40.0/22
                  170.233.164.0/22
                  170.239.8.0/22
                  192.12.112.0/22
                  201.131.68.0/22
                IPv6:
                  2804:1898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61942

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:f9:0b:10:92:45:63:1d:98:85:f5:ca:d0:28:45:6c:e6:
         73:d8:aa:14:f3:e7:13:4a:94:14:9b:7e:ec:03:13:76:18:38:
         1d:55:c5:1f:e8:ca:0b:33:ce:40:cd:47:77:9a:fc:ee:e0:de:
         80:f8:95:e7:50:cb:43:a3:2e:76:29:e2:71:f5:2a:43:4c:21:
         f1:fa:96:9c:2d:ed:3f:82:65:b4:a6:45:82:8a:3b:e1:7d:f6:
         eb:04:2e:ef:ae:58:8b:2e:d6:57:5c:af:7a:0a:10:cb:4c:f2:
         07:b3:41:5c:26:d5:01:fd:8f:e5:9d:0b:ae:20:aa:e0:06:88:
         cb:fa:62:40:1d:77:0a:12:3b:23:73:0a:25:9d:d1:22:5e:f9:
         cf:cf:81:5d:3b:0f:f0:62:c8:11:6e:7b:13:92:0c:ba:7d:6a:
         a5:f9:76:1f:f0:4d:af:9f:4a:80:bb:f1:15:4c:6d:14:5a:5d:
         5e:0d:7f:e1:4e:14:9f:46:a1:5d:33:b7:9c:08:94:8a:47:ca:
         62:43:dc:ec:4a:07:f1:c7:97:41:a6:df:46:e4:de:b7:95:c8:
         df:30:e7:a5:7b:15:d5:2f:ec:08:6b:5a:d1:d1:e5:15:b4:90:
         2d:b9:63:3c:19:b1:12:94:e0:91:f2:18:1c:3e:72:43:2e:91:
         04:00:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org