Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.cer
File:                     991F9EF30E0F0974AA97C60E2654F0833FACCA1B.cer (raw, json)
Hash identifier:          YrtFbm1/q13tQ9zPOh2eCJjvPVN1OAtMQXC8WFicMdo=
Subject key identifier:   99:1F:9E:F3:0E:0F:09:74:AA:97:C6:0E:26:54:F0:83:3F:AC:CA:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       332ED520C282DC2F52D7854FA4887FDBD16BC9F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Apr 2024 22:12:23 +0000
Certificate not after:    Sun 06 Apr 2025 22:17:23 +0000
Subordinate resources:    AS: 263164
                          IP: 191.6.164.0/22
                          IP: 2804:17ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2e:d5:20:c2:82:dc:2f:52:d7:85:4f:a4:88:7f:db:d1:6b:c9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 22:12:23 2024 GMT
            Not After : Apr  6 22:17:23 2025 GMT
        Subject: CN=991F9EF30E0F0974AA97C60E2654F0833FACCA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:56:48:f9:08:fc:f3:d7:26:44:04:12:a4:
                    46:1e:7c:fa:24:8b:34:a3:e9:c4:76:6e:db:35:53:
                    88:ba:f8:c3:f8:57:02:f5:3e:11:91:a0:f6:54:f8:
                    e4:c2:84:68:2d:39:ab:34:51:10:55:81:5a:e1:ae:
                    86:92:41:7e:4f:33:d9:ab:cc:35:96:8a:46:8a:da:
                    d0:c7:91:09:a6:b4:46:46:d5:4f:fd:90:82:2c:4a:
                    f3:40:86:9d:4c:d3:9a:73:74:7e:5b:39:dc:0e:ac:
                    3c:46:ad:19:f4:c6:74:31:81:cf:45:b3:47:07:b4:
                    53:71:8f:d2:d5:d4:16:36:7d:53:68:e7:9e:08:1c:
                    71:f0:4d:6b:41:f5:7b:61:44:e9:a2:76:4d:a7:35:
                    6a:46:5a:4e:c1:66:e8:b5:b1:2b:6e:9c:24:cd:50:
                    45:f3:17:34:d4:b2:b9:2b:25:f2:aa:2d:f2:6f:13:
                    e0:05:39:44:93:21:3f:02:d9:42:37:7c:32:90:ec:
                    3d:f8:32:e6:00:00:f0:3d:8f:15:4c:16:92:e4:5d:
                    6b:b1:62:cd:01:67:5a:14:69:60:e0:59:01:e1:3c:
                    4e:44:80:61:bb:97:14:48:81:ad:a1:a9:2f:f3:7f:
                    9e:3a:e5:54:0b:e4:40:f9:83:d0:a1:50:9f:ac:0b:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:1F:9E:F3:0E:0F:09:74:AA:97:C6:0E:26:54:F0:83:3F:AC:CA:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/22
                IPv6:
                  2804:17ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263164

    Signature Algorithm: sha256WithRSAEncryption
         28:70:1e:ea:45:83:f5:74:80:47:18:7a:24:95:6b:08:ad:09:
         9d:3b:f7:d3:ff:4c:fc:d1:35:8e:96:1a:99:f8:55:5c:8a:a1:
         e8:4f:cb:17:52:35:81:62:df:73:eb:e6:7f:48:69:5e:be:21:
         af:37:82:a6:ad:0f:7b:df:c6:05:c7:8c:30:ba:1f:5d:16:5e:
         57:87:63:42:73:bc:f4:2a:3b:9f:bb:e3:3d:03:5c:df:b5:04:
         dd:26:54:f3:f1:96:e1:2d:71:fc:95:b8:6a:9a:77:fa:93:9a:
         c4:8a:0f:10:33:12:8c:96:2a:cc:0f:1c:a6:fa:ff:33:68:a6:
         ff:66:79:f0:4c:2b:e9:55:c5:77:87:ac:ca:3e:9c:c7:48:b5:
         1a:f9:6c:33:48:bb:85:64:a9:1e:96:19:41:23:65:9c:b7:34:
         6f:60:8d:bd:3b:51:9d:5b:e6:55:3d:87:01:4e:e9:1d:7d:c3:
         e1:4b:53:70:3b:9d:00:52:da:fc:d7:fe:fd:54:5c:35:ae:60:
         8a:8a:83:ce:04:b3:e6:01:a8:5c:2b:b5:5d:6c:4d:3b:92:34:
         da:c6:d9:65:90:6f:8c:5d:4a:96:43:d2:56:45:43:1f:ed:d8:
         5e:a3:a0:3b:30:86:19:bb:5d:39:f1:fe:5f:d1:21:19:3f:fa:
         2d:1a:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org