Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.cer
File:                     9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.cer (raw, json)
Hash identifier:          HkBu9prM8+d+ABZfrJJkuJGJd+XNY8ah7uQpR40Il8k=
Subject key identifier:   9A:1A:6D:73:94:0C:2D:9C:DA:54:9F:ED:8C:13:7F:C8:FE:EC:38:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57CDA7F29BB96D5243B24B1342A8CD512B0D144D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 13:55:09 +0000
Certificate not after:    Thu 18 Jul 2024 14:00:09 +0000
Subordinate resources:    AS: 264135
                          IP: 138.94.64.0/22
                          IP: 2804:22f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cd:a7:f2:9b:b9:6d:52:43:b2:4b:13:42:a8:cd:51:2b:0d:14:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 13:55:09 2023 GMT
            Not After : Jul 18 14:00:09 2024 GMT
        Subject: CN=9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:88:09:2e:a7:63:4e:59:0e:f4:1e:ca:e7:b3:
                    04:03:d4:30:49:97:f3:fd:1f:8c:8b:45:84:cc:d3:
                    d0:9b:a6:97:96:29:60:9c:ce:83:e1:84:6e:c0:10:
                    56:52:ed:e3:84:04:d3:ac:a4:bb:b1:1a:19:85:9d:
                    89:37:8b:91:24:65:6b:69:b6:87:c0:b0:54:4a:ab:
                    fc:39:b4:31:cf:17:37:79:f1:bf:7a:66:a0:dd:e7:
                    be:f2:be:bc:4b:5e:9e:79:83:9b:93:73:b6:fc:6f:
                    8a:1c:dc:6d:2a:b9:e6:e2:c2:2f:d8:b9:8b:97:cc:
                    81:82:3a:16:f0:19:40:2b:6f:b7:76:ed:59:da:43:
                    7e:00:8f:d6:d5:0e:e2:80:05:6d:61:69:af:0e:dc:
                    6f:cd:74:96:68:de:c1:9e:79:1e:7d:bc:2a:65:7d:
                    7b:36:8e:e8:0e:6d:49:f7:11:96:25:ff:d8:74:a1:
                    05:37:8d:e6:a4:39:d7:a6:fe:e2:8c:ff:80:75:b9:
                    25:8b:a0:ed:89:34:f4:da:ac:8b:56:73:bd:99:f2:
                    58:f4:93:9a:17:7c:f7:3d:47:b6:bf:06:fc:37:69:
                    f9:e6:3d:86:1d:b3:fb:01:8d:76:44:e0:4c:64:ce:
                    34:e4:aa:b3:7f:08:d3:55:7d:04:83:a2:4b:9e:24:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:1A:6D:73:94:0C:2D:9C:DA:54:9F:ED:8C:13:7F:C8:FE:EC:38:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.64.0/22
                IPv6:
                  2804:22f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264135

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:6c:57:c5:8f:51:0a:ba:40:d9:01:1d:11:da:5f:53:ab:
         9c:ed:9d:f0:5a:27:15:6c:9f:9b:8a:0e:bd:7d:af:b7:cb:c5:
         e1:e3:e9:55:ee:16:32:5b:c5:79:4a:5c:21:92:4c:9d:26:02:
         4c:a0:90:11:aa:f2:c6:0c:9c:66:1b:19:2a:dd:0b:db:b6:2f:
         5f:74:50:1c:3e:fa:eb:53:5f:01:07:5c:88:a0:5b:27:79:7e:
         73:77:f4:83:ac:a3:83:a9:91:fc:91:00:11:56:8b:86:5b:eb:
         e0:d1:6b:f5:e1:18:78:e6:4a:e6:ad:c1:d9:55:db:97:14:27:
         7c:92:fe:7b:04:b2:ac:54:74:00:a6:f5:50:9a:df:c4:1d:dc:
         e8:5c:13:b1:2f:33:f7:49:22:e1:87:96:04:7c:b7:1a:40:a5:
         75:fb:5c:a0:a5:78:52:23:42:7d:bd:f8:f0:c2:c6:77:74:a3:
         c4:76:8c:13:41:d1:05:33:02:28:80:dd:61:42:ec:9b:18:a2:
         cc:b9:b0:ca:63:85:47:c3:b0:9b:0a:9a:ac:1d:2b:c1:c8:37:
         a1:0d:93:7c:34:ac:4d:a7:d8:ff:7a:aa:5f:1f:26:aa:c5:e4:
         86:ec:6b:51:0b:bc:d5:be:b8:78:d4:4e:19:e8:3d:60:8e:6d:
         05:1f:67:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org