Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.cer
File:                     9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.cer (raw, json)
Hash identifier:          PjVDe8hzjH2+8xunZJONJmnxwPfdap0HlKAhpnoT8sw=
Subject key identifier:   9A:3B:4A:9D:5D:3D:92:76:A2:31:F8:70:EE:8E:C3:98:FF:B7:3A:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E1504B600A03755490846F4F0B14DDD0F03A8DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 20:17:52 +0000
Certificate not after:    Tue 17 Dec 2024 20:22:52 +0000
Subordinate resources:    AS: 265301
                          IP: 168.121.76.0/22
                          IP: 2804:2dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:15:04:b6:00:a0:37:55:49:08:46:f4:f0:b1:4d:dd:0f:03:a8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 20:17:52 2023 GMT
            Not After : Dec 17 20:22:52 2024 GMT
        Subject: CN=9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:f7:61:26:77:ca:40:3b:7e:d2:d3:eb:76:
                    80:31:4b:2a:e4:91:b0:af:0e:de:b6:a8:e8:26:11:
                    72:c9:9b:8b:b8:26:48:2d:f1:b0:cb:34:28:d4:52:
                    4b:6e:f6:71:d8:1e:0e:db:aa:9a:d0:0c:73:37:f8:
                    85:ee:12:07:a3:77:0f:a8:b3:15:6c:bf:a1:20:20:
                    bb:9e:30:56:2a:5a:dc:dd:95:ac:17:91:65:40:3e:
                    67:75:05:fb:20:a0:63:f1:fd:46:7b:4a:58:75:c4:
                    c9:1f:13:51:7a:79:7b:d8:9f:83:08:6d:3a:04:c3:
                    34:6a:ff:72:0a:a3:56:15:4e:f7:1b:b8:90:90:73:
                    3f:ba:09:72:63:c3:ea:62:05:49:a0:89:d7:68:49:
                    51:e5:67:77:a7:4c:ba:53:9f:0c:bb:c2:d8:ba:8d:
                    4c:11:3a:50:46:53:03:cd:aa:63:e1:b4:3c:67:99:
                    1a:a7:56:6f:b3:61:71:97:8d:0e:b8:02:d9:52:2f:
                    95:de:a4:01:f6:76:15:73:56:b8:bc:0d:b1:8d:50:
                    aa:f1:82:2e:2f:6e:1d:90:55:cb:10:5c:f1:8b:59:
                    6b:94:b6:f4:10:d6:7b:0e:51:ab:ea:4d:31:8d:d0:
                    2c:f5:6d:64:8f:bb:7d:02:dd:03:3a:f7:2b:e0:0e:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:3B:4A:9D:5D:3D:92:76:A2:31:F8:70:EE:8E:C3:98:FF:B7:3A:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.76.0/22
                IPv6:
                  2804:2dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265301

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:aa:45:f9:2b:36:04:9a:f8:d9:a9:1b:75:19:c0:34:cb:
         e3:95:1f:58:a3:8a:d4:37:9c:a3:ff:f6:4e:6b:fa:c0:32:8b:
         4b:87:e0:51:15:26:d9:4f:a7:2d:b8:6e:6f:f5:cf:14:c9:12:
         2b:50:c5:3b:6b:9e:42:6e:80:2e:56:20:2f:56:38:6d:5c:2e:
         ee:b1:95:ca:72:52:1a:4d:e7:4f:bf:89:da:39:db:3b:59:df:
         5b:6f:24:05:05:7f:de:6c:07:53:8c:6d:ec:ad:0b:bb:a2:cf:
         cc:e6:46:be:b0:24:7b:d1:4f:6c:3b:64:1e:5d:9e:ae:62:92:
         eb:fd:79:38:c3:79:c0:40:92:07:ae:7c:d9:1f:f7:36:1e:41:
         37:3d:79:de:54:69:a5:f8:98:3b:98:d7:fd:ec:fd:6d:04:47:
         9f:7d:ce:4e:07:2f:c8:9a:28:c0:5c:07:74:ac:b9:71:8b:6e:
         0d:f9:9e:da:52:fd:9d:f5:ca:75:41:72:28:d5:e6:c0:95:97:
         d2:47:49:3b:39:d3:a7:83:73:ad:cc:08:46:ec:8e:3f:96:f2:
         8d:cc:73:65:fc:ae:a8:ba:e0:9d:d3:cf:7e:97:8c:c2:be:c6:
         84:b6:8f:63:7f:68:25:75:68:5b:3f:e8:45:fc:60:61:09:a0:
         ff:86:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org