Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
File:                     9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer (raw, json)
Hash identifier:          8L3prBc8gukvYJfwt6Lo5YHpOVfkAFTIPQLTu3AD47o=
Subject key identifier:   9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54BD00CA4C8556397820E27011752723EE9014B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 07:32:45 +0000
Certificate not after:    Tue 27 Aug 2024 07:37:45 +0000
Subordinate resources:    AS: 264393
                          IP: 131.161.216.0/22
                          IP: 2804:1dc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bd:00:ca:4c:85:56:39:78:20:e2:70:11:75:27:23:ee:90:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 07:32:45 2023 GMT
            Not After : Aug 27 07:37:45 2024 GMT
        Subject: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:1f:dd:31:39:ba:14:3c:c2:76:97:d1:4d:
                    1b:35:00:68:2f:1b:9d:7d:12:30:55:d8:f6:2f:0e:
                    83:4b:05:80:91:05:d4:53:96:27:6b:fd:a6:d3:48:
                    14:6a:f9:6e:ca:5b:c1:9a:66:49:7f:ea:2e:81:4d:
                    08:fb:6a:61:de:e4:fb:b5:53:ed:29:2d:37:af:d8:
                    28:24:f6:01:20:09:81:d3:e4:be:02:21:97:c7:36:
                    5f:cf:44:53:41:10:39:9d:86:ee:81:53:77:01:88:
                    53:6d:7e:07:db:81:13:d8:6c:9e:ec:74:b7:86:67:
                    2a:ca:e0:83:ae:e4:33:d2:96:51:a0:b8:bb:ac:ef:
                    b6:66:e7:5d:8d:ef:73:b1:aa:9a:09:3d:ba:f1:1a:
                    aa:e0:89:23:3c:53:ca:fa:b9:7e:f4:3e:ed:cb:d6:
                    a0:8c:30:93:3e:70:54:a7:77:b9:fe:79:15:31:1f:
                    dd:5b:9f:22:f2:ef:5a:80:0b:4d:eb:29:47:d1:02:
                    e8:86:2d:15:27:c7:28:0c:a7:ee:32:b7:89:40:aa:
                    8c:04:38:5b:70:80:41:bd:3e:df:0e:fb:48:60:7f:
                    49:5c:59:95:b8:51:1b:e6:cc:a6:22:2b:f3:a4:9f:
                    73:33:44:bd:3f:d0:a5:dd:47:be:b8:0c:8e:ba:9f:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.216.0/22
                IPv6:
                  2804:1dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264393

    Signature Algorithm: sha256WithRSAEncryption
         6a:77:22:d2:3c:c6:ad:5d:96:bc:31:bc:6a:2d:01:2f:05:4c:
         ac:4c:aa:a8:30:5b:b6:ea:3f:8c:4a:04:50:cc:26:01:be:3e:
         ff:35:e0:6f:70:be:82:0f:24:08:57:cf:65:5c:44:41:05:8c:
         1c:ec:d3:c1:a4:76:e8:dd:ca:96:5c:e2:76:a4:09:61:b6:7d:
         f7:21:ee:e1:73:75:b7:af:2b:d6:5f:3d:b3:ee:4d:b9:98:d8:
         b0:e8:48:dd:26:d3:a4:df:6d:dd:76:81:f7:77:4b:60:16:6a:
         27:43:f6:43:54:8c:f4:6c:34:53:51:c9:0f:8c:60:99:7d:4b:
         7b:78:46:bb:7a:4d:02:36:e6:43:4e:d2:90:27:90:82:ae:27:
         60:cb:ff:15:0c:43:4c:82:b8:1d:fe:aa:b3:2d:24:24:aa:52:
         3a:43:fb:46:d4:e7:43:d9:e4:1a:81:0d:45:f1:a5:ad:4a:99:
         bf:58:e9:ce:05:47:8d:53:46:20:6a:e2:fd:df:7e:bd:22:93:
         06:48:0e:19:bc:6f:e1:cf:c9:d8:21:27:b9:80:a2:75:1c:b8:
         a2:03:e0:be:c8:d6:10:23:17:12:e2:df:ea:c8:fc:8f:9c:57:
         16:bb:b8:94:d4:38:a8:4b:4e:08:c1:d2:a5:9e:9b:83:97:83:
         0b:55:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org