Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.cer
File:                     9A41EDBD9B15978F61FEB847929580F4B869A73F.cer (raw, json)
Hash identifier:          XBRu8wsNArUEX4eA7676IH3pgQXTLxfQYgr7FuOVvfc=
Subject key identifier:   9A:41:ED:BD:9B:15:97:8F:61:FE:B8:47:92:95:80:F4:B8:69:A7:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77823AE3EC6D729685FBB62EC51C404F737FB4FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Mar 2024 13:02:18 +0000
Certificate not after:    Tue 25 Mar 2025 13:07:18 +0000
Subordinate resources:    AS: 270878
                          IP: 186.194.0.0/22
                          IP: 2804:72d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:3a:e3:ec:6d:72:96:85:fb:b6:2e:c5:1c:40:4f:73:7f:b4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 26 13:02:18 2024 GMT
            Not After : Mar 25 13:07:18 2025 GMT
        Subject: CN=9A41EDBD9B15978F61FEB847929580F4B869A73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:38:31:88:50:4a:8b:32:6c:10:a8:3b:96:
                    46:b4:e0:89:7a:85:aa:34:24:3d:d1:59:fd:87:e1:
                    d8:68:05:b9:68:4f:d2:1c:07:bd:db:ec:2d:ed:ef:
                    f1:a1:4b:0e:15:f2:09:c3:b8:9b:02:50:ea:9a:11:
                    fc:7e:8d:46:c3:58:90:16:0d:5e:83:17:f6:d1:67:
                    64:3c:4c:95:1a:80:65:58:ce:f7:97:fc:ac:56:ee:
                    df:5f:38:ee:c0:4d:76:54:40:1c:de:10:e8:56:37:
                    2b:e5:00:e2:c1:a0:ba:34:7f:9a:8c:9d:78:1c:ed:
                    ab:25:71:f9:af:79:88:9f:55:25:68:ec:24:86:3d:
                    28:38:84:a8:85:cf:d0:26:95:0e:0a:a4:ea:f9:d6:
                    30:be:6a:c0:03:59:86:6a:c2:ab:7d:8d:f9:74:e6:
                    e8:1a:6c:ed:68:af:02:06:04:3a:f3:58:f2:ba:7f:
                    ae:d6:22:b2:f3:3b:be:1e:f6:7c:25:6b:eb:b6:8a:
                    4c:bc:1a:eb:02:c4:71:52:33:07:cf:b0:f7:d7:93:
                    31:d1:bd:76:15:9b:24:23:a5:dc:0f:b5:f8:a2:39:
                    64:45:8d:4b:8b:2d:cf:69:7a:7a:8d:3d:b4:4b:47:
                    83:e9:d6:15:2f:24:8f:fb:bf:7b:25:c2:64:0a:de:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:41:ED:BD:9B:15:97:8F:61:FE:B8:47:92:95:80:F4:B8:69:A7:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.0.0/22
                IPv6:
                  2804:72d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270878

    Signature Algorithm: sha256WithRSAEncryption
         9c:79:53:9c:a1:d3:0c:b9:dd:95:6a:53:7d:0b:54:3e:c9:47:
         d7:17:14:92:a9:2a:65:53:cf:32:f5:07:a3:a4:85:ea:0a:41:
         ec:42:be:7d:2c:26:cd:4c:70:d8:78:fa:10:b8:a9:09:3b:24:
         a2:53:c7:d7:cd:c4:90:93:c4:90:3b:4c:93:b5:a5:7c:f7:94:
         a8:3a:43:d6:88:dd:2a:c0:06:e4:8f:b4:48:b5:c7:ff:d6:f3:
         80:8b:b1:8c:15:6e:11:1f:e5:20:34:c9:4e:87:1a:ed:e4:fb:
         b2:c8:18:27:2b:f5:fb:4c:01:ec:1c:dd:fa:5f:19:3f:64:5a:
         f0:5c:1f:31:01:b3:e9:8a:24:84:dc:94:10:05:ad:d1:1f:ca:
         d8:f3:56:39:b6:15:17:1f:73:1a:90:e7:b4:b0:a6:db:7e:f3:
         a2:70:e4:e7:79:a5:29:b5:23:d9:61:2a:2d:c0:70:a9:e6:6f:
         ce:1c:63:6c:32:c5:4d:32:e6:fb:1c:ba:67:ef:d8:ba:1d:d1:
         b5:76:5d:e0:cf:31:03:dc:bc:1f:74:41:a2:dd:ab:9d:42:0d:
         db:4d:46:1c:35:7d:4e:03:45:71:63:e3:fe:e5:08:66:c4:6b:
         ad:00:99:96:89:4a:f2:f2:9a:25:62:17:9c:38:11:fb:68:c4:
         9f:9f:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org