Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.cer
File:                     9A6C850A6CFC6280C718D75F48315458AEB33DB5.cer (raw, json)
Hash identifier:          KqcX2pqVOnvmBuDWVE6YXRiQDDJpvwTcSC6SOPTruig=
Subject key identifier:   9A:6C:85:0A:6C:FC:62:80:C7:18:D7:5F:48:31:54:58:AE:B3:3D:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B85B26553AB50F5AF23E95A304BE02B48F02E36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Sep 2023 11:23:40 +0000
Certificate not after:    Thu 19 Sep 2024 11:28:40 +0000
Subordinate resources:    AS: 28232
                          IP: 189.127.32.0/20
                          IP: 2804:7ed8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:85:b2:65:53:ab:50:f5:af:23:e9:5a:30:4b:e0:2b:48:f0:2e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 21 11:23:40 2023 GMT
            Not After : Sep 19 11:28:40 2024 GMT
        Subject: CN=9A6C850A6CFC6280C718D75F48315458AEB33DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:5c:41:3a:72:52:22:68:e0:29:12:86:f8:
                    c0:d8:14:17:24:d3:d7:8f:98:20:90:d0:1f:77:75:
                    8e:f6:06:7a:02:1d:99:9a:8e:8a:d6:4d:15:45:f6:
                    3b:b4:98:98:fc:f9:27:3b:d2:91:f5:2e:0c:23:47:
                    46:53:c3:39:8e:9c:e3:bb:b3:5e:3e:e3:b3:3b:72:
                    1e:66:5b:ca:2f:75:e1:58:26:69:07:6a:9f:65:44:
                    92:52:0f:44:26:b9:66:11:f6:8f:f9:bc:ea:de:f1:
                    30:1b:c0:81:6f:51:e3:c0:13:7d:e2:8b:32:e1:e0:
                    ab:1b:ad:35:bd:e0:da:34:9a:8d:67:95:dc:d5:de:
                    08:3e:da:c4:2d:33:11:01:b6:98:7b:c2:fe:f9:51:
                    35:5f:8d:49:df:54:ef:9d:ee:08:85:2c:85:46:33:
                    47:3d:5f:a1:4b:de:4d:db:f6:51:ed:4b:bc:b4:87:
                    02:98:d4:d2:c7:2d:bf:f4:24:77:55:74:8f:7b:18:
                    4c:33:cb:08:d3:79:98:03:f7:ee:97:cc:97:9f:21:
                    35:87:03:8c:bf:fa:9c:f2:ca:06:26:94:03:fd:27:
                    f7:fb:b6:52:d0:40:b3:55:7a:f6:cd:d4:3b:77:cb:
                    35:f1:5a:a7:a7:c1:f1:fc:f0:0a:43:33:64:d0:ea:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:6C:85:0A:6C:FC:62:80:C7:18:D7:5F:48:31:54:58:AE:B3:3D:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.32.0/20
                IPv6:
                  2804:7ed8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28232

    Signature Algorithm: sha256WithRSAEncryption
         9a:05:39:ec:8b:0a:c4:2c:fd:9f:e3:83:39:5e:60:b5:47:f6:
         73:c2:2d:31:51:47:ae:fd:1f:7b:3c:c7:ce:e9:bd:e9:e3:22:
         a8:1e:23:e8:44:23:94:3a:0d:b9:42:c5:d6:36:36:f0:9b:8a:
         a4:f0:ab:77:12:5c:7d:cc:0d:ef:42:79:d4:fc:ad:3e:2e:84:
         31:97:cd:e5:08:4e:8a:85:05:56:30:92:d9:7d:f6:2d:5a:fc:
         68:63:79:d9:b7:de:8c:2a:a2:7d:c8:5b:78:69:25:e9:b8:17:
         cf:a6:d7:7c:ea:6a:dc:2b:ae:fd:03:ce:7a:71:7e:dc:69:9c:
         47:e4:b2:38:2e:99:4a:f0:13:a0:f8:1d:6f:63:f7:ea:1a:06:
         ea:1f:12:62:df:c9:09:f1:bb:11:5e:18:e8:90:0d:99:50:54:
         19:47:3b:6a:ff:d2:39:73:44:fa:00:f2:32:bf:1e:c7:f9:75:
         78:db:ad:ce:c0:ca:f6:29:f3:ea:15:e8:20:4d:ff:91:9b:47:
         a0:bd:ad:13:f8:eb:97:07:6e:05:d5:da:4b:ea:b5:68:b1:83:
         83:0f:51:78:6b:0f:9b:86:dc:ca:9f:5a:6d:68:4a:8e:1e:d6:
         1e:67:5a:aa:ac:94:c1:af:fc:72:41:24:79:67:14:d4:a6:92:
         10:c3:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org