Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.cer
File:                     9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.cer (raw, json)
Hash identifier:          sd8oAzZOr4rVfp2e82WhhhV6QT3EzxjrGZQq2KNCmU8=
Subject key identifier:   9A:70:F3:8D:C7:D8:D6:2E:DE:E0:B9:D5:B4:7E:71:66:54:1A:49:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A8ECA79EB63B7F3A14934A84A26153EFEEFA8C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 11:45:26 +0000
Certificate not after:    Wed 25 Dec 2024 11:50:26 +0000
Subordinate resources:    AS: 267561
                          IP: 45.70.112.0/22
                          IP: 2804:434c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8e:ca:79:eb:63:b7:f3:a1:49:34:a8:4a:26:15:3e:fe:ef:a8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 11:45:26 2023 GMT
            Not After : Dec 25 11:50:26 2024 GMT
        Subject: CN=9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:a3:7f:ca:c9:a8:77:7e:e7:89:33:01:fc:
                    e9:1c:d6:90:dd:90:52:5c:26:49:3c:7e:cc:cd:12:
                    c9:f5:04:23:f4:ef:8c:79:d6:ff:6d:0c:3f:53:17:
                    98:f4:41:0d:e9:af:b7:1b:bc:dd:01:2e:b1:10:86:
                    10:95:d5:f9:a9:a1:63:07:8b:83:88:98:fb:fa:e7:
                    70:2f:b4:96:a1:ab:5e:bd:cf:e5:25:bf:75:af:b6:
                    b1:fe:dd:9a:3e:a5:4b:cc:b7:be:43:fb:ef:08:4a:
                    3f:65:a5:46:51:2b:a5:0c:45:d6:66:d9:46:ed:d0:
                    9d:3b:48:7e:86:2f:ae:4b:8b:e5:ad:bf:d4:f2:8e:
                    e7:ce:fd:0f:c9:b9:63:5b:06:d6:c8:6c:d8:fd:6d:
                    1b:54:77:12:e5:05:e6:4f:6f:85:df:f6:31:bd:45:
                    66:70:ed:09:46:07:59:b2:65:9d:01:52:bf:ca:f9:
                    41:5f:8b:65:3d:8c:e8:ea:34:25:bc:d5:9c:4a:af:
                    22:a2:35:e9:27:2c:be:99:96:e8:61:a4:0e:32:bf:
                    52:d0:78:33:2a:ab:d2:0f:7b:ee:c5:e2:0a:92:1d:
                    5e:1b:45:94:92:af:86:b0:a5:3c:68:37:26:cf:11:
                    e6:98:55:8b:42:d0:f1:60:59:53:5f:13:71:d7:16:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:70:F3:8D:C7:D8:D6:2E:DE:E0:B9:D5:B4:7E:71:66:54:1A:49:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.112.0/22
                IPv6:
                  2804:434c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267561

    Signature Algorithm: sha256WithRSAEncryption
         b4:7d:d7:7c:d1:bf:d3:a6:2c:0c:23:8c:0b:aa:3f:3c:5b:01:
         6a:3c:bd:63:e5:ad:a9:af:58:98:59:2e:cb:d3:e5:44:30:11:
         74:de:6c:ca:09:8b:cc:04:27:68:72:9e:21:b2:bc:0f:11:14:
         7b:d0:d5:97:4a:48:f0:42:3a:a7:19:67:45:5c:50:b1:a0:d9:
         34:b1:ab:a8:34:51:fd:17:7e:7d:2a:9a:f3:60:86:43:0d:7e:
         a2:da:15:9a:79:bb:fb:7e:cf:29:2a:21:e7:1b:d2:81:64:68:
         db:d4:cc:b2:9b:e2:a5:71:a8:a8:3e:35:25:86:fe:79:70:b2:
         38:74:06:6b:82:98:94:e7:f1:3c:91:fa:2b:0e:5a:ec:2c:a0:
         2e:fe:7a:a1:2c:28:56:ab:0d:8c:f3:66:09:98:ec:9f:4b:d1:
         52:4f:74:18:5c:7d:0a:ef:e5:68:32:d9:83:9e:03:0f:47:06:
         a6:65:dc:b7:68:22:47:f8:1c:9f:19:bf:ec:59:41:3b:75:8d:
         cc:01:cf:74:e4:44:9e:d6:61:86:62:03:3f:42:92:4f:6c:e2:
         7b:e4:06:f2:99:fb:09:f3:ed:7b:9e:a4:67:6e:1f:82:2a:1f:
         a8:e2:48:9f:04:5a:e5:61:aa:1e:95:b3:e9:75:d1:02:54:38:
         51:9d:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org