Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
File:                     9AB232D2E2328522F328939E61A9457DA0361AF1.cer (raw, json)
Hash identifier:          OrMXir+Phyk8Nk+haZSWJpem5nqnkBuzB+hUpNfBLH8=
Subject key identifier:   9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E2538C5FA9085D104B35AD2A399B7545807F6D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jun 2023 12:07:39 +0000
Certificate not after:    Sat 22 Jun 2024 12:12:39 +0000
Subordinate resources:    AS: 264589
                          IP: 138.36.240.0/22
                          IP: 143.202.228.0/22
                          IP: 2804:2210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:38:c5:fa:90:85:d1:04:b3:5a:d2:a3:99:b7:54:58:07:f6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 24 12:07:39 2023 GMT
            Not After : Jun 22 12:12:39 2024 GMT
        Subject: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:7c:6d:ad:8f:02:79:00:a8:fa:e8:69:42:
                    51:d1:d2:e6:9b:f0:f6:a7:e8:8e:38:95:58:b4:67:
                    48:14:87:35:f5:1a:a0:00:ce:1a:cc:84:be:89:cb:
                    f6:c5:f1:10:57:86:39:5c:2d:b8:e6:02:18:85:64:
                    01:d6:ce:08:ef:b0:d0:bf:81:98:6c:a2:d3:f7:bd:
                    5a:6e:2d:ca:e5:63:49:66:e6:ff:af:ed:4e:4b:51:
                    82:98:38:f9:e1:19:9f:2a:5d:98:72:f3:0c:fb:f0:
                    d0:b4:f4:a4:d5:3e:d4:81:c8:68:92:a4:a2:87:79:
                    3c:ff:97:0a:5c:78:fd:7f:3e:c0:68:20:4b:7e:b7:
                    db:41:f9:c1:54:11:0c:c7:bd:9d:53:31:e2:49:6d:
                    a7:6d:43:57:3e:f5:3b:f5:03:78:a8:55:28:9b:31:
                    33:bf:fb:9e:05:9c:37:35:b9:94:95:1a:21:51:5b:
                    f4:70:c2:67:24:ba:83:31:cb:00:fd:4e:b1:2c:41:
                    62:0a:78:84:f7:16:74:65:7a:80:71:9f:e4:3c:ab:
                    59:23:dd:f8:cc:7f:10:23:b9:82:39:11:31:a8:73:
                    85:89:37:20:33:35:9a:fb:02:37:92:71:b8:7b:72:
                    70:26:2f:ba:9b:8c:8b:f1:96:32:0e:8d:04:d2:5b:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.240.0/22
                  143.202.228.0/22
                IPv6:
                  2804:2210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264589

    Signature Algorithm: sha256WithRSAEncryption
         54:84:3a:47:87:6d:7d:d3:94:fe:61:0b:1f:0f:16:8d:28:fd:
         88:89:47:ea:70:a0:fc:c1:2a:ee:41:fb:8c:2b:c0:5f:54:2c:
         a4:40:06:1a:3e:a6:f4:6c:37:c0:20:ed:66:62:96:03:b8:06:
         00:7d:ae:14:1c:bc:b8:9a:a1:83:6f:89:f5:33:59:92:70:7d:
         d6:50:e0:6e:b9:52:d5:92:15:02:91:9a:db:f3:05:cc:62:c6:
         11:9e:03:da:cc:ba:54:9a:aa:f6:57:8a:25:f5:97:6d:2d:fa:
         45:65:37:e3:49:b6:6a:c5:75:f3:69:1c:6a:b0:36:c9:9d:85:
         91:76:2f:4e:4d:57:e7:19:f8:77:b0:d7:42:05:1c:c0:4a:aa:
         b2:7c:5c:68:20:c7:65:bc:17:3f:bf:34:ef:85:13:5a:cc:a9:
         8f:84:10:d4:fa:a9:50:a9:bf:70:e9:4f:5d:29:71:a6:30:ae:
         19:1c:0a:fb:e8:b7:10:d3:a6:27:be:2c:7b:11:51:78:da:f8:
         7f:2a:d5:ea:77:c6:60:da:63:dc:5d:34:b5:a6:52:3b:b4:56:
         51:56:0c:f7:2f:f5:6a:77:49:89:f4:0c:cd:e4:e5:67:6b:40:
         bf:d6:d8:6d:c6:5d:b7:71:e6:99:45:db:3e:43:08:fc:b8:fe:
         ff:b4:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org