Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.cer
File:                     9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.cer (raw, json)
Hash identifier:          LFDa8bDlDfQZQM7FQ+EJoMbWZXvA9bYfZMO0Gi07Rh4=
Subject key identifier:   9A:C4:31:98:A2:CE:4D:BB:19:BD:A8:C7:E8:35:E6:C5:6F:D7:1F:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50C2A1068EE096D793EF22F384F919CDC18281C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 23:05:09 +0000
Certificate not after:    Fri 15 Nov 2024 23:10:09 +0000
Subordinate resources:    AS: 270985
                          IP: 45.6.68.0/22
                          IP: 2804:7480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c2:a1:06:8e:e0:96:d7:93:ef:22:f3:84:f9:19:cd:c1:82:81:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 23:05:09 2023 GMT
            Not After : Nov 15 23:10:09 2024 GMT
        Subject: CN=9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:57:5b:f5:f3:83:47:a2:a7:56:f8:f6:a4:4d:
                    ff:ef:d4:6a:02:38:97:db:aa:b4:78:1b:62:c8:86:
                    22:63:9d:33:8c:be:13:3e:8f:bf:3c:f8:c7:d5:e1:
                    84:54:65:a5:4d:0b:a7:01:70:5c:b7:66:28:02:31:
                    0e:0e:95:13:58:9c:6d:97:e0:ff:6c:70:51:10:e7:
                    15:f4:1b:7b:12:42:af:c1:41:3c:78:35:b7:ac:9b:
                    f2:8d:9f:2c:a3:58:6d:f8:e5:c6:b1:fa:b4:5c:e8:
                    f4:04:e6:07:44:f9:c5:27:f6:e1:2d:45:9f:23:23:
                    7c:87:06:32:25:5c:45:d6:47:2c:41:bc:bd:52:cc:
                    3d:b7:8a:3d:c5:c3:cd:6b:88:83:1d:06:5e:fc:28:
                    9c:40:fe:3a:6e:c9:fc:e1:08:b7:b1:52:33:a4:70:
                    25:08:5a:f2:03:f3:fd:d1:5f:47:fe:24:30:db:08:
                    f4:95:3e:2d:c0:96:71:1c:ec:fb:34:77:c8:a3:d1:
                    2e:1f:6f:cd:9e:7b:e2:a0:66:44:fe:93:60:56:e3:
                    81:3c:6f:ed:d7:34:f9:37:54:2c:8e:94:ee:47:9c:
                    04:f4:83:72:d5:f7:15:50:8d:04:fe:7f:ff:5a:39:
                    a0:74:29:9c:a7:6b:ab:50:4e:b1:73:a7:76:25:59:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:C4:31:98:A2:CE:4D:BB:19:BD:A8:C7:E8:35:E6:C5:6F:D7:1F:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.68.0/22
                IPv6:
                  2804:7480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270985

    Signature Algorithm: sha256WithRSAEncryption
         68:12:6e:75:79:21:68:6a:44:ae:44:93:8b:4d:cc:6b:2b:71:
         36:fc:d9:1a:b6:10:2e:9b:9a:be:79:e2:6e:9d:48:6d:88:f4:
         0b:3f:58:09:1f:44:39:61:76:18:f2:ec:85:51:a1:66:34:10:
         a7:27:91:8e:9f:e5:5f:49:37:ee:5f:5f:5e:5d:d9:c9:d4:db:
         d1:12:e6:3f:0f:2e:cc:30:bd:55:71:11:1f:16:43:4b:c0:48:
         ea:71:50:5f:a4:e1:b5:9b:4f:01:c9:27:d6:e5:82:18:cb:31:
         b5:76:9b:ba:16:09:ae:e4:9b:dc:b4:a2:1f:24:32:cd:74:3a:
         88:b8:b9:eb:67:4a:60:72:7b:8b:f1:31:ab:10:3f:26:9d:f1:
         cf:7e:14:6c:03:93:aa:de:81:70:57:74:72:d6:f8:9f:91:40:
         cf:ba:37:37:04:1d:c6:22:9d:5c:28:0f:20:0e:17:9c:a7:fd:
         21:c7:78:a3:0f:b1:ba:09:db:d7:cc:e2:2f:8f:6e:01:60:59:
         90:98:d6:4e:1d:81:2e:55:55:df:72:fd:2e:64:75:b4:a4:c8:
         72:c7:4c:70:dc:34:f2:4c:d1:3b:5a:ab:d9:db:ef:9c:de:3e:
         c3:37:fe:f8:ba:50:7c:90:c5:47:2d:15:8a:b6:6c:1d:a9:2d:
         19:50:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org