Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9ACFCFF669B71D1E5EB0BDB427D7F75F14297DBB.cer
File:                     9ACFCFF669B71D1E5EB0BDB427D7F75F14297DBB.cer (raw, json)
Hash identifier:          /bkhNHKpPG1nIpO5nH48pmlXK/7uOPz/XULKScldaMo=
Subject key identifier:   9A:CF:CF:F6:69:B7:1D:1E:5E:B0:BD:B4:27:D7:F7:5F:14:29:7D:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AA35AB77850DF3CD1AC80F2450319F3148A2E19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/9ACFCFF669B71D1E5EB0BDB427D7F75F14297DBB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Aug 2023 14:49:06 +0000
Certificate not after:    Wed 21 Aug 2024 14:54:06 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a3:5a:b7:78:50:df:3c:d1:ac:80:f2:45:03:19:f3:14:8a:2e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 23 14:49:06 2023 GMT
            Not After : Aug 21 14:54:06 2024 GMT
        Subject: CN=9ACFCFF669B71D1E5EB0BDB427D7F75F14297DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:d2:1f:87:7d:69:a9:95:ce:c5:38:73:2a:
                    e8:e7:b7:35:90:0d:50:9c:17:c0:5c:1a:ac:d0:d5:
                    65:c4:ff:57:df:e6:95:73:b8:d1:f6:bc:69:90:c0:
                    7c:bd:44:bc:69:c3:a2:63:b9:19:1a:81:dd:b7:a9:
                    0f:56:1b:d9:ca:6a:e6:29:a0:b1:f2:4e:39:69:14:
                    86:48:16:3e:5c:28:57:af:75:8a:66:ca:ab:0d:74:
                    26:a1:e4:36:da:dd:59:7a:ef:f5:30:11:68:ea:83:
                    fd:c0:30:6d:df:40:34:5e:d8:2f:64:0b:ad:55:d1:
                    1e:9d:03:c8:50:ff:77:15:37:09:eb:dc:78:e5:aa:
                    b4:d0:8f:6e:c4:f3:7b:23:86:58:1b:db:bd:21:e3:
                    18:57:80:ce:ba:10:06:f3:b8:dc:3b:e5:f4:9c:d2:
                    04:ff:45:1e:55:8e:bc:d5:6a:4c:0d:85:c2:c6:96:
                    eb:07:18:e6:ff:f1:86:7e:49:e7:1b:6e:91:0e:93:
                    1c:f7:aa:d4:a6:6a:76:01:28:29:68:3a:10:9c:50:
                    be:14:f7:02:bf:1b:d4:c0:c4:25:28:20:0d:44:5c:
                    5f:25:35:56:3c:a8:5d:09:00:81:0b:fb:2f:5d:fc:
                    18:e4:ef:1a:a6:91:e2:52:a0:9f:f7:d0:64:cb:31:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:CF:CF:F6:69:B7:1D:1E:5E:B0:BD:B4:27:D7:F7:5F:14:29:7D:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/9ACFCFF669B71D1E5EB0BDB427D7F75F14297DBB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:12:f7:2e:15:4d:99:22:fa:f0:b3:bd:0f:fb:51:98:dc:
         df:4e:56:ed:e3:2f:49:71:b2:82:6f:96:6f:a0:80:71:82:92:
         ba:b5:99:45:5a:23:69:33:43:f6:2d:fe:e7:af:ef:1c:44:50:
         84:36:a8:43:6c:19:31:5e:90:90:23:01:08:cb:21:56:28:16:
         d1:72:bb:8e:82:7b:3d:91:5f:3c:88:d1:a6:5e:3f:cf:ac:53:
         a2:a3:44:58:ca:84:5e:ac:b0:3a:51:61:99:9a:32:fb:a0:a3:
         43:c5:0e:98:15:63:d6:a5:3f:2d:a3:f0:fd:0f:24:3c:70:6e:
         76:33:54:5f:66:df:56:de:10:bf:87:b4:6a:b9:92:c1:ba:8e:
         4a:e8:f0:5c:55:27:6c:79:41:db:54:f8:36:b4:e3:a8:d0:a7:
         6c:ec:92:f6:06:9f:0f:56:2a:4f:ea:cf:d5:f6:91:b7:b0:4d:
         e1:f7:d2:d3:31:4e:02:f1:73:31:cc:1e:3f:a2:5a:39:64:bd:
         d5:7f:27:f9:b0:a0:dd:aa:cd:3f:77:3e:f8:62:00:81:b2:8c:
         13:b7:2d:14:d4:92:b2:9f:d2:ec:16:98:86:50:02:b3:4a:77:
         55:d1:94:4b:be:d1:48:28:e2:59:89:48:d4:fb:45:6d:ae:58:
         2e:ad:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org