Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B0F592B7D751D7B5771821DB7222329D8990DFD.cer
File:                     9B0F592B7D751D7B5771821DB7222329D8990DFD.cer (raw, json)
Hash identifier:          BwxBhGDifVRhdqD8atZfnG4iAmXgs2A69AmZGM/Vcro=
Subject key identifier:   9B:0F:59:2B:7D:75:1D:7B:57:71:82:1D:B7:22:23:29:D8:99:0D:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AAD83BF20098266348739F3DBA54F1C0BBC3EE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/9B0F592B7D751D7B5771821DB7222329D8990DFD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 01:21:16 +0000
Certificate not after:    Wed 22 May 2024 01:26:16 +0000
Subordinate resources:    AS: 265263
                          IP: 168.90.32.0/22
                          IP: 2804:2d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ad:83:bf:20:09:82:66:34:87:39:f3:db:a5:4f:1c:0b:bc:3e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 01:21:16 2023 GMT
            Not After : May 22 01:26:16 2024 GMT
        Subject: CN=9B0F592B7D751D7B5771821DB7222329D8990DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:02:8f:80:24:b7:88:99:2c:7e:48:14:86:
                    18:10:6e:11:1e:9c:a3:4e:5a:d9:ef:2d:61:7e:97:
                    1c:d1:28:9e:58:90:f8:2d:03:41:87:e6:e7:d2:97:
                    c2:10:59:4a:cc:aa:6c:00:0b:f3:ab:17:9b:b8:75:
                    f7:46:01:af:d2:02:c3:38:fa:bc:46:1c:30:5e:27:
                    0e:b8:5f:b2:05:d4:c8:92:47:ef:b1:0c:f6:15:a5:
                    e5:32:92:75:4e:d2:a7:29:68:02:9c:82:75:ac:a0:
                    6b:54:8f:9b:77:c3:48:ac:f4:5e:6e:8b:32:ca:14:
                    ea:50:93:d6:94:b1:c7:19:72:00:b1:23:2e:1e:bb:
                    51:b8:a6:b9:4f:5f:cb:24:fd:a1:11:c4:06:68:42:
                    35:18:c6:38:e4:00:18:03:57:a9:6c:9d:8a:2c:bd:
                    95:6c:fe:e4:3a:13:fe:05:b1:9c:59:e0:18:16:aa:
                    08:b9:c8:41:cd:cc:15:d2:23:85:9f:d0:bb:36:6c:
                    24:af:6e:af:b2:79:85:2e:12:74:2a:45:b5:7d:0b:
                    76:af:0e:11:56:48:d0:3a:5a:51:96:ad:18:ad:3c:
                    07:c8:d2:e1:87:02:4a:76:fe:1b:e3:53:73:5a:22:
                    d0:3b:ef:47:38:72:27:57:1d:fc:75:4a:57:17:26:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:0F:59:2B:7D:75:1D:7B:57:71:82:1D:B7:22:23:29:D8:99:0D:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/9B0F592B7D751D7B5771821DB7222329D8990DFD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22
                IPv6:
                  2804:2d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265263

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:c9:eb:3d:89:35:70:d7:e5:f4:f9:5f:b0:a2:d8:66:2f:
         21:c4:cb:cf:cf:19:b9:31:3e:4f:da:11:6c:fd:37:b4:0d:13:
         58:5a:b0:86:3c:10:f5:c7:3c:58:2f:2e:16:b2:ba:96:6a:c0:
         5d:d4:5d:74:9d:ac:22:c3:ea:ae:f5:62:20:75:20:90:7f:3b:
         66:5c:57:2f:34:61:c7:6b:66:c2:c9:09:7f:0a:56:00:77:86:
         1b:8e:50:9b:9b:ee:5a:df:39:c7:56:28:80:8f:67:03:bb:31:
         4f:9b:64:5a:47:00:aa:48:8f:a4:be:9d:13:f8:d7:a1:8a:35:
         f3:5c:4d:c3:ff:0d:be:de:5a:6e:2a:e5:6e:c0:ff:ec:0b:46:
         97:5b:e1:24:e9:bc:17:a3:3a:d3:72:14:f5:a5:9d:4a:34:dd:
         c9:54:3f:98:d9:56:b4:7a:16:43:66:d1:ba:66:9a:6c:09:76:
         97:5d:13:e0:06:ee:6b:62:e0:c6:5c:10:73:51:a5:f6:08:2f:
         ed:05:f1:c4:00:44:cc:f2:93:47:0a:97:18:d0:31:14:15:6e:
         8a:12:1b:7a:00:ed:12:64:14:dd:45:c3:69:fb:3b:d6:f6:d9:
         2e:32:76:dd:88:0c:b2:fd:d0:b1:8f:30:b8:c7:1b:a3:95:a7:
         23:f1:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org