Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B1D24656D3D5D1C26E4E14E89A483D9FA6ACE4F.cer
File:                     9B1D24656D3D5D1C26E4E14E89A483D9FA6ACE4F.cer (raw, json)
Hash identifier:          7xQGpwOp5uOJikoCgAQbqrTDaH+LZIqgmnjiS3uk+Fo=
Subject key identifier:   9B:1D:24:65:6D:3D:5D:1C:26:E4:E1:4E:89:A4:83:D9:FA:6A:CE:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CB2C5DE3205BA1D31BE9F8927E1C58B6D2A1BA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/9B1D24656D3D5D1C26E4E14E89A483D9FA6ACE4F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jul 2021 16:25:37 +0000
Certificate not after:    Tue 19 Jul 2022 16:30:37 +0000
Subordinate resources:    AS: 270684
                          IP: 45.228.12.0/22
                          IP: 200.187.104.0/22
                          IP: 2804:6fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b2:c5:de:32:05:ba:1d:31:be:9f:89:27:e1:c5:8b:6d:2a:1b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 16:25:37 2021 GMT
            Not After : Jul 19 16:30:37 2022 GMT
        Subject: CN=9B1D24656D3D5D1C26E4E14E89A483D9FA6ACE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:17:b2:69:1e:e0:eb:62:f2:b2:a4:c8:dd:27:
                    29:26:9a:2d:9f:9b:f7:28:25:fa:16:47:bf:93:ed:
                    fd:ed:85:ae:a4:c0:1e:2f:18:a6:9f:b3:a1:35:53:
                    f6:62:ee:30:b8:95:ca:e5:60:40:50:fd:46:93:cf:
                    a1:e2:61:7e:32:c5:8e:a1:ff:07:5c:df:15:3e:36:
                    ae:17:17:94:49:ea:bc:b1:0d:25:83:8a:79:81:f4:
                    5f:5a:02:e1:f9:32:c6:4c:69:e1:51:60:81:94:a8:
                    39:fa:15:d7:f4:f2:3e:35:f0:4e:ec:58:d1:aa:74:
                    69:88:17:5c:4e:01:c8:dc:a7:55:8e:af:89:f8:46:
                    15:d4:93:6c:a4:00:9c:b3:55:52:b7:e3:1d:d8:31:
                    81:e1:c1:37:ad:14:0e:66:a5:ad:58:2a:14:6b:ff:
                    bc:a3:1c:11:50:39:79:5d:73:5e:9e:e1:9d:93:d2:
                    14:a7:93:f9:35:d1:98:79:04:40:5f:87:86:91:6f:
                    5b:ee:ee:b8:12:be:ff:9e:8d:2c:94:33:41:48:d7:
                    93:d8:76:e4:cc:46:5c:1f:83:14:ad:6f:04:6e:48:
                    d4:4a:0d:88:4e:7a:4d:4a:0d:8b:02:fe:9c:b8:9a:
                    b4:fe:0a:bb:c5:6d:57:3f:55:30:53:ac:0e:d4:ca:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:1D:24:65:6D:3D:5D:1C:26:E4:E1:4E:89:A4:83:D9:FA:6A:CE:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/9B1D24656D3D5D1C26E4E14E89A483D9FA6ACE4F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/22
                  200.187.104.0/22
                IPv6:
                  2804:6fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270684

    Signature Algorithm: sha256WithRSAEncryption
         87:e5:bf:29:85:9e:a8:4e:6f:5e:7f:12:16:32:eb:c4:37:d0:
         3c:b0:78:06:c9:ae:c5:f3:23:13:0b:78:1e:6e:d9:57:bc:b9:
         cd:31:aa:60:bd:30:41:79:33:86:d0:f4:16:85:64:96:4f:99:
         bf:0c:e8:4a:12:ff:5b:86:40:8d:3e:a6:60:c1:d6:43:67:d8:
         c7:ca:e5:6a:74:b6:86:17:19:5c:a7:ed:2e:e4:01:44:cd:eb:
         39:c9:6a:ea:86:18:ce:11:37:dc:51:96:c6:4e:63:9b:41:ab:
         2c:e6:9c:96:9a:72:71:3e:cd:6d:a4:11:9d:a3:f0:c3:bd:5a:
         4c:fe:e8:d0:2f:c1:fa:63:fb:cf:5b:ef:ba:bf:3f:1e:12:6c:
         06:a5:da:ed:6e:86:2b:f8:8f:6a:72:c0:bb:b5:39:fa:8b:47:
         03:7a:4a:59:fd:68:31:c8:de:3f:b9:f4:79:3a:b7:8f:a8:f2:
         41:67:59:10:8a:b2:87:da:2e:fa:a9:51:37:a2:96:4e:29:4e:
         ff:e7:5b:96:86:ac:76:00:50:50:99:a7:92:10:8d:a5:a4:2a:
         86:ca:06:be:cb:a9:c2:f0:2a:bc:70:f0:f7:cd:e4:f0:60:65:
         ce:8d:10:b7:e8:ad:8a:b1:92:a5:82:cb:4f:4c:33:35:0a:a1:
         02:da:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org