Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B230F329A09B7FC436A55EBD39182DA62BAC4B4.cer
File:                     9B230F329A09B7FC436A55EBD39182DA62BAC4B4.cer (raw, json)
Hash identifier:          UPf9U04/ZN/NrDXywrvjAXQsG98E3gfjiMDn/F/o8l4=
Subject key identifier:   9B:23:0F:32:9A:09:B7:FC:43:6A:55:EB:D3:91:82:DA:62:BA:C4:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       352FAC21CB98C337B45E7747BCC9298C34BE32FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/9B230F329A09B7FC436A55EBD39182DA62BAC4B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 13:52:19 +0000
Certificate not after:    Mon 01 Apr 2024 13:57:19 +0000
Subordinate resources:    AS: 264504
                          IP: 131.255.252.0/22
                          IP: 2804:20a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2f:ac:21:cb:98:c3:37:b4:5e:77:47:bc:c9:29:8c:34:be:32:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 13:52:19 2023 GMT
            Not After : Apr  1 13:57:19 2024 GMT
        Subject: CN=9B230F329A09B7FC436A55EBD39182DA62BAC4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:51:07:e7:62:99:cd:34:35:84:35:13:63:
                    1e:22:4c:57:36:b6:5f:28:dd:bc:16:2b:37:5f:57:
                    38:11:85:de:d5:52:f0:32:54:aa:fa:e1:a6:37:fa:
                    9f:64:4a:e7:79:06:04:82:a8:70:35:47:d9:07:7b:
                    af:a1:0c:ee:93:a9:24:60:bc:95:e8:72:9c:c3:40:
                    94:35:58:b8:0c:0e:72:26:88:c8:09:64:48:8c:7b:
                    dc:e9:ab:56:0b:c6:c7:d6:af:8a:36:9c:de:47:7f:
                    cc:51:0a:7d:ba:07:ed:13:f2:46:33:29:16:7e:e4:
                    71:34:4f:98:48:22:76:fb:e7:13:10:4a:b0:57:07:
                    76:8f:d7:75:5f:83:a5:10:fe:ac:8e:fe:c7:74:ff:
                    f1:0e:9c:9a:a4:20:82:a8:b2:80:75:34:cf:56:59:
                    12:2d:aa:83:88:6a:62:8d:c7:11:96:4e:33:07:a2:
                    27:0e:06:6b:ca:12:f1:b8:36:a1:8c:4e:9c:39:5d:
                    0d:86:ff:02:99:df:80:2d:4f:5d:56:b1:01:03:55:
                    79:4f:4e:6b:5a:26:91:4c:e6:68:e7:20:66:68:3e:
                    7f:7a:60:72:82:a4:f1:4e:69:2d:50:ba:ad:7c:79:
                    05:44:db:69:6e:17:08:d1:3c:f9:e1:db:5d:55:99:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:23:0F:32:9A:09:B7:FC:43:6A:55:EB:D3:91:82:DA:62:BA:C4:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/0/9B230F329A09B7FC436A55EBD39182DA62BAC4B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.252.0/22
                IPv6:
                  2804:20a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264504

    Signature Algorithm: sha256WithRSAEncryption
         a2:ec:ff:9a:25:fd:f2:3e:71:30:7f:18:1b:f9:a8:a8:0f:40:
         d4:0d:3c:a2:78:50:e8:33:27:d9:28:5f:53:0e:8a:b7:d8:ae:
         2c:ee:1d:61:68:0e:ce:87:ab:c6:e9:2b:76:8b:49:bc:e7:f8:
         88:50:b9:4c:64:51:16:20:4d:4e:73:10:75:00:42:10:f1:fa:
         be:7e:9a:22:86:5f:4e:ab:59:d0:5e:a5:49:e5:89:64:0f:33:
         7a:a1:f3:df:a0:42:7c:08:9e:87:1c:bf:5a:ec:19:bd:db:cb:
         eb:a5:44:8d:93:8c:e4:70:22:0a:71:58:d9:9f:3e:94:4e:ed:
         cb:87:82:25:74:2d:71:b0:86:2b:33:a4:59:bd:92:af:5b:35:
         39:c7:09:4a:fc:92:2a:22:09:9b:42:73:ba:42:c6:6a:2e:d3:
         29:f0:4e:78:97:cc:7e:cc:98:d9:61:17:14:96:be:5d:0c:c3:
         97:e1:2b:01:48:71:5b:70:a8:44:6d:4d:d5:99:85:ca:23:25:
         2a:bd:18:80:ab:70:f4:19:71:7b:28:8e:5f:84:fa:b0:5c:4c:
         fd:da:c8:7a:66:65:40:ac:58:e8:b6:9b:36:0b:a1:f9:f2:f2:
         15:f8:76:d2:99:d8:c7:92:85:6b:e7:10:68:ba:00:16:2b:06:
         90:49:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org