Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B25C1442DA2E8F3B87BC40C5F8EBCAE0B282171.cer
File:                     9B25C1442DA2E8F3B87BC40C5F8EBCAE0B282171.cer (raw, json)
Hash identifier:          vXvnw6uLHm29ZJCKWiP6s7x3PZ8ToJE9u40RLlu4al4=
Subject key identifier:   9B:25:C1:44:2D:A2:E8:F3:B8:7B:C4:0C:5F:8E:BC:AE:0B:28:21:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C12AF380C8B38AD5F20EF59B216A2A9ABCEFBFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/9B25C1442DA2E8F3B87BC40C5F8EBCAE0B282171.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 17:58:58 +0000
Certificate not after:    Wed 30 Oct 2024 18:03:58 +0000
Subordinate resources:    AS: 266285
                          IP: 170.79.116.0/22
                          IP: 2804:356c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:12:af:38:0c:8b:38:ad:5f:20:ef:59:b2:16:a2:a9:ab:ce:fb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 17:58:58 2023 GMT
            Not After : Oct 30 18:03:58 2024 GMT
        Subject: CN=9B25C1442DA2E8F3B87BC40C5F8EBCAE0B282171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:e1:be:8d:6e:ce:eb:ac:eb:17:34:24:33:
                    07:d1:94:61:7b:2d:27:f6:87:07:b3:19:3c:84:e0:
                    e8:1d:be:ac:33:b9:c4:a7:d6:21:e7:8d:1f:4c:ec:
                    f8:f2:16:7f:28:8e:a9:7b:7f:80:f7:b4:37:59:1c:
                    b5:7b:06:2d:0a:6c:ac:c3:aa:f8:66:6d:0a:4b:0d:
                    aa:41:3e:c7:aa:b1:07:7e:ca:16:b3:99:47:38:e6:
                    18:ab:8b:fb:1c:d5:49:36:99:36:2c:40:8d:65:01:
                    8d:93:af:50:c2:43:49:bd:38:2e:77:96:fd:cc:98:
                    ef:f6:01:84:2d:95:e4:be:d9:ca:93:b9:e9:6a:39:
                    a9:ef:41:03:67:91:55:0d:4b:73:89:2a:a5:76:2a:
                    6a:35:ed:cf:af:ef:17:07:97:25:2f:52:81:17:ca:
                    10:3b:24:b3:aa:5c:ee:c9:c2:00:ec:74:89:c5:0a:
                    0a:f6:a4:ac:05:d8:14:37:7b:c3:e0:d7:b3:d5:8f:
                    f3:19:14:89:b4:cf:5c:5e:e2:27:35:ba:e2:a7:1f:
                    9e:b3:68:40:fb:99:8e:8a:d3:71:5e:74:19:cb:48:
                    89:92:f7:72:12:6e:62:36:f5:45:e1:1a:5d:20:35:
                    42:45:83:d3:9d:85:bc:9c:e5:84:13:2d:6b:eb:d3:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:25:C1:44:2D:A2:E8:F3:B8:7B:C4:0C:5F:8E:BC:AE:0B:28:21:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/9B25C1442DA2E8F3B87BC40C5F8EBCAE0B282171.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.116.0/22
                IPv6:
                  2804:356c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266285

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:98:e2:20:9c:be:e4:9c:d2:72:08:34:10:26:62:a7:6f:
         f4:5d:3f:05:e0:94:86:11:82:38:ba:68:67:15:c6:8e:99:bc:
         f9:e8:aa:9a:9f:3e:86:02:ec:42:0c:4b:e3:05:8f:8e:3b:b2:
         c2:2d:13:cc:10:a6:4e:23:46:2a:5b:28:c5:ec:64:44:dd:55:
         e8:41:1c:e1:3c:76:93:86:b7:e9:14:04:99:56:7e:7b:22:b3:
         91:24:13:7a:f9:ec:8d:17:20:d3:69:ee:35:e7:46:23:f8:a4:
         14:29:59:31:02:28:9a:e4:89:0b:91:66:2e:00:e3:ce:a8:94:
         64:a9:fe:d9:92:23:2c:53:a1:ad:d8:63:65:ac:b0:7e:1b:ad:
         54:9d:dc:38:9f:80:48:2a:38:d3:04:30:d4:c6:30:dd:43:f6:
         b4:55:58:cf:c7:e5:fa:db:fd:d7:2c:ee:e5:16:fd:a5:eb:ce:
         42:7d:77:9f:db:8e:7e:fc:0a:1e:7a:0d:29:9c:c7:d2:46:92:
         68:a8:be:86:a3:75:78:03:c8:06:93:af:bc:a7:59:29:03:74:
         b5:da:99:e4:0e:91:e9:e8:87:8d:0c:43:db:0e:37:28:ee:b4:
         54:71:e6:f2:3f:55:b1:1b:c1:5e:54:c4:e4:8a:68:d6:19:33:
         ba:c7:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org