Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B3A9FB647FAABF77409654DF61F881B15554C08.cer
File:                     9B3A9FB647FAABF77409654DF61F881B15554C08.cer (raw, json)
Hash identifier:          9etnpELHU8yp75NQOFl4BbTCDdvE05wxWF5rP0e/r+E=
Subject key identifier:   9B:3A:9F:B6:47:FA:AB:F7:74:09:65:4D:F6:1F:88:1B:15:55:4C:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B17C9E17016C8E54AE28A2F4C5BFEE749EF76CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/9B3A9FB647FAABF77409654DF61F881B15554C08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 20:43:24 +0000
Certificate not after:    Mon 21 Oct 2024 20:48:24 +0000
Subordinate resources:    AS: 263483
                          IP: 191.242.224.0/22
                          IP: 2804:128c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:17:c9:e1:70:16:c8:e5:4a:e2:8a:2f:4c:5b:fe:e7:49:ef:76:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 20:43:24 2023 GMT
            Not After : Oct 21 20:48:24 2024 GMT
        Subject: CN=9B3A9FB647FAABF77409654DF61F881B15554C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:54:f4:1f:ad:92:aa:47:1e:33:27:74:16:
                    4c:97:a1:83:a5:35:c1:c0:a0:fd:f7:15:9b:22:30:
                    59:16:19:47:9f:09:d5:19:93:dd:58:23:34:eb:71:
                    2e:e3:98:3d:a4:a1:cb:30:87:85:b7:88:26:91:ef:
                    0b:cf:1e:61:32:87:a1:26:80:c6:d6:55:62:65:56:
                    45:fa:00:31:cc:4f:03:34:c5:2c:56:1a:11:5a:b3:
                    0a:c2:5d:b9:6e:e8:53:bc:3c:6d:3e:a7:b3:72:7f:
                    b3:d8:0d:e1:1c:03:d2:43:d1:f6:3a:32:ab:b8:60:
                    0a:b8:c7:7d:5c:58:0a:d0:19:4a:4d:37:cc:49:9a:
                    db:4a:7c:a4:35:e1:13:86:57:75:29:e3:ee:9e:85:
                    e2:bf:af:5f:a9:1a:c0:a0:f2:b0:15:35:4f:52:66:
                    d4:8e:4f:18:2f:9e:99:e4:d6:51:9f:1b:80:60:8e:
                    3c:9b:0d:4f:81:90:0b:78:b6:e4:d4:0d:3d:f9:c4:
                    bd:46:ec:be:fd:32:a6:bf:17:8c:a4:75:a9:e2:1d:
                    f2:ce:bf:81:ed:34:87:98:14:8d:d1:e7:c4:4f:51:
                    aa:04:ec:18:b6:a7:37:66:66:27:38:d7:d8:32:2a:
                    69:41:33:d8:39:3d:0a:98:68:60:3b:46:96:72:9f:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:3A:9F:B6:47:FA:AB:F7:74:09:65:4D:F6:1F:88:1B:15:55:4C:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/9B3A9FB647FAABF77409654DF61F881B15554C08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.224.0/22
                IPv6:
                  2804:128c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263483

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:c7:1a:c8:ef:a8:31:e4:b0:6c:d9:85:fc:ed:57:f1:4a:
         4c:36:90:d2:3e:25:2d:05:83:b9:a0:c0:03:63:f1:0f:4d:70:
         8a:c4:a2:2b:34:17:70:bb:8f:80:e4:68:e2:fe:a9:04:51:ea:
         fb:db:bc:2e:49:5c:c5:d9:49:6c:a3:74:35:c8:9d:6c:db:e5:
         3e:cc:a7:23:45:c9:11:29:82:5e:3d:00:be:ff:ed:d8:75:ed:
         d1:a1:52:4f:17:36:54:5e:35:59:14:e7:b0:dd:fc:a2:88:87:
         77:a1:25:d3:c1:fb:e4:45:28:92:90:b0:37:c2:c0:b8:a4:4b:
         6a:3b:1d:79:44:2f:32:f4:1e:3b:b5:d5:fa:2a:81:c3:77:43:
         d1:16:c4:fc:43:cd:69:63:79:fe:24:ee:47:6b:8b:0f:f0:c2:
         66:46:9c:c3:ba:f9:1b:d3:b5:ae:d4:1c:75:18:9d:26:d6:7e:
         19:1d:35:40:2b:a6:8f:6e:fd:01:ca:23:1c:26:d9:f2:a4:e4:
         cf:7b:fa:9a:f9:56:a9:ee:72:f5:9d:26:c1:1e:75:a0:61:35:
         05:99:e4:0e:c5:e3:81:3a:8b:83:21:86:f4:13:86:99:44:57:
         c5:85:d7:77:26:f6:03:3f:c8:f8:d6:11:37:32:a1:82:5c:5c:
         65:58:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org