Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B57F67C30C6FD30990E614167F4786B225E52A0.cer
File:                     9B57F67C30C6FD30990E614167F4786B225E52A0.cer (raw, json)
Hash identifier:          hIlpgD7ahuVVjfUiZeQaGz5aOAxJOiJaamWxdPPkdos=
Subject key identifier:   9B:57:F6:7C:30:C6:FD:30:99:0E:61:41:67:F4:78:6B:22:5E:52:A0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67777EC50627EA2500CE58E49AE7D226E5B18129
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/9B57F67C30C6FD30990E614167F4786B225E52A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Jul 2023 01:36:18 +0000
Certificate not after:    Sat 20 Jul 2024 01:41:18 +0000
Subordinate resources:    AS: 269517
                          IP: 45.188.72.0/22
                          IP: 2804:65d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:77:7e:c5:06:27:ea:25:00:ce:58:e4:9a:e7:d2:26:e5:b1:81:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 01:36:18 2023 GMT
            Not After : Jul 20 01:41:18 2024 GMT
        Subject: CN=9B57F67C30C6FD30990E614167F4786B225E52A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:d2:d4:b6:49:8f:54:dc:7f:c3:46:45:26:
                    7c:5f:b5:a1:0a:fb:3c:93:79:2d:4f:99:9a:0b:87:
                    d8:d6:1e:7e:1a:d0:6b:be:6d:32:9a:e9:2f:cb:0e:
                    19:b4:77:b1:24:48:62:8d:94:05:54:8c:f5:c1:d2:
                    a9:01:f3:6c:0e:54:ec:ec:fc:c5:df:d4:7e:42:cd:
                    40:0f:23:f3:dc:9c:54:22:dc:92:a8:05:10:3e:b5:
                    75:81:5c:3e:34:c2:60:60:b1:c6:58:86:39:92:0e:
                    85:09:99:b6:b6:da:2c:07:55:49:e8:33:a5:01:58:
                    dd:b2:df:17:ba:d8:93:c5:9d:e2:69:ae:47:d5:01:
                    7f:cf:6b:76:ec:0b:1e:58:7c:18:d5:b0:6d:ff:14:
                    f9:92:19:fe:57:91:b1:5f:f6:18:85:48:ad:d8:b2:
                    5b:a5:ef:92:dc:0d:32:c1:63:ad:36:21:ad:2b:ad:
                    79:9d:1f:91:bb:a9:7b:c5:8a:05:a8:fa:be:23:62:
                    96:84:4a:99:45:08:46:af:b6:13:db:5a:37:4b:ec:
                    d3:4e:e4:c9:f7:08:0d:ea:73:4d:9e:85:f0:59:d1:
                    0b:ab:6e:4d:25:eb:a7:7c:86:07:f1:ee:68:22:b3:
                    3b:aa:2c:e2:ad:fe:a5:ec:27:94:ff:af:83:24:bf:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:57:F6:7C:30:C6:FD:30:99:0E:61:41:67:F4:78:6B:22:5E:52:A0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/9B57F67C30C6FD30990E614167F4786B225E52A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/22
                IPv6:
                  2804:65d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269517

    Signature Algorithm: sha256WithRSAEncryption
         66:2b:e0:39:5c:65:b9:e6:e5:67:04:56:54:4c:2b:a4:9c:61:
         c8:82:1d:77:b5:3d:d5:a8:1d:56:1b:f8:f2:c1:5f:24:f8:0a:
         47:e9:30:05:22:5a:19:17:55:ab:14:b7:92:6a:a0:2c:1a:05:
         b9:ae:3b:e9:64:56:a9:2a:16:02:e2:97:e0:81:ad:85:d7:7b:
         a5:19:54:f3:47:ab:42:43:89:49:cb:d1:1e:23:73:9c:a8:f5:
         a2:18:6d:56:ed:4f:9f:13:fa:94:1a:3f:35:aa:ee:37:6a:28:
         e0:02:82:57:9a:41:d4:91:c2:ca:1e:de:2f:e0:15:2a:94:bd:
         39:da:a0:d2:a6:7f:da:87:c2:0c:c9:5d:8b:10:13:6f:55:9d:
         db:5f:be:04:4b:15:9a:a7:30:30:de:9c:d8:c0:30:c7:c5:e3:
         bc:a3:c9:8f:55:26:5c:f1:0d:f4:74:dc:08:90:d1:ed:0b:9f:
         5e:83:1f:58:f7:a7:80:a4:28:d0:56:5c:ac:5a:0d:60:f0:81:
         30:15:dd:db:f9:fa:6f:a8:fa:c8:cb:01:91:0d:a8:84:d1:e6:
         c2:0b:7a:f8:98:08:1d:a2:0d:ae:45:a4:be:b0:93:30:d8:c6:
         bb:be:7c:a0:02:0e:e1:14:bf:b3:af:04:0b:56:bd:bd:b0:71:
         dc:e7:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org