Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.cer
File:                     9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.cer (raw, json)
Hash identifier:          mWNCdDIT0ZrSHmxSmKo/nPuxuS8lGxBQQPFkNQiifV0=
Subject key identifier:   9B:5A:84:80:E7:C0:E5:E4:5D:E2:2C:D5:15:8A:05:5B:99:45:AB:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CED0F3436649542CA9F6597BA5204A50EC12E60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:38:06 +0000
Certificate not after:    Tue 28 May 2024 19:43:06 +0000
Subordinate resources:    AS: 264957
                          IP: 170.0.0.0/22
                          IP: 2804:1f22::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ed:0f:34:36:64:95:42:ca:9f:65:97:ba:52:04:a5:0e:c1:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:38:06 2023 GMT
            Not After : May 28 19:43:06 2024 GMT
        Subject: CN=9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:69:fb:c7:6a:83:ce:3f:a1:81:43:bb:63:
                    a5:26:49:e5:7c:20:11:8c:5f:84:75:c8:ef:19:28:
                    b1:3e:cf:af:d9:f0:7e:c6:32:4b:9d:4c:c9:24:e8:
                    78:62:95:dc:c2:29:24:0a:0b:6b:8a:08:82:d4:ed:
                    4e:78:26:30:b9:cb:43:b4:aa:9a:47:49:da:93:b8:
                    ee:2c:2a:36:cb:25:0d:51:2f:cf:05:c9:19:d9:7d:
                    8f:2a:c2:2d:3e:43:16:79:4e:fc:f5:46:8f:33:61:
                    05:3d:b6:b5:5a:bc:93:15:62:fa:0e:30:6a:98:23:
                    c0:50:a0:fb:7a:01:71:53:c9:86:4f:90:5c:29:24:
                    3f:e8:af:5b:a4:d4:55:9b:23:1b:b0:bd:50:96:b2:
                    bd:ec:a0:ef:bc:bf:7b:3b:cf:30:d5:ba:3c:dd:b4:
                    c8:b3:69:da:3b:8f:44:8f:d4:ee:f4:c4:37:95:50:
                    e8:a4:a4:e1:f4:1f:61:e0:8b:34:24:7d:70:9a:e0:
                    3a:8a:d4:7d:67:0b:0d:03:ad:0f:fc:bd:7e:9a:71:
                    f5:f6:d3:eb:07:24:88:17:03:e5:6f:df:b6:11:0f:
                    f3:eb:96:ed:86:87:c7:9b:3b:74:9d:1a:19:84:4b:
                    40:1a:7f:26:81:a1:75:80:ef:d7:54:10:d7:10:31:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:5A:84:80:E7:C0:E5:E4:5D:E2:2C:D5:15:8A:05:5B:99:45:AB:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.0.0/22
                IPv6:
                  2804:1f22::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264957

    Signature Algorithm: sha256WithRSAEncryption
         76:b2:61:af:28:95:61:b4:39:59:52:b4:3f:a5:e1:bc:8c:c6:
         aa:5a:f0:c3:85:a0:14:b8:5d:bf:9c:9c:05:a7:61:66:4b:8f:
         76:d6:41:5d:60:46:49:50:2f:4e:a0:62:28:2b:14:2a:17:4f:
         bf:2e:4c:e8:9d:50:e6:d0:20:01:d9:aa:a9:6f:7c:92:7f:30:
         eb:1c:16:d6:4b:89:ab:a3:1b:fb:25:a9:26:1a:c0:b3:50:7c:
         22:7f:68:52:4b:fc:01:3a:9c:e4:bd:b4:7b:2f:a4:61:34:f6:
         f6:9b:a7:52:67:82:d5:25:0a:b1:e3:b3:3c:a9:a0:62:4f:ca:
         1e:d4:0f:4f:8c:b3:fa:07:0a:2e:bc:de:48:9c:09:57:84:06:
         5a:1c:51:35:e1:97:e6:a0:1f:19:4e:ab:10:a7:b5:e5:f2:6f:
         55:d4:83:32:de:6f:39:95:25:57:db:24:f1:91:88:e9:65:9f:
         a4:1a:b8:6f:ad:c7:1b:72:19:96:84:de:15:6c:d9:d7:01:b7:
         09:db:76:4d:79:b4:c7:8f:30:d0:50:eb:3c:4f:1b:c4:7b:bb:
         f5:bb:e1:86:98:d6:04:f7:f7:fc:46:75:45:a0:7d:73:ed:34:
         0a:c6:9f:77:69:3b:ac:1e:b7:f4:62:d1:9f:a3:24:de:01:32:
         88:62:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org