Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer
File:                     9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer (raw, json)
Hash identifier:          9UFTJ9x67lXEmxvt7bMGOkk1lx1yNhwZ5g1hlQxPp1c=
Subject key identifier:   9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02B1DDD12DB2863FE7FDC3E4ED84529EE779E78C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 12:56:01 +0000
Certificate not after:    Mon 27 May 2024 13:01:01 +0000
Subordinate resources:    AS: 53167
                          IP: 143.202.132.0/22
                          IP: 177.22.176.0/21
                          IP: 186.219.128.0/20
                          IP: 2804:2a4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b1:dd:d1:2d:b2:86:3f:e7:fd:c3:e4:ed:84:52:9e:e7:79:e7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 12:56:01 2023 GMT
            Not After : May 27 13:01:01 2024 GMT
        Subject: CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:b8:dc:7a:7d:af:f9:9a:20:31:a1:57:56:
                    b6:3a:7d:28:d2:05:e8:e6:1e:1e:c3:2f:21:21:9c:
                    0f:ca:20:0c:13:7f:d0:94:18:bf:86:96:da:de:4b:
                    1d:dc:cd:91:1f:19:3f:b5:b7:81:ca:e1:43:97:44:
                    9a:45:cb:f9:68:61:4d:25:6e:d7:d1:d8:36:21:ff:
                    64:6f:1c:1a:a4:79:2e:ce:36:06:3e:1e:69:63:64:
                    ae:92:c0:84:06:45:a2:9a:6f:f1:1b:4f:86:71:ec:
                    c7:58:95:eb:8a:b7:bc:c0:6f:fa:4b:f8:a6:97:b8:
                    03:16:48:bd:5c:9d:8b:7c:2c:ed:bf:0e:61:a2:e0:
                    3b:de:22:69:63:b5:0b:16:65:bc:a5:18:eb:82:38:
                    4d:db:72:36:3f:27:47:15:cf:30:8b:c0:14:93:1f:
                    5d:53:3f:8e:72:c4:48:b6:6f:98:a9:00:6c:42:97:
                    8a:f3:96:a3:c6:a6:fe:24:12:66:c6:64:15:f6:ed:
                    63:ac:9a:eb:fe:55:ca:27:0b:ce:88:ac:54:53:5a:
                    7a:6b:7a:f6:f1:0f:c9:e4:cc:4f:d5:a0:ea:8d:65:
                    e4:d5:61:13:d4:3b:5e:7c:af:b4:31:f8:5e:1b:68:
                    8b:9e:bb:cd:c4:76:c8:21:81:49:3a:93:5b:78:32:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.132.0/22
                  177.22.176.0/21
                  186.219.128.0/20
                IPv6:
                  2804:2a4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53167

    Signature Algorithm: sha256WithRSAEncryption
         b8:21:71:29:e9:1e:7e:f5:71:9d:3f:f8:42:1a:d5:d5:f3:0e:
         cb:bb:95:0f:7f:d8:c3:b9:d6:8c:0c:fc:11:a6:80:e2:0a:f0:
         5e:22:2a:96:f8:f1:85:51:8e:8f:72:59:3a:cb:90:fe:59:f9:
         41:55:ce:ad:7d:72:1a:5a:74:e7:25:06:d7:e7:d5:83:ad:2b:
         73:ea:e4:0a:5c:94:8d:e1:fd:ac:5c:b1:4c:8a:06:f0:3d:5e:
         a1:12:29:c3:87:26:b8:e3:6d:46:8a:a4:03:d1:c3:c1:6e:40:
         62:16:40:d0:23:d4:e7:fb:d8:95:cf:f0:7c:ac:76:a9:cd:d5:
         9b:1c:7c:d3:a8:74:20:da:04:6c:50:5b:e2:84:77:82:8e:fc:
         fb:69:b1:64:b2:3e:3b:5f:2f:bd:e8:18:a2:be:2f:38:ea:0f:
         87:33:fd:80:eb:6b:2f:28:8e:b0:f9:fe:08:c0:ba:8e:e8:42:
         d7:14:2c:93:57:9a:d0:d0:63:7e:06:aa:e2:5b:9c:c3:be:ce:
         0e:3c:fb:54:b7:4e:f6:97:22:60:59:29:53:32:4c:64:a6:16:
         97:a0:46:8a:6a:bd:15:38:09:36:79:e3:87:d6:03:2b:6c:ab:
         9c:03:c8:98:a0:06:0f:9c:b6:9e:82:fc:5d:30:04:46:cb:bb:
         fc:e3:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org