Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
File:                     9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer (raw, json)
Hash identifier:          1a1gPfNfh6pWvdcBG41Wd59506BlQn1Qj9HPd8a6J0Y=
Subject key identifier:   9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32A3FDA6A1EE3558B92D26E1676868179E2DB57C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 13:45:09 +0000
Certificate not after:    Mon 13 Jan 2025 13:50:09 +0000
Subordinate resources:    AS: 266020
                          IP: 170.245.236.0/22
                          IP: 2804:393c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a3:fd:a6:a1:ee:35:58:b9:2d:26:e1:67:68:68:17:9e:2d:b5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 13:45:09 2024 GMT
            Not After : Jan 13 13:50:09 2025 GMT
        Subject: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:69:18:da:8b:c4:94:2b:b8:7f:55:e0:b4:
                    6a:09:c7:08:e9:3b:3e:94:a7:9e:e6:ab:3d:c1:98:
                    d1:ea:9f:cb:75:08:55:48:d2:44:8a:ea:09:16:73:
                    32:cd:a6:36:97:e7:ae:58:c4:78:93:0f:50:e6:a3:
                    b3:8b:f1:70:b9:a5:af:0b:c4:e4:c2:58:48:97:eb:
                    0b:1b:e7:45:c7:06:67:30:15:d4:92:18:e4:31:88:
                    50:8a:1e:ee:9f:45:42:11:3e:5e:f2:e6:15:22:07:
                    42:fe:b4:00:e1:61:58:99:7c:1e:e2:7f:e5:10:08:
                    f1:04:9a:24:ac:42:b4:0f:04:79:96:3d:57:58:1e:
                    0b:6b:03:c4:c7:55:5d:38:9b:a3:f2:83:8f:4f:44:
                    c0:7d:66:37:be:f8:f8:49:e6:b4:39:5d:05:a1:78:
                    bf:47:41:e8:2d:22:36:1a:bc:8b:17:29:c7:1a:3e:
                    d3:d7:73:c2:e5:ea:3c:79:df:ef:14:43:ab:74:0e:
                    f3:f0:e4:1e:03:54:16:09:b8:51:1c:ef:ed:87:e8:
                    97:9d:e0:4c:b5:81:41:99:b8:0f:f3:fc:a0:73:dd:
                    8c:59:48:55:43:99:f2:b1:57:b2:eb:a2:96:8c:34:
                    6c:42:b3:31:9d:f5:98:c2:bc:8d:d2:a4:47:4d:c7:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/22
                IPv6:
                  2804:393c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266020

    Signature Algorithm: sha256WithRSAEncryption
         5b:06:4a:4b:c0:0a:2a:c0:c4:12:63:12:b7:28:8e:13:30:c0:
         5f:ed:46:e4:25:70:c8:29:be:99:9c:88:b5:b3:a8:b7:61:69:
         a7:0f:29:56:db:3b:bb:31:ab:a3:7c:d3:d6:2a:2e:b7:c0:b5:
         3c:d1:1d:3d:28:2d:3a:17:7b:ae:7e:55:f2:dd:fe:be:fe:32:
         ab:6e:52:28:95:f6:3b:c0:ac:db:24:0f:cf:b4:4b:e8:42:ad:
         0a:f5:80:5b:ea:20:6b:3c:e5:c0:df:c1:af:f1:4b:70:3f:9e:
         81:76:0c:01:8e:49:7a:06:94:60:b3:16:5b:3c:96:c4:c7:55:
         04:89:3a:ee:32:ff:bb:84:9c:eb:b6:0a:5f:c6:90:d0:81:55:
         02:e2:8b:93:dc:d1:d0:f5:3b:d3:85:7e:91:11:4f:4f:e3:ec:
         35:c6:c8:59:b6:47:e0:1c:9d:ac:5e:af:74:83:06:10:ab:f9:
         9f:42:b7:99:ec:a8:3d:1c:24:9f:53:46:08:c7:16:74:2b:14:
         5a:41:1f:08:23:26:70:05:e3:ef:e1:da:77:d3:7a:d8:b7:bd:
         6a:61:fc:aa:15:a0:71:d9:31:9b:49:47:40:74:3a:4a:b3:ab:
         9a:fa:c9:19:8c:3e:e2:57:47:b9:54:fb:c3:48:c2:b2:d1:d3:
         16:ec:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org