Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B8C523490099065B0F42551BAF70EF4EA8FB26B.cer
File:                     9B8C523490099065B0F42551BAF70EF4EA8FB26B.cer (raw, json)
Hash identifier:          R3EZ56FhWl5WX6sSGDvLMyP0XD70cyy8OTVaMrfTbfM=
Subject key identifier:   9B:8C:52:34:90:09:90:65:B0:F4:25:51:BA:F7:0E:F4:EA:8F:B2:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3034516C7F775319A8BD60AF77052C653A60EA1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/9B8C523490099065B0F42551BAF70EF4EA8FB26B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Jan 2023 19:46:23 +0000
Certificate not after:    Thu 04 Jan 2024 19:51:23 +0000
Subordinate resources:    AS: 272426
                          IP: 2804:8104::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:34:51:6c:7f:77:53:19:a8:bd:60:af:77:05:2c:65:3a:60:ea:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 19:46:23 2023 GMT
            Not After : Jan  4 19:51:23 2024 GMT
        Subject: CN=9B8C523490099065B0F42551BAF70EF4EA8FB26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:ce:e4:bd:4b:9a:fa:89:99:39:0a:ce:32:
                    76:ac:44:a6:e9:5b:b9:f6:5e:5c:52:7e:ad:87:1c:
                    fd:33:71:eb:99:7a:ae:a5:7e:6a:b6:9e:03:92:6c:
                    70:fe:da:48:e7:f5:9f:28:4d:de:80:f4:7c:01:81:
                    e4:35:1f:b0:74:16:db:28:1a:27:6e:a9:a4:9a:3f:
                    dc:78:4e:4c:45:e6:0c:62:79:dc:ae:2d:20:cf:fd:
                    3a:a4:6d:0f:2d:4f:f5:b6:6d:71:e0:c8:be:7c:0c:
                    b8:d5:6f:00:af:9f:8b:a8:73:92:46:a0:2d:b7:1d:
                    aa:10:a5:7b:e4:ed:ea:ee:40:ea:c2:fe:b8:9c:e9:
                    33:61:57:40:e5:e9:22:ff:82:47:f7:89:50:35:bc:
                    d6:77:14:ba:c3:57:93:6f:65:60:f5:e1:e0:76:ba:
                    4e:ea:c5:c0:6f:82:9c:d0:c3:a4:3e:a1:82:52:f4:
                    52:b8:22:78:5e:dc:70:cf:24:26:62:05:32:51:a5:
                    39:5f:c2:3a:b2:c7:e5:e7:5d:a6:f8:bd:b5:ec:84:
                    e8:a0:7a:dd:8e:64:e3:46:e7:d4:83:78:b7:d4:65:
                    3c:5d:7d:c0:10:23:f3:02:5f:55:63:7c:7b:28:37:
                    6b:33:c8:b1:de:d7:f6:54:18:5c:fa:52:5c:89:89:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:8C:52:34:90:09:90:65:B0:F4:25:51:BA:F7:0E:F4:EA:8F:B2:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/9B8C523490099065B0F42551BAF70EF4EA8FB26B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8104::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272426

    Signature Algorithm: sha256WithRSAEncryption
         1e:84:11:72:b6:76:e8:0b:87:c4:b2:db:5b:53:74:43:68:42:
         be:fa:ee:64:60:c7:ba:85:91:b4:69:f0:3a:36:7e:8c:71:ac:
         82:94:94:b4:14:06:bc:ed:3b:31:e4:db:ad:04:ec:9f:29:4c:
         00:e5:ef:87:3a:e9:51:de:b4:eb:9e:4a:95:12:2b:92:72:ab:
         c6:23:87:e1:ba:a4:ba:c1:b0:84:a3:04:8c:83:d2:4a:ec:72:
         be:ee:28:0d:ec:dd:34:c9:f7:99:bd:c3:0d:e5:30:58:32:ee:
         f9:c8:3b:9e:5f:63:85:49:de:31:73:01:d0:3e:80:89:c0:c9:
         9b:05:ac:ca:b2:cb:f4:57:87:da:07:0e:15:c6:7e:b2:21:5c:
         11:38:d8:de:a1:94:5c:36:74:a6:17:cb:45:56:b8:49:8d:c6:
         ad:bb:a2:5e:0e:ba:57:4c:38:fd:4d:76:f6:5c:63:f5:67:4e:
         e4:50:b0:64:3a:ef:4b:c0:90:f9:e4:e2:19:c6:d2:41:07:c8:
         ae:e8:9e:43:03:29:ee:c3:51:b1:17:d1:8a:a0:bc:fd:97:d5:
         17:81:cd:4e:19:68:11:7b:0e:75:64:a6:26:3c:65:c1:0a:b4:
         46:70:ae:79:25:bb:da:11:b2:92:4f:0d:79:df:36:02:cf:71:
         d7:5f:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org