Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9B8CD7913B9FBDEE4805C4BC122504346A1D1EE3.cer
File:                     9B8CD7913B9FBDEE4805C4BC122504346A1D1EE3.cer (raw, json)
Hash identifier:          RKg8uVI2cts4vUqnoid6pRth6nCSVPzEmeLvZpDGLjU=
Subject key identifier:   9B:8C:D7:91:3B:9F:BD:EE:48:05:C4:BC:12:25:04:34:6A:1D:1E:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3499845866BCFA9214FADD0343A8167C41B83665
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYvBi3KdTkMSj8ReBz5D2GWDqNXFL9Z4DV4suDpr6yeP/0/9B8CD7913B9FBDEE4805C4BC122504346A1D1EE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYvBi3KdTkMSj8ReBz5D2GWDqNXFL9Z4DV4suDpr6yeP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 00:23:30 +0000
Certificate not after:    Mon 15 Jul 2024 00:28:30 +0000
Subordinate resources:    AS: 264478
                          IP: 131.255.116.0/22
                          IP: 138.122.132.0/22
                          IP: 170.78.116.0/22
                          IP: 2804:2038::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:99:84:58:66:bc:fa:92:14:fa:dd:03:43:a8:16:7c:41:b8:36:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 17 00:23:30 2023 GMT
            Not After : Jul 15 00:28:30 2024 GMT
        Subject: CN=9B8CD7913B9FBDEE4805C4BC122504346A1D1EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:12:18:b8:07:f4:a8:5f:d1:0a:2f:50:12:
                    29:9a:bb:f8:16:11:bc:2e:4f:89:0e:0e:e4:d9:9b:
                    6a:ad:10:a1:24:ab:ab:7a:eb:eb:c7:dc:92:7f:6e:
                    70:cd:69:83:56:11:6b:b1:de:3f:7e:07:30:73:d6:
                    60:08:c7:2c:fd:47:1f:f8:66:9c:71:ac:e0:9c:26:
                    8f:21:b9:0e:01:05:a7:f7:8d:ca:c1:83:cc:c8:7d:
                    28:8c:f5:bc:a5:89:69:20:8f:d7:6f:3c:63:a0:cf:
                    65:01:5f:3c:52:4b:88:85:14:7a:f9:35:4c:ce:60:
                    6b:ed:53:42:48:f8:26:d6:c7:91:1f:27:7d:6b:d0:
                    8c:13:73:a0:63:8d:a6:91:1b:34:56:8a:ec:b8:f8:
                    2a:57:1e:e3:d3:e4:2c:9b:0d:fc:72:f3:1c:0e:bc:
                    8d:9b:db:80:95:49:42:cd:71:b7:b3:5d:29:5b:8b:
                    7b:4d:80:f1:80:90:69:e4:4d:c6:ea:73:5b:3c:4e:
                    7d:b3:60:bc:ae:69:a7:62:1d:da:48:15:cb:54:a4:
                    95:63:32:9a:a0:70:dc:39:c4:eb:2d:2f:27:38:c9:
                    6d:89:bb:76:75:d5:fd:1f:ec:e6:20:f0:3d:96:ec:
                    ee:d2:94:8b:22:a2:12:b3:e3:10:00:41:a3:f2:dd:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:8C:D7:91:3B:9F:BD:EE:48:05:C4:BC:12:25:04:34:6A:1D:1E:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYvBi3KdTkMSj8ReBz5D2GWDqNXFL9Z4DV4suDpr6yeP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYvBi3KdTkMSj8ReBz5D2GWDqNXFL9Z4DV4suDpr6yeP/0/9B8CD7913B9FBDEE4805C4BC122504346A1D1EE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.116.0/22
                  138.122.132.0/22
                  170.78.116.0/22
                IPv6:
                  2804:2038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264478

    Signature Algorithm: sha256WithRSAEncryption
         43:d1:3b:e3:e7:31:dd:ec:d4:ef:10:ad:a2:f1:e6:66:69:7d:
         b2:7b:96:2b:aa:2e:70:f7:bb:8d:84:0a:e0:c8:b6:93:84:2d:
         56:a0:2c:33:a5:67:cd:4d:be:24:87:d9:74:79:48:a1:32:72:
         1e:ac:3d:5a:20:36:15:17:ed:a7:a2:d6:f1:b2:13:c4:dd:1c:
         1a:0f:a0:b5:7a:1d:cc:d8:7a:d2:b5:9b:77:64:43:35:b4:77:
         03:dc:42:57:cb:11:49:02:a6:f9:31:0a:ad:f5:28:93:4a:72:
         a3:68:59:1e:e9:25:49:7c:44:7e:c9:a9:b6:ee:22:9b:98:6b:
         32:19:de:ec:f5:cf:92:59:af:19:fa:ad:75:b1:ea:b8:c8:53:
         ce:bd:34:90:8a:3e:ac:93:85:39:83:78:b6:f4:11:f4:10:23:
         2c:20:15:06:a4:32:30:30:ef:43:17:8a:42:ec:dc:ba:0e:f7:
         ac:ba:13:e6:4c:79:a8:71:9f:52:53:8c:76:99:7c:0d:35:ce:
         91:ec:a5:94:b6:37:ec:a1:fd:45:66:d9:ae:05:98:0b:89:26:
         e5:0a:14:1d:57:77:11:a6:5c:85:1c:d3:89:da:6c:3f:3d:f0:
         49:f2:54:b2:06:48:39:16:4f:95:51:6f:de:7b:3b:47:e9:1e:
         36:da:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org