Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.cer
File:                     9BB8BEF22E2BBA85B858961647B317702684E0EE.cer (raw, json)
Hash identifier:          GqM0yKNvmxt+eoXr1JZxzOO+RcZ+Y4X1+iJC/FmSWEA=
Subject key identifier:   9B:B8:BE:F2:2E:2B:BA:85:B8:58:96:16:47:B3:17:70:26:84:E0:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B17A489A9C9C9CE2613A09C4C609AA78E21D76A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 14:05:09 +0000
Certificate not after:    Wed 15 Jan 2025 14:10:09 +0000
Subordinate resources:    AS: 262669
                          IP: 138.94.224.0/22
                          IP: 143.202.148.0/22
                          IP: 170.78.68.0/22
                          IP: 177.22.224.0/20
                          IP: 187.73.240.0/20
                          IP: 189.39.192.0/20
                          IP: 2804:13d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:17:a4:89:a9:c9:c9:ce:26:13:a0:9c:4c:60:9a:a7:8e:21:d7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 14:05:09 2024 GMT
            Not After : Jan 15 14:10:09 2025 GMT
        Subject: CN=9BB8BEF22E2BBA85B858961647B317702684E0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:82:17:f8:30:f0:2d:a5:16:39:16:d8:39:
                    22:c5:dc:a4:db:6f:74:ad:9a:94:2c:7d:5c:2a:75:
                    fd:b9:15:b9:da:3b:19:30:11:83:69:08:fd:ee:b6:
                    0f:a5:ac:d4:fd:9a:0e:6f:6b:43:a2:5e:e0:3e:04:
                    7a:75:36:4c:c0:8c:db:ac:10:a8:a1:31:60:d6:78:
                    91:c1:73:75:99:6c:74:10:91:b4:cf:27:fa:c6:77:
                    ba:dd:26:34:6c:b9:a5:8c:f0:59:c1:3d:c4:04:56:
                    9e:6e:50:53:f5:b1:c7:84:45:80:97:d0:fc:54:ee:
                    a1:b5:2e:b7:7e:d2:30:e1:1c:c1:46:d8:5f:e1:94:
                    20:10:ef:ca:fa:51:58:89:80:b3:c5:f4:d4:42:fe:
                    71:32:15:e3:b3:98:c3:fb:40:20:b4:99:3a:70:46:
                    2a:cb:7f:f0:cf:12:cf:20:b5:ee:d6:e2:8b:d7:cf:
                    fb:17:d8:8c:79:c8:9a:91:d3:4d:5a:79:85:23:64:
                    ff:94:ce:35:17:fc:88:e1:e9:86:9a:df:b5:a6:94:
                    8d:c0:c9:9d:30:31:37:da:1d:c9:cd:c1:d6:e7:ac:
                    97:21:01:c8:b3:14:90:9c:4f:c3:e9:f8:f4:e1:41:
                    fc:54:bb:e3:17:b7:7f:7b:8f:79:b9:c7:e3:00:e2:
                    6f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:B8:BE:F2:2E:2B:BA:85:B8:58:96:16:47:B3:17:70:26:84:E0:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.224.0/22
                  143.202.148.0/22
                  170.78.68.0/22
                  177.22.224.0/20
                  187.73.240.0/20
                  189.39.192.0/20
                IPv6:
                  2804:13d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262669

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:22:9f:1d:a8:57:2c:a2:d3:85:39:9c:93:00:fa:1f:a1:
         c0:c7:e4:8a:fa:f2:39:97:21:c1:77:89:f5:09:99:42:e8:a1:
         0d:13:31:58:9e:f2:e1:f0:30:83:21:73:31:fd:37:73:f5:2b:
         2b:1c:e4:20:00:4f:96:5e:6f:7c:b6:f7:50:b0:a5:62:f1:de:
         83:13:cf:4a:7c:cd:99:d3:c8:52:c9:0e:63:a3:12:1d:f4:f8:
         20:c7:d6:5b:8e:ce:4d:2c:b5:36:e4:ed:e4:77:14:1a:f7:cd:
         ad:6c:2a:d6:53:e9:bf:1b:e8:fa:7c:ca:70:4c:2a:3b:d0:f9:
         31:5f:97:e4:d5:25:05:f7:b2:96:a2:3b:c9:e1:6d:aa:16:00:
         e0:bd:64:3b:19:c2:5f:e1:c0:ed:09:53:0d:82:90:ba:28:2b:
         14:98:92:ba:df:15:c7:bb:f8:76:92:06:af:1f:98:1d:da:d3:
         40:fe:2b:9d:95:1a:88:27:31:7f:b9:a9:85:df:42:75:ee:9e:
         44:a8:a5:6c:f4:69:04:18:3e:62:88:d1:df:76:c2:1f:c7:a1:
         36:88:19:4a:25:b7:ba:19:13:78:5a:34:49:30:e3:87:f0:20:
         6e:b2:53:21:8f:c4:94:53:5e:44:bb:35:80:1e:a2:38:6a:96:
         36:61:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org