Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.cer
File:                     9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.cer (raw, json)
Hash identifier:          QRP0PpP3dXx8JhDvz8J0oEmYuJYbZa7DcnZLbdumx3A=
Subject key identifier:   9B:FF:34:B9:5C:9F:93:E1:E6:9C:B0:42:1F:FC:F2:F2:FE:1C:26:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       277E5ACEF850D323F477B0262D19D5772CB45D1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 09:45:26 +0000
Certificate not after:    Tue 15 Oct 2024 09:50:26 +0000
Subordinate resources:    AS: 28154
                          IP: 177.54.64.0/20
                          IP: 187.49.208.0/20
                          IP: 2804:30b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7e:5a:ce:f8:50:d3:23:f4:77:b0:26:2d:19:d5:77:2c:b4:5d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 09:45:26 2023 GMT
            Not After : Oct 15 09:50:26 2024 GMT
        Subject: CN=9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:fb:de:1f:a9:7a:63:84:5e:ad:80:8c:73:
                    71:96:3d:04:13:d0:a8:c8:61:d8:2c:7f:60:d4:1c:
                    ed:3d:c6:b4:8e:22:70:ea:c4:37:34:fe:dc:06:f1:
                    c7:eb:c1:14:c3:ec:64:07:3e:d1:58:4c:b8:a0:d8:
                    d8:ef:52:76:87:43:15:57:82:a0:a3:f7:a5:1d:c0:
                    d5:0e:25:3f:ee:43:99:76:f5:c2:90:31:a3:68:64:
                    c5:46:04:cf:49:5f:02:6c:c3:e4:c5:d1:5c:bf:7c:
                    f7:c9:52:d7:1f:98:14:17:01:40:bc:41:8e:f0:57:
                    9d:6b:0b:79:29:ae:e4:62:7c:53:db:af:41:67:9b:
                    cf:71:5f:3d:52:80:61:75:ea:28:34:61:a5:92:6e:
                    d7:f2:04:79:8f:54:a7:a8:ae:08:c3:e2:42:36:e2:
                    77:d9:52:38:a2:1c:9e:3f:f4:a7:b6:3d:d0:ac:50:
                    f5:99:07:c3:10:18:db:ba:61:e4:2f:a7:6e:1a:61:
                    ef:42:2b:43:a6:81:aa:cb:b1:01:5a:7c:8f:fe:2d:
                    84:be:b5:58:87:c8:a9:7f:2d:a2:9e:3c:65:60:f0:
                    05:f8:36:f0:c0:8a:47:6f:33:40:67:52:a9:52:5c:
                    43:38:f2:10:79:62:a1:30:b9:9d:a7:0b:81:5d:28:
                    4d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:FF:34:B9:5C:9F:93:E1:E6:9C:B0:42:1F:FC:F2:F2:FE:1C:26:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/9BFF34B95C9F93E1E69CB0421FFCF2F2FE1C26AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.64.0/20
                  187.49.208.0/20
                IPv6:
                  2804:30b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28154

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:db:2f:16:a6:39:9e:b4:01:41:fb:e7:f3:f1:1a:8b:05:
         43:6d:a9:eb:83:bb:97:f9:8a:30:8e:2a:7b:07:86:4f:9f:ff:
         66:ed:24:4c:5f:c9:e0:a3:4f:07:55:9b:0a:1e:0e:fa:a3:88:
         f3:08:4d:38:23:ee:ef:f6:1f:8a:d8:4d:ff:e8:58:d5:67:1e:
         fa:73:3c:03:b9:2d:7a:f7:f1:bc:fa:4d:2d:df:f7:5a:96:3b:
         50:c9:23:ff:14:f7:d7:01:49:9c:c8:bb:2c:0f:86:b5:2c:c3:
         00:2c:ac:f6:bb:e7:9f:7e:36:fd:20:2d:21:35:ae:ff:3e:aa:
         e0:d4:51:81:d6:f4:46:d3:69:6e:7c:eb:51:5f:8d:14:39:d1:
         05:f5:30:a2:79:49:5b:27:1d:ca:09:b2:44:fd:9d:2a:83:6d:
         c7:d3:0d:e9:cf:6d:35:5f:66:b9:f9:de:88:94:a8:2b:bd:f0:
         49:9d:4e:fe:a6:72:a0:9e:91:8e:47:46:52:fd:8f:ca:6a:8f:
         12:40:08:6a:27:1b:83:41:5d:68:d8:9b:5f:b2:b7:85:e1:5b:
         e1:4b:b6:c1:47:a2:9e:94:d3:82:57:33:83:12:8b:f9:68:6f:
         fb:1c:f1:63:c0:2c:da:da:c4:4c:52:18:f6:55:21:e6:02:10:
         b8:da:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org