Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9BFFFB305308D99BB71B629A52021D536AF8164D.cer
File:                     9BFFFB305308D99BB71B629A52021D536AF8164D.cer (raw, json)
Hash identifier:          MQx9bxbPLD84oNHbDV0PbK79qwky527caY9rbLF2qnk=
Subject key identifier:   9B:FF:FB:30:53:08:D9:9B:B7:1B:62:9A:52:02:1D:53:6A:F8:16:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B8C7FA711804FEB2E4C76573A58B99F346BDC00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/9BFFFB305308D99BB71B629A52021D536AF8164D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 17:43:42 +0000
Certificate not after:    Mon 10 Mar 2025 17:48:42 +0000
Subordinate resources:    AS: 52947
                          IP: 168.197.16.0/22
                          IP: 177.38.136.0/21
                          IP: 2804:1df4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8c:7f:a7:11:80:4f:eb:2e:4c:76:57:3a:58:b9:9f:34:6b:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 17:43:42 2024 GMT
            Not After : Mar 10 17:48:42 2025 GMT
        Subject: CN=9BFFFB305308D99BB71B629A52021D536AF8164D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:61:cf:ca:a9:6c:ab:0b:e9:d8:c5:2a:38:
                    d2:ca:bd:f5:a1:ba:fa:91:5c:d0:04:c3:5d:69:3c:
                    91:ce:b4:5b:e3:88:8e:5b:d2:47:a3:f9:d6:99:a1:
                    05:68:fb:a4:a6:60:0c:71:50:82:fb:9a:44:1f:57:
                    17:95:52:50:ce:a5:2b:18:1a:43:76:d0:1c:02:9f:
                    c8:1d:88:35:5a:84:14:a2:14:44:fe:55:5d:8c:15:
                    96:3a:a9:20:39:1f:fd:13:98:00:4a:54:dc:5e:1f:
                    7f:a6:e0:d7:2c:dd:25:85:71:1f:90:6a:fc:76:12:
                    08:d5:2c:47:7a:81:3d:b9:66:bf:31:d2:d4:58:81:
                    e6:ca:c5:fd:43:33:73:43:b1:f2:97:2a:ec:59:a6:
                    15:8d:d8:60:dd:2a:80:d0:02:08:38:98:e0:c9:29:
                    ba:f4:87:aa:a9:eb:37:1c:cc:ec:20:9a:37:aa:b6:
                    9c:aa:14:5d:4b:36:90:73:3d:a8:78:13:d9:4c:59:
                    15:68:b8:c6:4c:d9:23:ad:b3:85:a2:c1:57:b0:5b:
                    17:7b:cb:ee:3e:68:60:12:f7:80:5b:cd:0b:52:57:
                    9b:97:02:28:6a:4e:3a:d2:5f:08:cb:cc:82:6d:1b:
                    10:d6:3f:e6:a3:86:7a:a9:86:4c:61:e4:29:85:83:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:FF:FB:30:53:08:D9:9B:B7:1B:62:9A:52:02:1D:53:6A:F8:16:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/9BFFFB305308D99BB71B629A52021D536AF8164D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.16.0/22
                  177.38.136.0/21
                IPv6:
                  2804:1df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52947

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:18:29:b5:12:d6:de:ca:ea:3f:a1:18:43:4b:33:0c:1e:
         bc:4c:b0:d3:2b:c6:31:01:fe:70:6e:fb:a6:ad:91:e6:12:58:
         2d:c6:84:40:4f:2e:62:27:47:e4:e4:54:9b:d8:01:d3:75:8d:
         30:54:83:d3:8c:08:3c:7e:6f:1e:0b:a3:d9:55:c0:f2:01:fb:
         11:e6:23:f2:76:f6:16:51:d6:ec:bf:e6:04:bf:72:8e:ec:88:
         7e:3c:d2:d5:d7:15:a3:ac:28:ec:8f:e2:cb:af:41:84:ea:04:
         ce:7c:29:86:b5:08:b7:f8:6f:5e:37:e4:d4:54:b5:a4:07:a1:
         5a:2c:f1:4d:4e:c9:0c:e7:0f:02:00:2e:0e:28:88:6d:b2:34:
         e9:4c:fe:1a:b0:b5:7a:c3:9b:fe:78:d1:1e:44:78:de:19:7f:
         1a:9b:a0:59:f5:38:b9:cd:82:3e:47:4e:1c:aa:94:ed:e7:d4:
         af:57:ea:ee:7d:bf:c8:b9:8a:61:1c:af:ea:43:d4:c2:2b:15:
         81:09:68:78:42:82:85:b6:15:a9:a2:bd:3e:ec:c9:b6:41:fc:
         ce:fd:33:8f:ef:24:bd:d7:a3:b6:c5:2c:25:8a:be:52:80:cc:
         6e:cd:19:02:73:67:5a:fd:6d:f9:52:af:91:b6:2f:49:15:4b:
         ec:92:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org