Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C161DD608B90DBBC89E58DF017B7D0C635DB9E9.cer
File:                     9C161DD608B90DBBC89E58DF017B7D0C635DB9E9.cer (raw, json)
Hash identifier:          YjPY6yIQGBAgXrkpEvHiWAlupehoNpQcB3vyAId31i8=
Subject key identifier:   9C:16:1D:D6:08:B9:0D:BB:C8:9E:58:DF:01:7B:7D:0C:63:5D:B9:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       131F54F2AC13DF2FC46EAB1CEC64DDA95ED37F13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/74ZKQjr2XDyN6GcNsiseCFWQUG1NsWi7MQXYipoCX75W/0/9C161DD608B90DBBC89E58DF017B7D0C635DB9E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/74ZKQjr2XDyN6GcNsiseCFWQUG1NsWi7MQXYipoCX75W/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 19:07:22 +0000
Certificate not after:    Tue 17 Jan 2023 19:12:22 +0000
Subordinate resources:    AS: 270522
                          IP: 187.103.192.0/22
                          IP: 2804:6d48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1f:54:f2:ac:13:df:2f:c4:6e:ab:1c:ec:64:dd:a9:5e:d3:7f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 19:07:22 2022 GMT
            Not After : Jan 17 19:12:22 2023 GMT
        Subject: CN=9C161DD608B90DBBC89E58DF017B7D0C635DB9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:4e:2e:5b:79:e1:01:69:63:d0:78:a0:11:
                    dc:23:93:21:f4:6e:c3:63:a5:a0:0e:18:36:ac:56:
                    2d:27:80:9b:c9:aa:e2:ae:96:65:49:0f:d4:9d:f2:
                    8e:a2:da:00:fd:df:8b:07:16:ed:af:4c:da:18:1e:
                    01:6a:a5:07:d4:1c:59:32:f4:f8:7c:ff:d3:21:62:
                    28:0e:1f:ba:2e:0e:e5:2b:56:51:c7:5f:b1:28:9a:
                    5d:62:15:2c:c5:f4:ba:a3:fc:bb:51:d5:e7:c2:65:
                    68:30:68:3a:2e:96:28:ca:fd:49:c2:68:8f:0b:ae:
                    c5:41:1e:3d:50:74:fa:b1:5a:31:66:9f:b9:bf:6f:
                    bc:a4:a8:61:a5:25:95:8e:77:3f:78:d3:6a:50:35:
                    d3:5c:75:1a:6d:6b:ae:41:87:a1:08:75:13:ea:a5:
                    6e:7f:cc:8e:c9:0f:a5:38:c6:cf:10:13:13:0e:f1:
                    9a:fd:2a:58:77:ea:60:ce:23:f2:70:db:1a:c9:2d:
                    96:eb:a5:2a:5e:7c:74:95:ab:9a:53:e6:7c:8b:49:
                    b5:21:1b:7b:78:7d:84:2d:94:a9:e3:b1:2b:5e:4a:
                    23:7b:e3:80:2a:37:c7:e1:cd:34:21:ee:48:c9:25:
                    1b:c0:1e:f0:6c:47:bd:b7:33:66:2b:f9:03:e9:d1:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:16:1D:D6:08:B9:0D:BB:C8:9E:58:DF:01:7B:7D:0C:63:5D:B9:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/74ZKQjr2XDyN6GcNsiseCFWQUG1NsWi7MQXYipoCX75W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/74ZKQjr2XDyN6GcNsiseCFWQUG1NsWi7MQXYipoCX75W/0/9C161DD608B90DBBC89E58DF017B7D0C635DB9E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.192.0/22
                IPv6:
                  2804:6d48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270522

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:14:45:66:aa:0e:83:b8:f1:96:97:9c:be:fd:37:2c:51:
         fc:35:7c:05:73:e3:d5:ad:ad:91:f5:f8:00:fa:69:2d:42:b8:
         83:d2:ef:7e:ec:cd:6e:f8:53:b9:b9:aa:0b:1b:08:3f:8a:ed:
         77:61:13:a6:45:eb:d6:fc:49:1c:bc:af:23:be:76:de:2c:41:
         55:87:c6:c3:52:31:42:1b:ce:8b:ce:9d:d0:90:23:5b:71:3e:
         0a:9a:10:e1:46:54:cb:19:a8:0f:a0:46:f0:f6:6b:33:36:42:
         35:f3:b4:20:7a:5f:5b:b4:25:e4:fd:b3:94:a3:47:fd:8d:be:
         9f:48:cd:3d:7d:4a:85:3e:0e:e0:1c:a3:4c:bd:8d:57:40:d8:
         74:4c:a6:5a:53:b5:34:49:21:dd:a3:6b:d4:6a:eb:85:93:3c:
         21:4d:2c:4a:25:0b:51:1e:9b:41:36:7c:2f:65:9d:b7:5d:c8:
         a9:f7:98:47:b6:0d:ab:e5:28:20:e0:2a:84:fc:f1:bb:6f:9c:
         aa:56:0e:33:4f:ff:4b:f8:f6:02:ee:99:25:ca:58:63:54:2e:
         dd:5a:89:ef:19:4c:f5:1e:1a:31:44:18:44:a4:9d:75:fb:72:
         85:78:ee:89:1d:82:b2:5d:3d:94:7a:67:31:43:c9:d4:23:84:
         0f:fc:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org