Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.cer
File:                     9C1B636737328489B2BBC1E208AF52B99A524C4A.cer (raw, json)
Hash identifier:          t/Ns4L6hH29kNQAhLLItThiiXjkVqVbNFgm0RLnP0Zo=
Subject key identifier:   9C:1B:63:67:37:32:84:89:B2:BB:C1:E2:08:AF:52:B9:9A:52:4C:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78479281121898854CA309A9B9DB691493BB7F15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Feb 2023 20:35:09 +0000
Certificate not after:    Wed 31 Jan 2024 20:40:09 +0000
Subordinate resources:    AS: 28305
                          IP: 189.39.96.0/20
                          IP: 189.85.144.0/20
                          IP: 2804:2898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:47:92:81:12:18:98:85:4c:a3:09:a9:b9:db:69:14:93:bb:7f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 20:35:09 2023 GMT
            Not After : Jan 31 20:40:09 2024 GMT
        Subject: CN=9C1B636737328489B2BBC1E208AF52B99A524C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:71:e9:fe:09:66:5a:da:9c:01:4e:54:62:
                    81:4c:47:4a:6c:da:6c:63:8f:a1:e4:c7:8a:c3:31:
                    24:3b:4a:b0:28:93:ae:62:14:d7:fb:bd:02:fd:53:
                    21:45:f3:91:a3:1c:dd:3e:15:e3:22:67:5c:e2:5c:
                    18:75:2f:4a:d2:e3:3f:e2:af:1c:7f:9a:cb:7d:9b:
                    3a:f6:85:be:ab:3e:98:73:e7:2c:29:22:b5:6f:fe:
                    39:38:0d:d5:d1:71:c8:78:67:ac:bb:13:b5:f6:92:
                    d3:17:c6:bc:49:2e:0b:cb:90:a3:d1:1f:04:d3:e8:
                    e0:2e:2c:c4:bb:c6:f0:b2:bb:e4:3b:69:37:d4:f8:
                    98:75:51:31:ea:75:dc:19:cf:d8:d1:12:4a:36:1f:
                    bf:c1:02:39:b4:b5:46:20:3d:8e:46:77:22:f5:7d:
                    2f:8b:aa:a6:bd:24:bd:d2:97:16:85:2b:ae:f7:74:
                    5d:a6:85:ac:ef:58:bd:94:cf:b4:eb:be:f1:39:67:
                    10:45:5c:fd:a9:2b:03:10:02:16:5c:e4:a4:6c:d5:
                    30:f2:23:23:22:a7:f3:fb:33:97:7c:04:1f:ba:26:
                    9d:3b:0d:81:a5:6c:f9:f3:cb:0f:7c:66:72:50:4d:
                    41:77:34:ba:c6:fa:2d:61:4e:1a:e1:5a:e0:a5:8a:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:1B:63:67:37:32:84:89:B2:BB:C1:E2:08:AF:52:B9:9A:52:4C:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/9C1B636737328489B2BBC1E208AF52B99A524C4A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.96.0/20
                  189.85.144.0/20
                IPv6:
                  2804:2898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28305

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:de:4a:4b:ce:bc:28:0a:f2:6a:37:9f:10:9e:ed:de:1d:
         23:78:d8:e2:f2:ca:85:ab:b6:06:fd:29:a2:21:39:25:63:37:
         73:94:dc:04:ae:d4:45:62:9a:b4:42:56:2b:28:ba:45:4e:63:
         1f:6e:75:1d:bf:94:63:c4:32:1e:3e:6c:21:13:21:01:df:3e:
         3e:c3:f5:f5:09:61:aa:3d:61:1e:49:0c:7a:7f:0d:84:94:b0:
         76:94:e0:3e:0c:41:bf:bb:d9:73:2c:34:2a:1f:f1:fc:f4:1c:
         95:47:16:97:78:58:30:7f:09:84:3b:3e:04:18:d5:3b:85:d7:
         bb:50:e9:40:56:40:e4:ec:c9:fc:37:f1:2d:ad:dd:70:8e:d0:
         9d:20:d5:b4:dd:ec:15:95:2e:3a:94:47:21:b1:c9:b9:bd:d8:
         1a:46:9a:71:3c:53:06:44:7c:3d:b5:fc:18:13:64:38:7e:75:
         b9:a4:17:d4:9e:cb:08:c1:2f:46:13:ae:ec:49:fa:20:52:d4:
         42:5f:69:ce:bc:15:56:77:7d:bd:03:86:05:6d:df:47:b3:27:
         a6:67:88:29:58:2a:11:be:c3:c5:2c:42:be:24:c5:3a:92:4e:
         34:a1:cf:8d:67:33:7a:6d:03:a7:83:36:1b:78:ad:ec:a9:4d:
         44:9c:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org