Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.cer
File:                     9C212610E4B3678AE5982482A8BB9594A109BDE1.cer (raw, json)
Hash identifier:          FObZYo6JIyzQ5ZE38NDsPKwAKzaaNNtB/kFCBKbw9kk=
Subject key identifier:   9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26D75FE23ADD1225423ADDD11533644B6ECB3A8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 13:03:24 +0000
Certificate not after:    Wed 26 Feb 2025 13:08:24 +0000
Subordinate resources:    AS: 271311
                          IP: 181.232.164.0/22
                          IP: 2804:7988::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d7:5f:e2:3a:dd:12:25:42:3a:dd:d1:15:33:64:4b:6e:cb:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 13:03:24 2024 GMT
            Not After : Feb 26 13:08:24 2025 GMT
        Subject: CN=9C212610E4B3678AE5982482A8BB9594A109BDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:9d:23:80:17:bf:98:13:7c:98:d1:89:7c:
                    40:65:92:67:7d:ca:7a:8c:44:89:9d:66:ef:f1:f2:
                    d0:0c:47:e9:59:f1:a7:2c:ab:b2:fe:8f:ba:61:71:
                    81:05:f8:d2:c0:4a:95:9e:f9:c5:8c:b9:9c:1b:ef:
                    4b:05:d1:a5:75:34:48:f4:6e:78:f9:aa:e5:a6:5b:
                    9b:06:2a:b0:3d:76:38:a9:a5:b5:36:ce:64:f0:1e:
                    cd:2b:37:ef:ca:1f:0b:6d:6f:b9:6c:81:f5:ec:8e:
                    84:e5:45:d4:72:5a:5f:e9:09:17:60:99:f7:07:1d:
                    6c:24:b4:d4:12:b0:76:9e:51:61:33:bc:5e:c6:3f:
                    a4:f8:b3:13:c2:22:26:3b:c4:ae:f1:41:a4:ea:e5:
                    3d:dc:09:0f:91:06:5b:91:e4:97:d0:61:43:88:37:
                    9b:ed:cf:54:8c:80:6e:16:79:98:32:36:4f:86:d6:
                    88:4c:00:e0:f4:d4:f6:ac:98:4a:3c:02:4b:c2:9d:
                    09:e7:0e:1d:07:92:bc:43:6e:18:35:a1:08:09:6c:
                    90:4b:4f:b9:6c:16:02:f1:51:c2:0e:43:a8:4e:f2:
                    31:7d:5d:45:73:8a:b1:f4:75:4c:f3:96:28:6b:b0:
                    76:a9:ce:47:a7:d7:2b:a4:69:05:57:37:1d:b7:a9:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:21:26:10:E4:B3:67:8A:E5:98:24:82:A8:BB:95:94:A1:09:BD:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/0/9C212610E4B3678AE5982482A8BB9594A109BDE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.164.0/22
                IPv6:
                  2804:7988::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271311

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:14:86:d3:47:b1:f4:db:4e:f5:66:34:21:51:56:b0:30:
         31:4e:b7:61:88:41:61:e8:c0:0e:e7:ce:50:1b:be:f8:ab:ac:
         0c:47:93:49:b8:88:74:57:81:53:e7:c5:04:27:28:82:2d:10:
         f6:23:fd:f1:b0:75:0f:95:6b:54:72:1e:1d:9d:ec:e0:20:ed:
         4a:46:f8:d3:f3:44:d1:98:94:6d:d7:58:73:72:7c:69:80:26:
         6a:01:1a:32:b4:79:ea:e5:e0:c1:6f:99:56:54:3e:e0:32:ba:
         3a:41:bc:04:9c:2b:7a:cb:85:d0:4d:be:98:4e:6b:d7:a9:df:
         dc:e2:f3:79:60:91:9a:36:50:bf:f9:b6:2a:a0:91:0c:26:28:
         62:a3:02:9e:83:77:a0:90:6f:50:9c:4b:5b:ca:4d:c6:11:73:
         ba:64:0c:bb:7c:ad:d2:06:41:96:bb:f8:c5:ed:1a:09:8a:78:
         98:0c:ed:cc:b6:36:8d:51:cd:cd:52:3d:b7:ef:d0:3b:64:bf:
         68:57:f9:f2:7d:87:67:44:a9:dd:d4:24:a8:6b:cd:1a:e1:d1:
         55:cb:6f:f6:c8:80:0c:5a:fa:3b:0f:80:71:8f:c7:1d:43:de:
         da:f6:e5:f5:4a:c1:39:d4:e5:32:c3:9b:0a:8b:22:1c:81:95:
         d8:d4:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org