Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.cer
File:                     9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.cer (raw, json)
Hash identifier:          QWeKqLPitRwsmnLS25xHsDqAMsxKYkHPPl96yoKvvtE=
Subject key identifier:   9C:63:B4:14:32:71:91:53:F9:F6:55:F8:B9:BE:6D:FC:AD:47:BE:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FEEDD46EBC7C5FBEA21420788822B509D0F78E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Dec 2022 10:47:03 +0000
Certificate not after:    Sun 17 Dec 2023 10:52:03 +0000
Subordinate resources:    AS: 269647
                          IP: 45.190.136.0/22
                          IP: 2804:67bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ee:dd:46:eb:c7:c5:fb:ea:21:42:07:88:82:2b:50:9d:0f:78:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 10:47:03 2022 GMT
            Not After : Dec 17 10:52:03 2023 GMT
        Subject: CN=9C63B41432719153F9F655F8B9BE6DFCAD47BEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:ac:0a:70:28:fa:cf:74:19:4b:f2:79:b8:
                    26:cb:66:4f:9d:ec:62:01:a4:91:61:1c:7e:00:b2:
                    2b:ff:c7:ca:ca:71:3b:f4:75:c3:9e:c4:77:58:f9:
                    54:d0:62:90:0c:52:26:1d:c1:8e:53:ee:c1:9e:e7:
                    9e:1a:00:95:83:37:f4:41:4b:68:f8:9e:14:a4:a0:
                    b3:9a:31:14:2f:88:43:34:00:8c:cc:38:fc:fd:23:
                    88:72:c6:a3:9a:53:cc:e3:24:e0:9b:82:fc:f1:98:
                    9c:70:b4:2e:45:67:e9:de:b9:35:9a:95:be:a8:6d:
                    3e:86:ba:23:a9:01:a0:b6:48:4c:6c:f1:fa:c7:a3:
                    c4:5f:99:68:2c:fd:7a:f7:75:48:28:b2:89:13:9b:
                    9c:90:fc:c8:b6:3f:99:40:01:dc:d0:80:2f:5d:fe:
                    02:13:0f:c3:b9:29:33:93:ef:c3:3d:7c:58:64:f3:
                    89:68:7d:04:1a:be:1a:97:61:77:cd:2c:e1:d7:3f:
                    dd:b2:b3:05:56:50:9c:1f:5d:b1:29:05:bb:42:55:
                    4c:bf:fd:d5:89:54:03:84:59:16:53:18:c7:61:33:
                    03:a0:7e:c8:47:5e:9e:62:bc:83:4e:ad:9d:ad:88:
                    bc:7f:ee:03:2c:7e:ef:5a:85:9d:d1:7f:d8:1f:3c:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:63:B4:14:32:71:91:53:F9:F6:55:F8:B9:BE:6D:FC:AD:47:BE:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/9C63B41432719153F9F655F8B9BE6DFCAD47BEA9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.136.0/22
                IPv6:
                  2804:67bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269647

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:04:ce:f9:76:80:02:1d:ff:d1:0b:46:54:75:5b:94:7c:
         bb:c1:35:98:65:f3:82:bc:df:45:dd:de:0b:6a:2e:ee:a0:57:
         eb:45:d2:dc:a9:a7:2c:14:ac:0d:9d:ef:68:49:e8:f9:14:b8:
         52:73:d9:a0:d1:65:db:ce:2e:2f:64:2b:85:fc:13:7d:2b:8b:
         fb:95:a4:93:11:ef:57:09:59:7c:9c:f1:d0:2a:bb:4e:6c:61:
         8b:cf:83:c7:e5:6b:ba:94:ce:8a:bb:19:a1:15:1c:15:bb:a1:
         d8:b0:88:31:1c:4f:61:cb:dc:52:e6:1b:a9:3e:26:aa:49:d5:
         93:1a:fc:0a:11:ad:11:98:af:c0:0c:0a:d1:6e:14:9c:aa:e7:
         3e:9a:8f:75:76:25:67:16:b7:c3:bb:6c:7d:08:88:80:63:1a:
         15:9e:1c:94:09:2c:ba:84:10:f0:65:92:88:60:83:e5:50:cb:
         e7:1e:67:04:4c:f7:bb:2d:cf:5a:07:54:b8:56:97:8d:b9:ec:
         b9:69:7e:72:45:29:45:58:69:87:fd:ba:58:dd:05:5d:d3:7c:
         86:97:2e:31:ee:08:86:d4:58:4a:92:3f:68:27:7c:c3:fc:dc:
         f9:e1:22:8e:f1:1e:18:18:b0:29:4d:b5:f2:e7:9e:68:4d:fb:
         03:db:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org