Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer
File:                     9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.cer (raw, json)
Hash identifier:          erDPIlALzPePZkQ4bW9GcASndp/hOzGdFv/9nrPOiBU=
Subject key identifier:   9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6897DDF9E424CE45A6FAEB8079AFB5BAA639507B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 18:32:39 +0000
Certificate not after:    Mon 03 Mar 2025 18:37:39 +0000
Subordinate resources:    AS: 264936
                          IP: 168.232.80.0/22
                          IP: 2804:3034::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:97:dd:f9:e4:24:ce:45:a6:fa:eb:80:79:af:b5:ba:a6:39:50:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 18:32:39 2024 GMT
            Not After : Mar  3 18:37:39 2025 GMT
        Subject: CN=9C708A5069205995C5C25CF3CA98ECFC6EF9CF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:14:13:2a:b5:cf:d3:86:51:1b:45:99:a8:0f:
                    d4:ae:15:57:27:d2:41:d0:e2:00:ef:f4:51:3e:76:
                    11:05:f7:0b:bb:85:28:f7:40:24:ea:a6:f9:22:ba:
                    1c:87:9e:fb:75:a7:21:b1:d8:c3:bd:44:bb:27:94:
                    22:7d:0b:ff:1e:14:21:57:26:3e:a3:b2:62:e0:9f:
                    3d:a4:76:bb:c3:d9:6d:ad:bc:75:ea:02:09:62:f2:
                    44:bb:a4:12:87:81:e3:06:ab:18:21:14:e0:6f:14:
                    d8:76:85:72:67:04:cd:f9:c9:b0:ff:65:29:d5:c5:
                    b6:a2:ad:95:d9:41:db:5a:fd:b3:8b:7a:3f:a3:d4:
                    c8:37:cd:d0:b4:91:6b:cf:e4:13:52:a9:b0:89:69:
                    43:98:a0:cf:7b:d2:61:58:bc:ef:7e:84:b5:9e:7f:
                    f0:e9:d6:9b:f9:53:be:fd:1a:c2:25:ee:8f:26:f3:
                    ee:a5:8a:b3:d5:3f:98:2a:3b:14:6f:75:fc:97:f3:
                    08:66:91:dc:e3:69:13:0a:24:e1:e3:b6:af:ba:ce:
                    1b:69:3e:e6:f2:bd:91:65:a3:a3:1e:e2:ce:43:02:
                    c6:6b:8e:80:78:3d:b2:da:d8:48:6e:df:f6:55:c0:
                    4c:4c:77:f9:27:4c:d6:27:dd:76:83:fc:7e:e5:65:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:70:8A:50:69:20:59:95:C5:C2:5C:F3:CA:98:EC:FC:6E:F9:CF:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/2/9C708A5069205995C5C25CF3CA98ECFC6EF9CF66.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/22
                IPv6:
                  2804:3034::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264936

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:be:45:ae:32:0e:36:34:6d:fe:a8:a0:a1:c9:33:ad:9a:
         55:95:11:9f:b6:d2:bf:d8:4e:c6:40:71:8b:c7:79:c6:d0:8a:
         a2:54:d4:fe:34:97:87:24:43:09:10:e4:93:4d:cc:09:a8:1b:
         f9:5e:67:41:25:28:fe:d4:90:67:bd:eb:82:f2:e6:5b:11:1d:
         c7:e5:24:2c:06:1f:ff:4f:fb:7d:d3:95:dc:7d:c5:5b:bb:2c:
         3e:93:c6:85:0b:5d:19:35:ea:cf:28:3a:96:59:31:cc:c8:a1:
         27:49:4b:51:15:8a:1e:4c:a5:3b:b3:01:c9:3f:94:7d:29:57:
         de:e7:f3:2c:da:2d:e8:d1:56:e7:4e:54:70:77:b6:b3:41:78:
         98:44:cf:bc:6b:e6:bc:a7:31:e5:06:5c:fc:e8:b1:be:59:62:
         55:d4:75:a1:e0:db:89:f2:99:61:fc:e8:19:5a:71:9c:1d:8e:
         58:70:ea:2b:cb:ba:71:6d:e6:b8:dd:bd:76:67:ed:b7:ca:0a:
         8e:bd:10:51:93:23:87:ac:8b:73:d3:1c:94:89:09:4a:0a:da:
         13:f9:00:87:c5:01:8e:8e:98:ea:3c:47:c6:62:95:09:55:37:
         f8:82:37:04:27:ba:2a:6e:3c:ea:59:f9:2e:aa:a2:7b:1a:dc:
         f0:db:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:24:35 2025 by rpki-client