Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345.cer
File:                     9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345.cer (raw, json)
Hash identifier:          1yRRQtMDnqyzvoK3t6ChT2tTsNEfbw8BBUeazrBtuOc=
Subject key identifier:   9C:93:B5:EB:DF:4B:BD:6E:3B:DE:E1:59:CA:33:B6:4B:51:E8:D3:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2ADDC6D119030DDD2EBA232A15B290CEB66E44C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/0/9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 18:17:41 +0000
Certificate not after:    Thu 27 Feb 2025 18:22:41 +0000
Subordinate resources:    AS: 264883
                          IP: 168.227.40.0/22
                          IP: 2804:2f50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:dd:c6:d1:19:03:0d:dd:2e:ba:23:2a:15:b2:90:ce:b6:6e:44:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 18:17:41 2024 GMT
            Not After : Feb 27 18:22:41 2025 GMT
        Subject: CN=9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:41:34:1d:6b:f3:86:76:75:aa:43:a3:12:
                    b6:d2:01:67:27:ce:96:dc:a4:e4:d2:4b:3a:a8:9e:
                    95:40:c3:df:ce:39:28:f1:90:04:11:16:db:66:0d:
                    c8:05:81:f8:45:2f:c6:61:0e:07:4f:ed:c9:9b:67:
                    02:b0:4b:15:82:2a:ba:56:f2:ab:1d:be:23:a0:88:
                    42:b0:1f:34:6c:e8:46:fc:33:19:1b:eb:67:0a:6a:
                    bf:49:c8:cc:6b:80:0a:bc:5c:99:12:c1:fe:23:8a:
                    8e:6a:2c:2b:5b:84:6b:3f:6d:31:ea:76:2b:48:4e:
                    3c:ee:74:68:a7:e7:e2:b7:b5:81:e6:e2:7a:6b:bc:
                    82:38:04:ed:13:34:69:53:f3:ad:ef:bf:9c:50:14:
                    29:02:6d:ae:f2:c3:c3:5c:c6:df:22:49:78:46:dc:
                    a8:2b:a6:be:f1:1b:e6:ee:7b:7b:d6:8f:ba:a4:b2:
                    15:17:38:ac:1b:10:c5:43:f6:3f:9e:96:9f:5a:34:
                    89:b1:99:3a:77:f2:8a:d1:ef:c0:81:37:74:37:dd:
                    70:6c:d0:ef:41:11:2f:46:c0:ba:ce:c9:52:64:c4:
                    8d:72:6a:b9:fe:34:cf:dd:56:fa:53:7b:bb:10:59:
                    8c:65:5a:ac:76:31:8c:15:c4:6c:6b:9b:8e:bc:11:
                    58:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:93:B5:EB:DF:4B:BD:6E:3B:DE:E1:59:CA:33:B6:4B:51:E8:D3:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/0/9C93B5EBDF4BBD6E3BDEE159CA33B64B51E8D345.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.40.0/22
                IPv6:
                  2804:2f50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264883

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:ea:e4:13:71:a0:99:bc:72:d4:d3:05:ce:14:27:0e:bb:
         34:0b:fb:85:f5:0a:d5:aa:58:b2:e4:6c:ec:14:5e:63:47:bb:
         89:9d:56:9a:49:70:7d:fd:34:c3:36:c5:de:fc:ad:58:86:0a:
         64:be:27:10:51:ca:bb:2d:8b:de:6e:f2:07:80:32:ce:2a:9f:
         0a:aa:01:c3:7b:0a:09:87:33:9e:3c:65:6d:20:81:ae:b5:fd:
         1a:08:bb:98:1b:a1:3c:ca:1b:be:f4:39:35:3c:ec:d5:88:44:
         56:90:48:b0:1e:1b:a8:15:7e:49:cd:e6:98:8e:cd:80:ec:01:
         25:bb:d6:38:d9:23:f3:dc:a5:43:60:ae:7c:f1:57:a6:36:0d:
         aa:be:95:d6:6d:43:06:be:80:34:b1:29:1a:a8:9e:d2:56:2b:
         f3:42:6e:4b:06:bb:ce:4d:45:db:8b:23:c1:4e:e4:07:d9:9b:
         45:37:fc:9b:92:6a:7c:a5:e2:a4:93:10:62:81:27:37:77:f2:
         21:56:0f:69:77:6f:81:08:c6:f9:3d:20:5f:c0:36:b0:c9:66:
         32:97:3d:4b:a0:c5:db:c8:71:48:cf:7c:8d:1e:f5:97:a3:84:
         5a:f1:fd:b1:63:e1:4e:61:d4:ec:2d:58:c0:57:25:3e:67:b6:
         aa:b8:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org