Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
File:                     9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer (raw, json)
Hash identifier:          Gsl+YTCA33ITtu6FBO99hN/NS6YPI6CEv2eMGOavmuw=
Subject key identifier:   9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       704A2479EA99BC77D092A00DCE4F4E3131AAE7D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2024 14:24:09 +0000
Certificate not after:    Fri 21 Mar 2025 14:29:09 +0000
Subordinate resources:    AS: 263663
                          IP: 191.241.0.0/20
                          IP: 2804:112c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4a:24:79:ea:99:bc:77:d0:92:a0:0d:ce:4f:4e:31:31:aa:e7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 14:24:09 2024 GMT
            Not After : Mar 21 14:29:09 2025 GMT
        Subject: CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:69:de:d0:14:65:05:4f:39:ae:92:f1:60:
                    4e:06:12:0a:89:b6:f0:a1:2c:d6:97:9a:11:cc:cd:
                    7c:0c:7e:a1:f8:92:c6:fe:b4:de:6d:5e:f2:bc:72:
                    5e:65:e5:1c:42:5c:bd:36:15:99:04:4d:9d:1a:8b:
                    67:28:98:d1:98:58:76:c9:61:ec:a8:f8:f4:9f:b0:
                    e1:a0:20:c7:02:49:1c:9e:ae:6e:48:fd:27:78:c0:
                    77:6e:68:9a:75:c1:71:03:3f:17:39:f7:88:f2:9e:
                    e6:5d:91:ba:4e:41:c6:27:1a:e6:c4:42:40:63:dd:
                    ef:97:43:11:f9:cf:9d:1f:18:07:e7:ae:c3:bd:2d:
                    eb:db:0d:74:a0:9f:11:ba:40:0c:33:98:11:62:6b:
                    c0:e6:8b:3e:fa:88:f7:31:78:35:15:90:32:7e:57:
                    37:7d:a8:73:d9:2d:a9:fd:00:3d:b1:29:d8:b6:ce:
                    df:b6:21:b5:6e:98:63:eb:ef:35:08:e5:07:7e:ba:
                    0b:08:de:0d:fc:f5:4d:89:bd:64:44:02:e1:a4:df:
                    ba:03:c7:cd:31:41:e6:a9:9b:3b:82:76:f6:8c:3a:
                    6e:77:34:95:d2:a4:65:42:a8:c1:36:33:4c:de:8e:
                    c0:69:0e:11:9d:70:f3:14:06:6a:e6:ca:b9:dd:d2:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.0.0/20
                IPv6:
                  2804:112c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263663

    Signature Algorithm: sha256WithRSAEncryption
         51:24:00:7e:9e:02:b1:04:c1:a2:3a:71:6e:1b:b2:85:bc:10:
         e2:1c:c4:21:5f:68:d8:ca:05:7e:9d:62:05:fa:45:39:ab:37:
         37:83:b9:39:c7:86:72:8a:cf:13:ea:68:54:18:92:35:b1:5b:
         2b:86:e8:d9:34:1f:ae:35:87:4a:ec:59:25:63:86:5c:9b:05:
         03:2c:fb:be:ab:e1:47:2f:19:98:93:a9:bb:fc:32:4f:98:7c:
         f0:aa:4c:e9:3c:39:8c:48:09:5d:89:ef:15:0a:fa:09:11:0a:
         37:f0:d8:37:5e:e1:9a:42:c6:c7:ba:4c:6e:09:28:0b:2c:a0:
         3e:50:39:15:5b:8b:82:7b:57:8e:c0:27:dc:42:25:e2:27:c0:
         66:c4:5b:d3:b7:03:2d:b0:e5:2d:1b:83:fc:c3:e1:f8:9d:d4:
         7b:88:ca:aa:ad:3e:81:13:35:86:a8:43:d8:64:46:fd:6d:46:
         5d:ad:8c:a0:f8:e0:4c:03:e1:00:72:61:d0:78:bc:f0:eb:60:
         03:e5:66:21:dd:93:09:8c:0f:c4:c6:a8:f4:34:56:9c:09:ee:
         5d:79:e4:b5:2e:1b:17:7a:6d:87:0c:e4:3f:bb:8d:3f:9f:09:
         f5:7a:1f:46:03:b7:d0:49:f3:9f:53:3b:b3:5c:21:06:80:c8:
         aa:37:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org