Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9D2636456069EFE8481331BCAD68D241BFEAD9E8.cer
File:                     9D2636456069EFE8481331BCAD68D241BFEAD9E8.cer (raw, json)
Hash identifier:          Qm7yi86CgE6w1g8o/gDHXfV5PCo3RM2USCq64/XqFY8=
Subject key identifier:   9D:26:36:45:60:69:EF:E8:48:13:31:BC:AD:68:D2:41:BF:EA:D9:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5785AE067DDBB7A08788520D8A6C76D8FC6B9861
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/9D2636456069EFE8481331BCAD68D241BFEAD9E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Oct 2022 14:53:12 +0000
Certificate not after:    Thu 26 Oct 2023 14:58:12 +0000
Subordinate resources:    AS: 269574
                          IP: 45.189.88.0/22
                          IP: 2804:66a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:ae:06:7d:db:b7:a0:87:88:52:0d:8a:6c:76:d8:fc:6b:98:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 14:53:12 2022 GMT
            Not After : Oct 26 14:58:12 2023 GMT
        Subject: CN=9D2636456069EFE8481331BCAD68D241BFEAD9E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1c:3d:41:d2:7b:79:cd:5e:3b:db:f1:92:f4:
                    b2:35:91:9b:7f:73:ba:96:50:02:e4:ae:96:23:6d:
                    22:5c:94:fe:d9:59:48:99:09:16:e1:86:65:53:b2:
                    de:5d:6a:93:6b:88:f4:53:5d:c2:c7:ff:49:03:92:
                    4e:d2:d8:fe:22:7d:b7:10:ce:fb:bb:79:ca:dc:b1:
                    83:20:82:0d:e0:6c:74:ba:14:95:a9:b6:bb:82:b0:
                    bf:88:b5:cd:7c:24:56:39:7f:96:97:3e:60:dc:d0:
                    84:69:a9:ee:68:af:87:b8:b9:75:32:82:40:66:8d:
                    4e:b1:fd:ba:23:a0:3c:28:80:ef:fb:7d:32:67:22:
                    84:22:8b:62:96:ca:91:19:5f:0f:35:9f:76:7b:35:
                    b8:2d:d6:a1:39:00:60:b1:e8:96:8e:3c:db:a4:52:
                    44:dc:61:03:a7:ca:5e:bc:7f:1b:97:a0:3a:c3:26:
                    6d:6d:3f:f1:83:89:3d:ac:23:c1:7b:ce:64:7a:c9:
                    38:f2:fb:e3:15:5c:0d:b1:0b:92:11:20:c0:c6:17:
                    0a:63:16:d8:fd:f3:6f:5a:93:a3:7e:4b:44:ba:43:
                    fe:27:0d:4f:9d:e9:8f:e9:da:b3:61:80:ae:f8:e2:
                    b0:bc:ab:c1:5e:37:6c:df:a8:de:3e:53:98:65:fd:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:26:36:45:60:69:EF:E8:48:13:31:BC:AD:68:D2:41:BF:EA:D9:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/2/9D2636456069EFE8481331BCAD68D241BFEAD9E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.88.0/22
                IPv6:
                  2804:66a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269574

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:c3:3d:01:14:a4:c2:84:b7:37:ac:50:93:ae:79:33:de:
         c9:6c:e5:8b:53:27:89:aa:c1:01:2d:4b:a1:43:87:03:57:64:
         16:43:5a:00:57:f6:9c:f3:23:99:36:bd:0a:b1:31:28:53:ee:
         84:de:df:ae:bf:25:6c:8b:d5:3e:45:98:e6:9d:5f:69:7d:d8:
         47:bd:91:fc:3b:1f:95:e5:34:ad:17:bd:c7:67:35:a9:f5:b6:
         71:7e:a8:43:ce:d2:18:df:32:39:8a:0f:4a:59:f7:22:ea:11:
         42:80:0b:ba:1d:25:0a:ae:e2:a6:2f:38:53:d3:75:a3:ff:63:
         2d:e5:e3:21:a4:84:20:80:d0:47:98:e6:2c:34:e2:67:1b:06:
         76:41:15:a6:2a:fa:54:7e:8b:e7:0a:47:8e:3a:8c:6c:5f:44:
         b3:fe:66:df:e5:7a:46:f4:3a:2d:a1:7f:cb:e0:f6:ee:8f:1a:
         25:e0:78:0c:fa:41:53:b8:d8:d8:c3:83:26:f9:8c:48:5f:f4:
         57:5a:87:b1:96:1b:44:49:fa:97:bb:64:0b:ef:7a:a1:0e:72:
         78:4d:60:0f:4c:19:91:39:88:29:59:e5:af:e2:7b:b3:8b:22:
         99:48:be:de:5d:5d:8e:fa:ca:29:9e:00:0d:19:fa:42:c3:74:
         68:e7:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org