Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer
File:                     9D28D657B942A6DA857BB23C8B6684ABC7261738.cer (raw, json)
Hash identifier:          +npztBhjXP8ucWCVBWuVfAlCm5djRVUphatSuhgykUQ=
Subject key identifier:   9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       092289F3EA99FCAAFD9578AA35115DD8486C1EF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 20:14:05 +0000
Certificate not after:    Wed 06 Nov 2024 20:19:05 +0000
Subordinate resources:    AS: 264596
                          IP: 138.59.40.0/22
                          IP: 2804:222c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:22:89:f3:ea:99:fc:aa:fd:95:78:aa:35:11:5d:d8:48:6c:1e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 20:14:05 2023 GMT
            Not After : Nov  6 20:19:05 2024 GMT
        Subject: CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:89:01:73:05:9b:c4:cb:3c:7c:06:88:40:
                    79:62:35:60:74:aa:d7:12:b4:44:f6:d3:8f:88:8d:
                    a7:e8:1c:94:d2:1f:52:0f:bf:e7:2a:93:78:9a:58:
                    f8:ce:c4:3b:00:db:95:c7:7e:37:de:43:32:9f:e9:
                    4e:9a:0f:98:3e:32:01:0c:3a:8a:95:9f:d1:b2:c6:
                    38:cd:99:97:d9:22:5a:d3:20:03:6e:e4:c7:cb:02:
                    8e:fd:a3:b1:25:26:84:1f:15:61:0e:96:0c:47:a3:
                    cb:e2:08:47:50:02:9a:43:22:b8:a7:fb:8f:17:d4:
                    4c:93:0d:2e:5f:0e:0c:84:68:13:d1:b5:f9:91:36:
                    e0:4b:cc:cd:4b:ad:5b:a6:14:65:a4:4b:3b:93:9a:
                    b3:7f:66:f8:64:eb:06:a7:45:12:ca:69:da:ae:84:
                    91:a3:08:d2:62:e1:15:d4:62:1d:c2:63:95:2e:5f:
                    c6:5a:2a:ae:17:a7:03:69:8c:ed:0c:64:c5:4c:e5:
                    d8:c7:0f:93:23:de:09:12:e6:9f:d3:aa:41:fb:ba:
                    e5:72:ed:ff:46:e1:c4:63:e6:86:c2:66:69:ce:b1:
                    d1:6b:5a:c2:69:75:7b:d0:10:87:9a:6c:5c:7b:41:
                    99:a4:ab:4a:07:0f:ff:6a:35:0b:6b:be:f7:7f:d8:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.40.0/22
                IPv6:
                  2804:222c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264596

    Signature Algorithm: sha256WithRSAEncryption
         0b:ca:5e:da:80:a9:db:e7:a6:0b:39:27:39:70:6d:4c:2a:d4:
         92:e4:9b:44:95:ae:5a:20:80:d9:a0:d5:f2:68:ff:c0:ef:4c:
         8c:5f:d6:07:f1:ae:26:0d:ed:85:a0:fc:8f:72:3a:b8:3b:b2:
         c4:e9:8a:29:cc:20:44:a5:81:b5:ae:16:0d:38:96:1a:8a:31:
         cb:c2:2e:35:f2:25:11:1e:d0:c2:2f:7a:d8:f7:88:16:0b:31:
         9b:2c:fa:ea:93:d5:3a:18:da:7c:23:7c:51:64:dd:ab:0b:3f:
         cf:0d:50:fc:df:d6:3e:27:90:a7:4c:ec:a6:59:d1:5c:27:65:
         0f:20:6d:b3:68:18:b1:d7:ce:60:e9:fc:42:87:93:bf:6d:4e:
         ac:6e:42:e4:11:0a:e0:4d:c9:9f:fd:60:c6:0b:e1:a5:b5:76:
         58:1a:b7:e3:51:2a:65:b5:7f:37:bd:6e:00:3a:cc:ca:d2:58:
         71:ff:52:57:c0:1a:3b:bb:7e:57:00:a6:f4:e8:81:bb:5c:0e:
         83:6d:d4:1f:94:e4:36:54:eb:0e:ce:83:b8:be:15:ed:09:79:
         20:d7:d8:8e:ca:a9:a7:23:10:58:bc:ea:08:d7:34:2b:c5:51:
         b8:3c:86:06:41:86:77:77:a9:92:92:c3:5f:60:12:03:1b:13:
         6b:f8:f7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org