Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.cer
File:                     9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.cer (raw, json)
Hash identifier:          YXMCbBZL+9GBbKkGDEj4VqDGJP2jtT0MMDwt51Q8vEc=
Subject key identifier:   9D:84:1D:6D:EB:2E:8B:9D:0A:50:4C:0E:C9:F0:4B:E1:7C:45:29:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       252BFCA70C1FA502C82DE3A943E9883CC7DBE192
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jun 2023 16:55:09 +0000
Certificate not after:    Mon 10 Jun 2024 17:00:09 +0000
Subordinate resources:    AS: 268426
                          IP: 45.160.172.0/22
                          IP: 2804:5108::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2b:fc:a7:0c:1f:a5:02:c8:2d:e3:a9:43:e9:88:3c:c7:db:e1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 12 16:55:09 2023 GMT
            Not After : Jun 10 17:00:09 2024 GMT
        Subject: CN=9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:43:ce:d4:aa:28:b9:92:08:d1:f4:a2:82:
                    f4:38:28:08:4a:8e:33:95:e1:85:41:f9:66:93:25:
                    06:51:c4:e3:7a:2d:40:8a:ec:db:6b:35:68:dd:1f:
                    c3:77:1f:5e:19:79:c7:cb:cf:38:5b:74:98:38:97:
                    7b:b9:5f:48:fa:b4:74:e6:60:c0:00:ea:c4:dd:23:
                    95:c4:a1:fc:63:46:c6:62:61:18:87:ca:12:ee:97:
                    51:ab:63:43:9e:07:19:5c:98:a6:c9:a0:48:76:98:
                    ff:3d:8c:25:69:e0:c2:62:7c:c0:25:a1:55:f0:a7:
                    f7:1d:bc:15:87:7e:55:f0:ce:34:09:1c:b1:fb:ee:
                    9d:cd:b4:5b:eb:4b:29:07:d5:82:09:d4:b7:fa:ee:
                    2c:15:8a:de:8a:a9:2e:8a:0c:44:f8:75:b7:af:d8:
                    a8:53:93:09:c3:f3:43:6b:81:ab:84:b7:da:39:23:
                    69:74:95:e5:ac:7f:cb:eb:64:f4:cf:f3:65:b4:da:
                    b9:f3:c0:15:75:24:15:55:ac:be:f0:9a:94:b8:4f:
                    70:6d:95:5c:51:1f:7b:0d:b7:cd:a0:33:29:79:f0:
                    c8:c7:c4:ae:51:0c:05:f0:1b:9a:c2:32:4d:23:02:
                    4b:d2:b8:f2:73:f0:9a:96:64:61:ed:65:82:69:dc:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:84:1D:6D:EB:2E:8B:9D:0A:50:4C:0E:C9:F0:4B:E1:7C:45:29:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.172.0/22
                IPv6:
                  2804:5108::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268426

    Signature Algorithm: sha256WithRSAEncryption
         5a:c2:27:1c:ac:aa:92:b8:7a:ab:ee:be:42:77:88:08:22:83:
         ca:67:ad:1a:f7:8a:5f:f5:0e:8f:d0:af:fd:e1:5f:fd:26:97:
         c6:0e:85:6b:33:01:3d:7b:84:a2:e7:45:e0:f7:36:9c:c1:96:
         f5:9d:c9:4a:33:c6:35:cd:fa:d3:2f:57:93:98:7b:81:4a:8a:
         b6:11:88:2e:bf:74:43:4c:f1:0f:4f:f6:db:27:87:a9:52:d0:
         44:e8:ed:c5:a9:f2:16:d5:ae:77:0d:41:71:c8:12:8e:ea:86:
         58:e2:9a:25:f1:d2:9a:eb:f7:82:cb:83:d0:47:72:39:f0:f2:
         48:f0:b4:03:e9:60:67:90:65:23:d0:84:3d:1e:c1:c6:ba:99:
         a4:f5:ad:d0:ac:5b:7e:99:ee:82:10:40:9e:78:21:09:a9:39:
         4a:fd:17:74:b4:c7:94:1e:7b:2c:1e:2f:17:0e:81:4f:29:09:
         1b:b4:5c:20:e0:42:57:b2:de:20:8c:e6:c5:69:40:f1:7b:1c:
         2c:25:83:9d:7e:eb:aa:50:a2:e7:f3:c9:42:48:a2:c8:16:fd:
         e0:83:06:da:63:f0:9c:f4:5d:bc:17:2a:8f:b5:60:47:23:84:
         ff:47:0e:e4:69:0b:a7:74:0b:29:fa:00:0f:2f:31:79:62:79:
         dd:d3:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org