Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9D88E091BB97EC27D251CB5B49F16661CDA8608E.cer
File:                     9D88E091BB97EC27D251CB5B49F16661CDA8608E.cer (raw, json)
Hash identifier:          S6sEvyZSkkcjSgpc/ueDBDlOtiELw2E3YFlNgeiMJaA=
Subject key identifier:   9D:88:E0:91:BB:97:EC:27:D2:51:CB:5B:49:F1:66:61:CD:A8:60:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5DFF92E5538D04CBFCD0E6516CA6567D1E3CBCD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/9D88E091BB97EC27D251CB5B49F16661CDA8608E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Sep 2023 13:13:45 +0000
Certificate not after:    Fri 06 Sep 2024 13:18:45 +0000
Subordinate resources:    AS: 52814
                          IP: 177.72.8.0/21
                          IP: 2804:45e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ff:92:e5:53:8d:04:cb:fc:d0:e6:51:6c:a6:56:7d:1e:3c:bc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 13:13:45 2023 GMT
            Not After : Sep  6 13:18:45 2024 GMT
        Subject: CN=9D88E091BB97EC27D251CB5B49F16661CDA8608E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:69:7d:f8:53:4e:d9:2a:e3:ba:d7:27:1e:
                    83:ba:ba:8f:b0:12:de:0d:39:d9:f0:84:86:5d:94:
                    af:c7:56:06:87:d6:05:72:66:87:e6:bc:cf:79:c4:
                    96:23:cd:38:71:7d:ae:7a:35:a8:5b:69:b8:f3:91:
                    f9:bf:6e:46:cf:36:e6:24:a8:e6:8e:28:85:58:d6:
                    f7:65:ca:c0:a5:64:41:a3:55:d2:4a:26:e4:56:6b:
                    80:27:8d:0f:db:5f:49:71:d0:9f:b7:be:b8:ad:27:
                    1b:c7:6f:3c:b5:23:81:99:6f:2f:75:38:af:47:4e:
                    63:cb:24:9b:ec:b4:ac:42:a8:71:8e:b3:62:08:ff:
                    a5:22:3a:af:11:c3:65:fa:e6:96:53:14:80:a6:3f:
                    41:b8:05:dc:1a:d0:20:f5:3a:93:00:4b:72:bd:0f:
                    71:59:07:a7:d2:f7:92:00:6a:16:ac:4d:d2:04:ba:
                    8f:07:9b:8a:3a:9c:1c:ba:c4:7c:1e:ec:6f:9f:87:
                    4b:b3:64:e3:f2:1e:33:d3:71:ee:d3:04:34:c6:ac:
                    4f:65:d0:67:aa:ed:df:58:c5:80:aa:ef:a9:58:1c:
                    13:b8:68:23:86:f0:af:3d:46:bc:fe:e8:b2:d8:d9:
                    4c:f9:6d:de:8d:f6:6b:46:07:7e:fd:6e:88:f4:58:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:88:E0:91:BB:97:EC:27:D2:51:CB:5B:49:F1:66:61:CD:A8:60:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/9D88E091BB97EC27D251CB5B49F16661CDA8608E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.8.0/21
                IPv6:
                  2804:45e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52814

    Signature Algorithm: sha256WithRSAEncryption
         33:00:b9:3f:13:1c:ed:4e:31:f8:04:4b:32:9b:fd:06:7c:b0:
         e5:2a:45:80:9f:5b:ff:1a:65:a1:33:99:48:f0:5c:95:88:a3:
         1b:55:07:77:7b:e3:0f:77:09:6f:51:7d:dd:6d:ee:7f:15:2d:
         0e:80:46:56:c0:18:6b:0c:66:3d:35:ff:80:a8:c5:56:01:8f:
         61:79:ea:26:98:5c:cb:c2:7b:72:30:d5:57:ce:b4:46:21:cd:
         a7:3a:f5:d0:81:ab:23:b9:84:c7:8a:1f:b8:ac:4f:bc:2f:cb:
         d3:22:c8:e2:9f:4d:07:4b:08:fa:e2:fb:19:7d:be:42:f4:c7:
         21:24:e3:42:29:ea:60:cf:75:21:c6:1e:87:71:18:11:ba:a6:
         c4:75:6c:bb:60:74:0f:84:2f:99:cf:94:78:c1:ae:17:72:36:
         e0:7e:1e:20:73:76:3c:55:29:f5:ce:21:ee:eb:27:16:f0:4d:
         cc:0f:86:1e:30:af:ff:9f:be:a2:38:63:9b:d9:52:92:30:61:
         80:a6:0a:40:d8:78:17:09:22:63:2a:eb:97:9a:20:55:df:81:
         4b:51:00:17:ca:90:2a:b4:d8:3f:40:4f:d3:2e:c6:a6:51:a1:
         54:f5:ac:bc:fe:00:c2:a1:de:79:03:15:06:3b:16:b7:0c:1d:
         2c:14:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org