Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DA8231A907541812F774DA08E01168B1788862A.cer
File:                     9DA8231A907541812F774DA08E01168B1788862A.cer (raw, json)
Hash identifier:          FgRaoJjGZKrs0qw5W1EmSUx/OY0ZOELFbsKG/M6vMdI=
Subject key identifier:   9D:A8:23:1A:90:75:41:81:2F:77:4D:A0:8E:01:16:8B:17:88:86:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7712BE5BA2EDE180D877029C2AA8343265551872
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/9DA8231A907541812F774DA08E01168B1788862A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 11 Jun 2023 15:45:14 +0000
Certificate not after:    Sun 09 Jun 2024 15:50:14 +0000
Subordinate resources:    AS: 53202
                          IP: 186.235.128.0/19
                          IP: 2804:1dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:12:be:5b:a2:ed:e1:80:d8:77:02:9c:2a:a8:34:32:65:55:18:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 11 15:45:14 2023 GMT
            Not After : Jun  9 15:50:14 2024 GMT
        Subject: CN=9DA8231A907541812F774DA08E01168B1788862A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:90:e0:e0:8b:59:a6:bf:15:20:21:b4:7b:
                    f7:61:38:2d:aa:b4:c0:e4:08:17:dd:10:a1:cf:04:
                    b6:1a:9f:d1:d0:8e:70:c2:ae:cc:bb:4b:e1:95:c9:
                    1a:be:cb:0f:71:f4:21:7e:40:13:e0:1b:9d:99:73:
                    5a:c4:ba:c1:80:4d:8a:8e:0f:a9:56:f6:9f:be:80:
                    9a:9a:bd:57:f5:73:26:2b:b6:59:85:cd:22:e3:77:
                    64:4d:36:a3:f8:d3:ff:2c:bf:81:db:c1:7e:3b:7e:
                    cd:d8:3d:35:58:33:ad:0f:9a:35:05:02:ec:b7:f3:
                    ad:49:20:58:f6:93:8a:f4:56:e6:ee:44:86:74:c9:
                    0e:ad:24:b6:a9:d7:b3:d5:48:8e:bc:5f:36:31:70:
                    35:2d:56:cf:e8:4b:90:05:55:29:74:3e:76:91:5a:
                    68:e8:9c:4c:d0:ca:1c:b1:8e:4f:89:ca:b0:f9:b1:
                    ec:75:58:83:66:a0:db:cd:eb:db:34:c4:38:b3:4b:
                    95:1d:50:eb:8b:3e:12:b6:c2:67:5e:b9:fb:d9:63:
                    3d:8b:3c:b0:3b:a6:2b:bd:9a:02:aa:78:e2:21:76:
                    46:32:68:b7:0d:76:c5:3f:5b:39:56:c7:67:c6:60:
                    ef:9a:b9:37:4c:c9:05:a4:c8:12:f7:59:71:5b:48:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:A8:23:1A:90:75:41:81:2F:77:4D:A0:8E:01:16:8B:17:88:86:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/9DA8231A907541812F774DA08E01168B1788862A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.128.0/19
                IPv6:
                  2804:1dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53202

    Signature Algorithm: sha256WithRSAEncryption
         63:15:28:39:d8:d5:c4:3b:8e:54:af:09:5d:81:9f:35:46:92:
         fa:b3:92:23:65:8e:a2:77:80:9a:36:1a:7c:93:7f:b2:e7:21:
         1e:c0:3b:a5:8e:34:1c:a2:21:70:ac:18:4a:75:7e:0e:7c:1a:
         94:c0:5c:50:6d:3e:ae:43:6a:49:0d:9a:a0:30:b2:1b:d9:86:
         09:8d:b8:b9:32:db:d9:61:b3:d7:b0:35:ec:e0:85:2a:6c:e3:
         fe:3f:85:0b:db:e6:f9:af:19:8a:99:bd:5c:41:49:e1:20:4f:
         ec:15:36:65:6f:35:cb:6b:f2:77:34:dd:c8:9b:af:88:69:85:
         51:5f:52:d3:4c:56:04:d2:9b:60:3d:8e:2e:5f:7a:a7:25:01:
         16:4d:a6:de:57:dc:d8:2b:95:68:2e:f5:fa:05:e3:35:dd:34:
         b0:cc:63:f8:e2:12:06:4d:1c:e7:25:3b:9f:6c:39:c3:a4:ea:
         06:9f:89:d6:54:77:c2:e6:ac:cc:11:ed:3e:52:d5:50:1d:3a:
         73:82:fc:89:d9:e2:5b:05:ab:ab:76:4c:2d:66:1d:c6:d2:90:
         6e:5f:a2:a4:ba:f7:03:54:bd:42:ab:4e:12:06:95:f3:69:e8:
         82:f8:16:39:f7:d7:ff:58:8b:48:a9:2d:26:50:53:b4:14:3b:
         e4:6d:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org