Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer
File:                     9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer (raw, json)
Hash identifier:          0GHYlrkBK1IcmIbPDQQayivDTn21yRTS00zZZN8+7Ys=
Subject key identifier:   9D:AA:10:BB:10:97:6A:C7:31:B8:66:75:02:BC:FA:1E:45:BD:5C:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02A6090E8BA4E3B45A38CCA6A833550DE7A8DA18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 00:58:04 +0000
Certificate not after:    Thu 05 Dec 2024 01:03:04 +0000
Subordinate resources:    AS: 265485
                          IP: 168.197.156.0/22
                          IP: 2804:34dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a6:09:0e:8b:a4:e3:b4:5a:38:cc:a6:a8:33:55:0d:e7:a8:da:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 00:58:04 2023 GMT
            Not After : Dec  5 01:03:04 2024 GMT
        Subject: CN=9DAA10BB10976AC731B8667502BCFA1E45BD5CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:e3:0c:13:af:dc:6d:38:ac:06:34:68:ac:
                    d0:05:0a:a3:67:71:fd:ef:12:7e:bd:46:9b:6c:76:
                    71:e2:24:4f:ff:9a:db:2a:12:21:40:cf:94:cc:29:
                    d1:44:33:1d:61:4b:3b:dc:4e:60:a1:ba:0f:8d:fc:
                    31:f3:c4:6b:0b:f7:24:ee:f8:2b:f5:8f:e5:a5:dc:
                    99:16:a2:98:0a:84:f5:9d:b2:e1:ee:93:4d:da:a6:
                    ae:5c:c6:7e:ab:ff:13:ea:6a:1f:7a:f3:9f:4b:ed:
                    ac:81:55:10:3f:dc:32:46:cc:c0:80:9f:dc:40:55:
                    34:1f:e2:ce:a3:a9:20:ac:82:d4:de:7c:07:fe:7c:
                    48:7b:bb:98:fe:48:fd:53:8c:50:34:07:3d:cd:8e:
                    56:03:e8:f9:a1:c3:c9:41:9a:49:a9:b3:a8:00:1a:
                    eb:c5:41:94:3c:db:49:52:a2:f9:c8:0a:eb:c1:7a:
                    db:1e:0b:c2:55:ec:4b:95:a7:78:8f:c5:19:c9:dc:
                    cd:de:f3:fe:78:b4:41:02:f7:2f:34:15:ef:5d:de:
                    95:87:ee:6a:db:6f:1a:01:ce:9b:8a:26:0d:64:24:
                    0a:4c:12:86:f8:ad:5f:d5:d6:15:be:5a:ae:1d:14:
                    1f:65:a6:22:f3:f1:a8:fa:ad:16:7d:26:5c:63:b9:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:AA:10:BB:10:97:6A:C7:31:B8:66:75:02:BC:FA:1E:45:BD:5C:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.156.0/22
                IPv6:
                  2804:34dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265485

    Signature Algorithm: sha256WithRSAEncryption
         98:96:cc:47:aa:22:31:05:3a:58:3a:1b:6a:5c:2f:57:34:f0:
         8d:0b:d4:e8:15:6d:95:8a:2f:7e:75:fd:dc:29:1a:04:93:54:
         60:6c:8c:37:f0:8d:0f:e5:3e:0f:bd:04:3d:c6:ce:1c:f1:c7:
         31:22:b6:70:38:74:07:a2:e4:4c:05:47:48:bd:16:ef:35:bd:
         53:2a:9e:4d:b0:c7:aa:fa:d1:f7:50:b1:fd:d9:67:51:b3:2e:
         e8:53:64:f3:c0:7d:0d:6f:a9:ed:46:41:b3:90:80:e2:70:a3:
         0d:93:c6:4e:14:5b:54:82:2a:6b:e2:1e:6a:ca:1d:8c:67:28:
         fd:8a:ac:17:7d:97:3e:a2:0d:7a:b7:8a:f8:cb:b7:83:cc:d5:
         fa:93:c5:fd:fe:2b:49:e1:fb:1e:b0:2e:6e:2c:82:0b:27:e8:
         ec:8f:cc:5d:47:8e:31:23:b3:78:ec:cb:26:88:62:c5:a0:63:
         ef:0b:4d:b6:70:ec:8e:91:47:da:bf:02:60:88:f4:ca:2e:17:
         b1:03:65:1c:2b:c3:d1:95:ff:d0:2a:ea:9a:bc:a5:3c:49:47:
         90:ac:5f:67:b0:e6:0f:01:63:25:ad:31:7b:11:7c:17:09:7f:
         01:1c:68:49:9c:bf:95:4f:2c:c1:46:61:a1:ca:c5:f1:89:be:
         c0:d1:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org