Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386.cer
File:                     9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386.cer (raw, json)
Hash identifier:          0x7mTxgtC6lQCAjw1FQB90kTQmPIkrwRr0CJzICoNZc=
Subject key identifier:   9D:AD:BE:14:DA:8A:0A:84:3E:7D:F2:28:8F:6E:A7:DD:6E:7B:83:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60642B4AD344878B3E935C2A0756D30BCF3C89D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 22:41:51 +0000
Certificate not after:    Thu 02 Jan 2025 22:46:51 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:64:2b:4a:d3:44:87:8b:3e:93:5c:2a:07:56:d3:0b:cf:3c:89:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 22:41:51 2024 GMT
            Not After : Jan  2 22:46:51 2025 GMT
        Subject: CN=9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:76:c9:44:aa:51:87:37:51:26:03:63:3e:
                    58:89:8d:a9:2f:77:c6:09:f1:cd:dd:d6:05:84:30:
                    36:b9:bb:1f:e2:ec:b4:70:8b:29:2f:32:e2:14:9f:
                    79:c3:17:6e:69:53:b3:68:83:a6:a2:a1:aa:18:7d:
                    ce:8c:94:ca:50:e6:32:c8:f4:ca:f6:a4:8c:2e:11:
                    a3:04:71:ac:42:7b:b1:1e:f7:56:e2:85:75:b3:f8:
                    9e:11:82:ac:24:a7:35:90:c5:38:13:d2:14:2a:f9:
                    0b:fe:ff:eb:32:aa:69:98:35:24:0b:1e:91:73:07:
                    cc:01:14:1d:d4:dc:5f:1d:e9:22:24:ce:70:a2:55:
                    3f:9c:84:b2:dc:bf:21:14:11:bb:a0:39:13:2c:00:
                    4b:8c:1e:75:61:4c:32:fc:73:f0:88:bc:4a:c6:b9:
                    b4:fb:e6:ce:7f:82:55:9d:95:0b:e0:20:e3:40:8a:
                    aa:be:a2:2f:02:1f:55:77:ef:81:97:15:ff:65:f4:
                    4e:de:87:e9:1b:54:2d:fd:87:32:6f:bd:fb:91:61:
                    f2:4f:61:2d:aa:f6:99:dd:77:65:ce:74:a2:ae:96:
                    99:f2:ea:c5:f4:85:93:91:f4:a1:b9:2e:51:88:0e:
                    24:6d:9d:ee:b9:2a:db:55:55:8c:c9:2c:1f:65:1d:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:AD:BE:14:DA:8A:0A:84:3E:7D:F2:28:8F:6E:A7:DD:6E:7B:83:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         a6:42:d5:7b:d4:00:3a:aa:a9:ea:61:85:89:d9:62:fc:34:f7:
         13:53:fa:bc:56:8b:fe:50:f9:5f:8a:01:73:71:6f:92:60:e8:
         28:18:a6:68:37:66:c3:52:e3:34:ed:43:90:91:d9:30:09:d7:
         1f:22:dc:0d:4f:ad:ed:ca:ad:76:31:0d:90:ef:a3:b6:7f:9a:
         21:e0:93:bc:3e:f4:16:c7:a1:9f:21:ce:49:20:88:78:7f:00:
         e1:fd:5c:26:6c:7b:6c:24:a0:b6:4e:60:75:b8:b7:b4:90:7d:
         23:2a:c5:2d:4e:30:96:41:a8:07:8c:70:90:b7:14:9b:55:78:
         99:c3:18:f2:2f:6e:9e:67:1a:68:c7:01:62:27:e0:6c:1f:41:
         11:8b:c2:84:cc:26:60:d6:95:d1:f4:82:ef:a9:ef:0f:c6:87:
         09:16:2e:c5:67:58:ef:ff:e7:2b:80:7c:02:07:8f:05:66:57:
         36:d8:7c:b8:0a:0f:b7:eb:43:e8:8c:d2:f1:4e:c1:6e:bc:89:
         3e:e8:28:35:11:dc:a5:de:45:92:4f:1a:ff:4b:67:72:76:21:
         db:8e:5d:27:d1:98:ca:36:cd:c7:5e:d8:7d:4d:f7:be:c5:99:
         4b:92:e8:34:3c:05:43:e7:3d:ac:79:cf:75:43:be:f6:ce:5b:
         2d:d3:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:37 2025 by rpki-client