Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer
File:                     9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer (raw, json)
Hash identifier:          Yi6qWFC815K77cpJwzSmvOWIi95VV3vU395TsAIj1cc=
Subject key identifier:   9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0ACC0F25BD748AEABFFCADD2BFFB3A555A535D24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 13:43:08 +0000
Certificate not after:    Fri 04 Oct 2024 13:48:08 +0000
Subordinate resources:    AS: 265127
                          IP: 143.208.108.0/22
                          IP: 2804:2af4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cc:0f:25:bd:74:8a:ea:bf:fc:ad:d2:bf:fb:3a:55:5a:53:5d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 13:43:08 2023 GMT
            Not After : Oct  4 13:48:08 2024 GMT
        Subject: CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:67:00:0a:25:6e:de:26:b7:53:8e:a4:d6:03:
                    ee:7a:91:88:e0:34:6e:33:ac:f8:59:5f:bb:ca:43:
                    26:05:69:c4:c8:e7:2b:8c:31:82:2b:5c:e2:3a:d0:
                    60:12:4f:01:1d:8e:38:2a:8b:76:80:49:33:7a:7a:
                    9c:a7:2e:34:32:0f:22:25:93:05:3b:91:b1:09:b1:
                    24:9c:f2:7b:e2:6b:77:82:86:b4:35:94:ce:6e:4d:
                    4f:45:ea:ba:91:56:74:2f:96:a1:56:56:aa:10:cb:
                    ac:ca:41:2e:a9:07:77:c1:d0:49:0a:6f:ed:36:fc:
                    0c:78:5e:cb:04:41:5d:e1:54:4a:4c:03:9a:c0:99:
                    9c:93:ae:38:9d:84:a1:69:e2:11:b9:1f:4b:e4:67:
                    7c:d4:ab:d0:7f:99:db:f5:16:9d:e4:82:13:93:e3:
                    9c:03:86:a0:77:cd:f6:39:3c:94:3f:59:89:ae:51:
                    cc:21:82:21:5e:b3:a9:6f:43:1e:e1:e0:c2:3b:7e:
                    8f:65:88:67:2d:47:14:ef:6e:b5:2e:50:d6:d2:c3:
                    8e:ec:4f:b6:35:13:dd:95:21:d5:81:65:08:ce:ba:
                    b7:96:07:70:78:f0:56:c5:d3:9b:6a:4f:0d:33:56:
                    41:07:30:ad:5c:23:31:59:91:9e:dd:10:51:6f:5b:
                    49:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.108.0/22
                IPv6:
                  2804:2af4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265127

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:51:f0:b2:21:3a:c4:02:00:b6:11:49:0c:c5:d7:dc:07:
         7a:a5:c6:bb:97:20:f9:29:c6:fd:9d:81:66:ff:46:ec:9c:ac:
         94:4b:e4:d6:cd:c7:98:5d:22:87:14:fb:d8:7c:8c:40:93:e2:
         8c:95:00:4d:06:84:14:0f:20:9b:41:49:e9:ec:8e:ce:b5:52:
         95:95:48:62:25:2b:48:51:e0:ed:ac:71:0b:b9:e3:70:02:40:
         b6:3a:25:c1:4a:46:c7:af:22:ab:bc:97:87:40:13:95:e1:68:
         ec:9e:18:78:61:2c:3d:5c:e2:04:50:af:6f:18:c0:96:5f:15:
         ae:b6:01:27:1b:79:24:b0:17:41:09:b0:c9:36:31:ac:f8:b1:
         ae:5a:a9:87:ca:b4:d8:f6:b5:db:87:a1:71:58:a8:f0:ab:1d:
         f7:3d:60:1a:70:30:4d:22:69:7a:03:4a:73:b2:83:47:46:b5:
         64:fe:43:c0:f6:b7:94:c5:97:fd:10:49:0a:75:87:b1:75:0b:
         ff:3e:44:68:78:cc:06:2b:59:5c:cc:f2:b8:7c:74:a6:d8:1a:
         2a:9f:01:44:24:2e:62:45:61:c3:2a:35:da:0a:15:c0:21:49:
         f9:7c:35:21:54:56:cd:6d:71:0f:f4:63:78:ce:af:96:54:51:
         d5:44:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org