Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.cer
File:                     9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.cer (raw, json)
Hash identifier:          MEOo8aYLq5PbhaomS2j4jt6Cd/lX8qm3HNH0ZWH+ATc=
Subject key identifier:   9D:C1:D5:91:86:D2:DB:0C:20:0F:55:A6:45:8E:A7:98:DD:9F:BC:05
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3142C5C9638AC79F53705FC7F075FB75BFA375C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 21:44:05 +0000
Certificate not after:    Fri 02 Aug 2024 21:49:05 +0000
Subordinate resources:    AS: 61680
                          IP: 131.108.64.0/22
                          IP: 2804:1ce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:42:c5:c9:63:8a:c7:9f:53:70:5f:c7:f0:75:fb:75:bf:a3:75:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 21:44:05 2023 GMT
            Not After : Aug  2 21:49:05 2024 GMT
        Subject: CN=9DC1D59186D2DB0C200F55A6458EA798DD9FBC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:70:60:43:35:2e:7b:06:0d:e2:b6:62:d0:
                    bf:15:17:b8:25:3e:61:4e:a1:ca:8d:b6:7a:21:84:
                    3b:fa:70:6d:36:e9:42:2e:b6:be:e8:6d:8e:17:05:
                    92:87:ab:fd:0a:0d:5f:4c:86:75:5d:81:ec:87:4a:
                    b1:14:5a:fb:55:f2:09:67:4d:c0:f9:86:8e:18:ce:
                    0f:52:23:21:cb:a0:9d:4b:3e:31:70:d8:8c:2f:e7:
                    a7:c9:1b:1d:b5:5c:30:62:6e:a2:13:db:ed:bb:b0:
                    5a:0c:8c:ee:55:62:b0:23:99:6a:86:22:3e:a9:d9:
                    c8:d4:d2:3d:5c:fb:76:cb:70:0f:f5:29:da:82:53:
                    c0:42:a6:ed:a4:0c:3c:a1:56:9a:3f:f6:e5:20:cd:
                    5f:f8:6f:d5:81:fd:c2:ca:a2:37:f8:5c:7f:29:a7:
                    0a:05:13:f4:1d:0c:e9:96:30:28:cc:32:49:6f:39:
                    ac:9b:c7:ba:de:be:93:67:53:db:b4:d7:9d:08:25:
                    77:f1:ae:0e:bc:7d:35:54:02:cf:02:2d:ae:e8:be:
                    aa:13:d3:4c:20:e2:af:18:b6:5e:ff:03:b9:e3:c2:
                    b2:38:3d:4d:49:19:94:46:44:08:f6:29:b1:72:19:
                    fe:8b:8f:8b:36:56:41:e3:12:56:47:a7:9d:07:db:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:C1:D5:91:86:D2:DB:0C:20:0F:55:A6:45:8E:A7:98:DD:9F:BC:05
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/22
                IPv6:
                  2804:1ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61680

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:7d:79:7c:b3:f7:54:51:42:59:6c:a4:96:0c:29:c2:29:
         0f:fb:ee:d1:f2:0a:ed:c8:32:b9:22:ea:62:a0:d3:d0:58:b4:
         39:2b:ad:a4:93:ec:de:33:c1:1f:f8:40:5d:94:48:a4:65:7d:
         a1:ac:bb:87:e8:58:3e:4d:03:4e:ac:4e:a8:b0:78:f2:a6:ce:
         47:56:6d:80:23:8d:89:f3:ad:d9:a3:e2:23:5e:1d:79:70:26:
         46:a6:40:32:c1:79:65:f0:09:7a:82:05:e4:0b:17:b9:1a:d6:
         58:6e:de:cb:28:a9:26:1d:6d:ce:d7:8a:85:e5:33:df:a6:37:
         ce:e1:b0:56:be:de:1f:f7:85:69:e3:da:b3:56:4c:e4:4b:2f:
         62:b2:c7:47:42:13:4b:be:2d:4a:7f:5e:e7:50:3e:82:3d:5c:
         51:67:0a:1e:a1:d4:ce:21:b3:2d:99:64:93:1d:a5:95:f4:d5:
         c2:f6:6b:cd:ad:db:72:2d:72:d8:ba:a7:04:72:f9:80:6c:b5:
         69:28:b2:ba:5c:51:df:6e:b2:43:f5:28:ca:0a:6b:11:93:ab:
         12:8d:78:59:9a:76:2c:d0:6f:74:1e:3b:4d:cd:4e:ac:dc:cb:
         40:79:03:74:d1:fb:fa:89:7f:d3:bc:6d:5c:b6:25:8f:f5:e0:
         3b:5a:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org