Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.cer
File:                     9DF033D14D81024E6D99DAF86E479112805AE3E2.cer (raw, json)
Hash identifier:          lbdGgBlsi34q1WQ65SigMYnys/bIG0iIsuacB5FXfRg=
Subject key identifier:   9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       308D2A6C0EDF7E157C8BA74FE310A767E27A1156
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2023 20:13:50 +0000
Certificate not after:    Mon 25 Nov 2024 20:18:50 +0000
Subordinate resources:    AS: 266636
                          IP: 128.201.56.0/22
                          IP: 2804:3f0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8d:2a:6c:0e:df:7e:15:7c:8b:a7:4f:e3:10:a7:67:e2:7a:11:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 27 20:13:50 2023 GMT
            Not After : Nov 25 20:18:50 2024 GMT
        Subject: CN=9DF033D14D81024E6D99DAF86E479112805AE3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:10:a6:2b:5a:4a:91:d0:07:7a:d6:63:af:
                    0b:77:d0:a6:99:e7:c0:ae:a4:fb:60:39:87:1c:10:
                    bc:15:5d:90:84:bd:60:43:bd:ff:1c:eb:ae:24:fa:
                    4b:15:4c:82:d2:39:93:69:bf:64:f9:79:85:e2:e8:
                    88:29:2c:b1:96:a6:5c:35:96:64:57:1f:ef:0c:25:
                    1d:46:5a:64:ca:23:78:2d:62:5e:9c:3a:11:03:b9:
                    89:56:a6:ef:34:6d:4e:5d:24:c6:ed:f2:3a:a0:f6:
                    d1:e0:55:96:69:c1:a2:64:88:60:a7:ad:ea:31:68:
                    b7:f1:a1:2a:de:ab:48:6d:2e:6b:f7:6c:df:8b:69:
                    24:d8:f4:ab:b8:64:ed:42:6a:89:4d:8b:4e:a2:c7:
                    b5:1e:08:23:57:22:d9:35:df:51:84:87:20:23:cb:
                    17:d4:81:9f:3e:08:8a:5c:66:7d:2c:a7:f4:79:ee:
                    b4:05:80:62:6e:9d:ad:28:2c:de:c1:ac:5f:f9:05:
                    a5:c7:bc:48:d5:c5:d6:a0:b4:09:4c:5e:d6:2c:87:
                    4e:08:c6:db:fd:10:53:cb:38:ce:53:89:0e:17:03:
                    bd:e9:30:21:69:95:53:9c:97:78:7a:1d:b5:a6:69:
                    a9:fa:4a:b7:37:93:5c:5f:b4:0b:7b:c3:6b:27:8c:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:F0:33:D1:4D:81:02:4E:6D:99:DA:F8:6E:47:91:12:80:5A:E3:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/9DF033D14D81024E6D99DAF86E479112805AE3E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.56.0/22
                IPv6:
                  2804:3f0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266636

    Signature Algorithm: sha256WithRSAEncryption
         13:da:94:88:80:1d:6e:9a:e4:11:2f:b3:26:4c:36:6f:4c:7f:
         f0:da:f3:3e:0c:5c:79:a7:e3:6d:e7:39:ed:63:b3:83:74:c3:
         41:1e:c0:a3:15:f0:c9:78:02:b0:f9:ab:a0:1e:51:06:13:ac:
         15:36:58:e0:65:1b:07:59:e1:43:6b:6d:76:7f:bd:b1:d1:d6:
         97:ee:08:b0:dc:aa:e5:88:ea:26:7d:6f:07:05:ed:be:41:5d:
         ba:bb:ce:b9:61:83:b2:db:cb:f5:c4:5d:28:54:46:79:6b:3d:
         1c:c1:28:e7:a4:bf:dd:e8:64:e0:20:cc:c2:8d:7b:c2:02:84:
         8d:1e:06:9b:ea:66:ea:62:7f:8b:ed:30:4e:1c:c4:3f:95:a1:
         8e:a8:0e:60:6f:a3:1e:ee:30:ad:22:8d:cf:e9:75:ad:bc:86:
         84:9c:1e:b9:29:50:76:8b:de:f3:fd:bb:a7:75:62:c6:cb:e3:
         70:77:26:a0:30:22:0d:1a:09:33:1d:3a:f8:ec:6d:59:5f:81:
         d9:d3:22:73:98:d9:2e:ab:00:f9:e1:e1:e4:d6:15:1d:53:2c:
         06:60:ab:cd:ec:49:eb:2f:52:ae:2e:c1:76:c0:28:31:f4:26:
         a6:14:13:fc:e6:21:e5:55:f0:55:19:41:b0:e8:67:bb:ad:d8:
         75:1b:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org