Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.cer
File:                     9DF20F0DE6FF579CBBDB345EC8984426D099267A.cer (raw, json)
Hash identifier:          3QtOG87vbz+l+sBshXveBT2qyOoMEASSmg/+PV4VPTU=
Subject key identifier:   9D:F2:0F:0D:E6:FF:57:9C:BB:DB:34:5E:C8:98:44:26:D0:99:26:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2247FE895DC969E244C88FFE6059F4B169AEAB2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:48 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:48 +0000
Subordinate resources:    AS: 262702
                          IP: 187.103.80.0/20
                          IP: 2804:85e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:47:fe:89:5d:c9:69:e2:44:c8:8f:fe:60:59:f4:b1:69:ae:ab:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:48 2024 GMT
            Not After : Jan 15 18:54:48 2025 GMT
        Subject: CN=9DF20F0DE6FF579CBBDB345EC8984426D099267A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:72:cc:58:94:17:39:48:9c:61:b8:a5:a5:
                    0f:6c:b6:f5:5d:b2:01:2c:ee:db:b9:fe:1e:31:24:
                    c9:fd:0c:09:9a:3e:1d:a4:0a:d6:5f:81:38:43:c4:
                    08:68:3a:50:e5:35:99:25:03:38:c0:3a:d4:27:a2:
                    14:ca:72:99:97:df:ff:b2:74:47:13:88:59:05:a1:
                    a0:ad:7c:5d:5a:71:3f:5d:56:5e:fd:68:de:fa:aa:
                    54:12:3c:27:82:27:0e:ea:e5:4b:83:d9:06:94:ac:
                    b9:2a:2a:c3:88:39:22:00:43:03:91:09:40:d1:fe:
                    50:be:93:a5:20:bb:d8:b5:57:ae:8f:b6:1e:2f:ac:
                    59:d8:72:74:98:d2:b8:d1:1f:dc:d6:63:c2:76:04:
                    6e:47:7c:09:a2:50:de:72:0d:83:3a:dd:59:47:50:
                    f8:9a:2f:08:52:52:f6:fb:5e:57:e3:60:d8:5d:7d:
                    a8:9a:b2:03:f0:c4:a9:ee:13:09:52:97:39:0b:8d:
                    8c:e5:fd:8b:14:9c:12:44:fe:29:a8:02:00:05:89:
                    5a:5a:67:2a:1a:9f:73:85:12:24:ce:fb:4d:d3:87:
                    e3:e0:4a:e0:7b:99:ba:e2:73:57:1a:45:ee:f5:5b:
                    9c:07:dd:6e:34:3f:59:c6:2d:f7:06:21:f4:95:7f:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:F2:0F:0D:E6:FF:57:9C:BB:DB:34:5E:C8:98:44:26:D0:99:26:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.80.0/20
                IPv6:
                  2804:85e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262702

    Signature Algorithm: sha256WithRSAEncryption
         68:24:bb:80:f0:1b:71:49:98:68:23:3d:78:95:fa:c8:6b:84:
         b9:7e:57:fd:43:ed:f0:a5:13:b9:82:00:d0:d2:c6:9a:3c:db:
         d2:de:10:54:17:a2:13:a4:a7:2e:61:3e:a7:42:ff:b6:1e:32:
         da:40:fe:b2:c6:36:b8:f1:67:03:72:43:3d:c6:0d:3e:c1:e3:
         9e:88:9c:99:e3:72:c3:97:38:7d:78:8c:3b:38:eb:0d:45:4f:
         aa:e1:e8:db:ba:67:4c:e7:6c:17:ef:e5:b0:9f:16:ef:bd:0d:
         75:ca:ae:8b:f7:18:4a:90:f6:9d:7b:0d:23:22:90:1c:52:25:
         b6:40:be:53:af:49:c0:ec:e4:9b:e0:f3:ac:fe:16:7e:14:0d:
         69:6a:42:98:51:c1:70:c0:f3:32:3f:09:22:64:ff:11:4d:c0:
         19:bf:1c:2f:85:31:02:c8:8f:23:63:c0:38:0a:8c:a3:20:62:
         c9:bf:f8:64:bb:05:23:46:87:ff:00:6f:13:10:cb:bc:c9:df:
         92:4b:0a:34:a0:b0:b8:20:5c:15:ea:86:3c:2c:d8:b4:3f:8f:
         99:1a:a6:d2:2b:fd:63:50:6f:ec:64:f1:78:7a:c6:31:0c:fe:
         b1:c3:d8:20:65:26:20:02:bb:df:2f:a7:02:14:77:0d:74:18:
         23:88:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org