Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9E323FA18DBED3A3E818FF2ABA5D8381906E9BD9.cer
File:                     9E323FA18DBED3A3E818FF2ABA5D8381906E9BD9.cer (raw, json)
Hash identifier:          3yISxDr7A+mVk1El6s/Nvo3KrSoAgosTE7zGdUMRs/U=
Subject key identifier:   9E:32:3F:A1:8D:BE:D3:A3:E8:18:FF:2A:BA:5D:83:81:90:6E:9B:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AFC89DDADC2D94A923CD690977ED8AFB5449351
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/9E323FA18DBED3A3E818FF2ABA5D8381906E9BD9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 15:57:52 +0000
Certificate not after:    Mon 03 Jun 2024 16:02:52 +0000
Subordinate resources:    AS: 265919
                          IP: 131.196.196.0/22
                          IP: 2804:3fd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:89:dd:ad:c2:d9:4a:92:3c:d6:90:97:7e:d8:af:b5:44:93:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 15:57:52 2023 GMT
            Not After : Jun  3 16:02:52 2024 GMT
        Subject: CN=9E323FA18DBED3A3E818FF2ABA5D8381906E9BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:7f:9a:f7:99:1f:5d:f4:7c:e2:0c:be:f8:
                    2e:9b:d8:14:65:6e:60:db:d5:36:46:55:f7:0c:01:
                    f5:11:7e:2f:14:ba:a2:29:a9:37:e5:c7:c5:2a:96:
                    58:b8:e1:36:88:ae:1e:67:e7:e5:ae:3a:96:51:47:
                    b5:4d:02:d6:fd:97:ef:e0:5d:00:d7:f4:16:72:0f:
                    dd:7d:fe:0c:88:cb:0c:32:ca:51:d0:b0:08:23:3e:
                    8a:b9:8c:9e:d8:15:1e:74:86:89:fb:f1:f8:a5:94:
                    83:6a:32:18:1a:cb:15:f4:41:bb:18:b1:94:cb:49:
                    a4:a7:9f:73:55:78:a5:69:fb:04:89:53:68:c4:42:
                    6b:ca:79:1a:16:5f:c8:be:c1:55:73:b7:a7:e9:d8:
                    90:c9:8e:ac:c2:fa:4a:fc:24:cc:9d:d2:92:d9:4c:
                    58:7e:cc:13:0f:1e:1f:28:f5:3d:a0:31:1b:e0:4e:
                    a6:2b:64:27:76:c3:e9:94:4a:50:f3:cc:47:49:8d:
                    f2:69:f7:83:95:9d:52:63:83:5d:32:eb:79:c8:fa:
                    16:e9:e2:c9:cd:a4:36:6f:7e:c4:52:ab:79:23:71:
                    7a:de:63:1c:76:8b:e9:62:83:57:de:cb:c7:27:f1:
                    db:6f:7b:02:c4:91:45:c4:59:e2:18:9c:ac:29:29:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:32:3F:A1:8D:BE:D3:A3:E8:18:FF:2A:BA:5D:83:81:90:6E:9B:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/9E323FA18DBED3A3E818FF2ABA5D8381906E9BD9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/22
                IPv6:
                  2804:3fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265919

    Signature Algorithm: sha256WithRSAEncryption
         b3:7c:1b:e3:1b:13:64:f0:f6:6a:00:fa:8f:97:8a:fa:e7:b2:
         3d:ae:a2:99:9a:02:1d:ac:64:61:bb:37:3b:27:ef:72:0e:cb:
         d0:bd:4e:c3:06:3f:1b:e3:92:c5:5b:b0:52:be:00:a2:6b:d0:
         76:8c:57:fc:6a:15:5d:39:40:52:3a:27:46:ea:fb:37:b9:6b:
         b4:8a:da:44:68:91:a9:77:e4:d2:bc:e7:c0:61:5a:55:ce:2a:
         d7:3f:bd:e6:4c:74:d1:5e:3f:97:60:32:cd:69:8d:64:7b:e9:
         06:b3:62:ec:5f:16:a0:fb:73:91:6a:f9:be:54:fc:4b:b5:56:
         26:05:e9:05:fd:95:db:48:05:2f:a6:cb:a9:2d:ff:f0:29:b6:
         68:46:8f:6c:22:29:93:cc:3b:66:3f:fc:5f:09:73:a5:0c:3e:
         a9:70:a1:d0:d7:cc:68:43:57:72:c5:d3:35:bb:16:f7:0e:75:
         7d:72:7b:b7:d3:c7:b2:46:db:9d:bc:24:c4:75:89:48:28:60:
         06:d4:ae:de:f3:9b:b2:a7:83:4d:0b:d5:08:39:6d:b4:10:ce:
         7b:99:4e:f7:97:ea:a3:b4:cc:3a:20:48:98:c9:86:a3:c9:6b:
         79:e5:74:ce:8f:09:9c:03:aa:96:b0:9f:17:4e:00:08:9f:ed:
         f5:dc:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org