Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9E4191D230FC633CD8BA2D66BE6965D9F0CA2778.cer
File:                     9E4191D230FC633CD8BA2D66BE6965D9F0CA2778.cer (raw, json)
Hash identifier:          qMCAwrUGdKIueO0HY4x8L3dRqQt3WpTVB4+qXAq3Fs8=
Subject key identifier:   9E:41:91:D2:30:FC:63:3C:D8:BA:2D:66:BE:69:65:D9:F0:CA:27:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       195FB932765A9EC512EC35CB1BB8F25AA08ED655
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/9E4191D230FC633CD8BA2D66BE6965D9F0CA2778.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jan 2024 16:28:21 +0000
Certificate not after:    Fri 17 Jan 2025 16:33:21 +0000
Subordinate resources:    AS: 266196
                          IP: 45.6.160.0/22
                          IP: 2804:3c34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5f:b9:32:76:5a:9e:c5:12:ec:35:cb:1b:b8:f2:5a:a0:8e:d6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 16:28:21 2024 GMT
            Not After : Jan 17 16:33:21 2025 GMT
        Subject: CN=9E4191D230FC633CD8BA2D66BE6965D9F0CA2778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:d3:f6:9b:c9:66:cb:6b:3c:3e:8c:b8:9e:
                    ca:87:d1:82:0a:3c:49:7a:74:3c:3a:e9:54:94:88:
                    fd:b6:4d:70:65:0c:82:2b:5a:dc:7b:44:8e:d1:57:
                    5b:55:13:30:8a:d9:25:74:e0:01:19:f8:1d:cb:7f:
                    4f:57:55:66:4d:d6:45:3a:42:9a:d6:f3:04:92:4a:
                    db:65:39:73:ed:02:90:d7:31:56:bd:48:9d:54:23:
                    78:0e:18:7c:cd:91:b1:da:48:d0:c4:4e:4c:9c:d7:
                    8c:91:84:97:f7:e4:76:6e:52:81:40:f8:a3:e7:11:
                    23:15:7e:6b:87:ba:65:75:36:58:79:da:b9:9a:2d:
                    ac:1c:39:a6:d3:f8:3f:6c:82:28:3e:f1:29:15:00:
                    2b:bd:6b:7b:1a:f2:dd:c5:62:c7:bd:76:f8:72:c7:
                    42:69:7a:a4:02:d3:45:7b:41:c9:5d:b6:71:32:92:
                    9f:9a:d1:f9:99:83:68:e2:0f:3d:e9:12:4c:c7:3c:
                    3a:26:1d:cd:9e:f2:ee:30:99:2f:c7:96:12:2f:1e:
                    7f:7d:c9:5d:04:b7:4c:f6:e7:51:6a:2c:48:3a:ea:
                    5e:19:24:38:c7:2e:f3:02:eb:3f:c3:41:07:d8:b1:
                    19:83:73:a2:e3:78:da:dd:f4:d2:e5:06:c4:c5:3c:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:41:91:D2:30:FC:63:3C:D8:BA:2D:66:BE:69:65:D9:F0:CA:27:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/1/9E4191D230FC633CD8BA2D66BE6965D9F0CA2778.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.160.0/22
                IPv6:
                  2804:3c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266196

    Signature Algorithm: sha256WithRSAEncryption
         16:35:3d:69:b5:f7:22:9e:9b:7a:f2:a3:fa:58:f4:2d:8a:df:
         43:fe:ea:1a:da:eb:cd:bc:a5:20:51:0a:40:8d:db:6d:77:d9:
         1f:70:fa:83:e1:30:3a:1e:16:a9:a3:55:ad:0e:8b:6b:8b:e7:
         8b:14:3d:28:bd:72:77:55:24:ed:dd:32:5e:91:aa:b8:b6:9c:
         be:44:e1:da:d4:4b:8c:d4:4c:71:3e:3b:ad:27:e8:bd:2b:d2:
         67:92:8d:b0:a7:d3:22:43:a5:83:14:29:e9:aa:c5:db:69:20:
         de:95:8e:b0:9c:01:7e:a6:65:6a:33:f6:de:95:14:86:e7:cf:
         9f:b3:ac:25:66:22:3b:03:97:4d:a8:40:4c:8b:c1:2b:cd:9a:
         6f:19:1f:40:cf:2f:ba:1c:a7:74:f1:71:02:68:91:d0:4b:16:
         f8:f2:22:33:83:53:47:e7:f3:13:5f:6c:9b:a3:8a:ea:64:bd:
         f8:77:94:c7:96:cf:27:1f:e6:8f:d1:19:be:ec:1d:40:ef:5e:
         51:dc:d3:82:4e:73:85:59:a2:b4:06:ca:c3:cc:3b:94:d3:ce:
         74:dc:fa:f4:42:47:6e:c0:53:7e:ab:2f:23:ca:6f:fa:ac:d1:
         78:c8:7f:12:f7:23:c5:5f:f1:f8:8b:34:8a:8e:bb:87:74:2a:
         7a:d7:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org