Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9E54D69054206DEF8B1FF13819043F54681F0EED.cer
File:                     9E54D69054206DEF8B1FF13819043F54681F0EED.cer (raw, json)
Hash identifier:          tTo+ojQ/5GdLUfaiBxFezXs3Lr+yXMAhcwgqDmHOgo4=
Subject key identifier:   9E:54:D6:90:54:20:6D:EF:8B:1F:F1:38:19:04:3F:54:68:1F:0E:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16BF31FA19AAE84E01935E7776502A99F0E047C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/0/9E54D69054206DEF8B1FF13819043F54681F0EED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 24 Mar 2024 17:25:51 +0000
Certificate not after:    Sun 23 Mar 2025 17:30:51 +0000
Subordinate resources:    AS: 264923
                          IP: 168.232.0.0/22
                          IP: 2804:2ff8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bf:31:fa:19:aa:e8:4e:01:93:5e:77:76:50:2a:99:f0:e0:47:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 24 17:25:51 2024 GMT
            Not After : Mar 23 17:30:51 2025 GMT
        Subject: CN=9E54D69054206DEF8B1FF13819043F54681F0EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:67:f4:d7:49:94:af:7b:f8:e9:fb:e3:32:
                    1a:06:fc:03:20:81:e8:61:79:6c:d7:ab:04:af:32:
                    54:47:1a:0f:9c:ed:b1:35:c7:28:94:32:11:57:81:
                    96:5d:5a:13:38:67:b7:70:a7:4b:d0:93:d7:f8:6f:
                    02:5a:6f:1d:0f:7b:6f:de:ae:ac:82:67:9e:57:23:
                    e6:75:17:61:12:5d:32:da:7e:24:9a:e4:50:16:4e:
                    63:57:3f:a8:bf:d6:03:c8:2e:21:7b:66:41:ad:30:
                    fa:42:30:af:4c:e9:08:55:d5:bf:08:d0:28:ae:8a:
                    a4:9d:4b:18:d4:88:be:58:59:89:1a:e9:16:02:de:
                    08:f2:1b:a6:07:38:45:5a:f5:c4:b7:8f:c4:ca:ac:
                    3f:12:0d:19:a1:a3:ba:8b:d1:1d:10:23:b7:37:81:
                    c6:13:47:da:d7:78:12:c5:e2:43:9b:f5:f7:68:a3:
                    c4:56:d7:f5:50:38:2b:55:f4:49:9d:00:33:24:34:
                    d7:9d:79:4c:a2:c5:7f:3b:60:45:42:42:70:50:14:
                    1c:f7:53:6f:4b:83:e9:2f:13:a2:3b:8a:94:2d:80:
                    67:f4:16:99:fb:f9:a7:8e:5b:a3:69:5a:bd:ad:73:
                    ac:ca:d9:9c:0d:e0:18:fc:8a:97:9d:be:92:da:cd:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:54:D6:90:54:20:6D:EF:8B:1F:F1:38:19:04:3F:54:68:1F:0E:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7WFqUnjSvvLje5QQr5UpuGCyruLpgbnCcvc4q3uQDx3H/0/9E54D69054206DEF8B1FF13819043F54681F0EED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.0.0/22
                IPv6:
                  2804:2ff8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264923

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:26:a3:83:0f:90:1e:34:c5:23:22:49:e6:38:f0:46:14:
         94:f0:a5:7b:47:0b:29:50:48:a3:10:95:21:ce:3c:5c:2e:c4:
         95:2f:86:82:d8:9f:05:2b:ef:5c:59:ba:31:28:a6:95:ad:d0:
         a0:05:e3:36:a3:62:a5:ea:2f:bf:97:4f:83:ea:80:08:be:fa:
         2e:eb:d9:0a:3c:8f:4c:9b:71:32:75:d3:da:77:96:c2:4b:2c:
         9f:76:c3:13:02:e7:e4:0f:71:c4:8e:10:10:04:56:84:e6:ee:
         10:a3:a1:02:b1:7c:91:02:6d:f4:70:36:cf:4a:21:b2:8b:6e:
         1a:16:6e:d9:43:e4:59:21:b2:95:ca:e0:b4:84:c9:9f:fe:a0:
         8c:75:45:54:20:84:47:16:87:52:83:da:bd:da:1e:2c:d8:a0:
         47:4c:22:90:2e:36:01:cc:d6:16:0b:76:57:38:88:42:dd:86:
         20:22:ab:d6:c7:16:3c:00:4f:61:08:ee:05:5b:1f:cb:e9:16:
         30:81:85:2e:9b:79:06:72:86:00:29:64:36:03:b5:62:cf:ca:
         77:72:2a:d5:f7:9d:82:5d:c2:fb:fd:e7:b9:cb:c9:fb:c1:2e:
         e6:45:28:a5:80:cd:23:14:3e:ad:7e:8b:6e:43:8d:64:97:81:
         4f:9f:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org