Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6.cer
File:                     9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6.cer (raw, json)
Hash identifier:          yG8ddAGzWoJx3KT42QqjllvOXV6Ns9ii6083EXbSdyw=
Subject key identifier:   9E:96:B8:CD:86:EF:2E:06:68:35:17:F0:D4:D8:D9:6E:4F:76:F2:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42CDFBC42465C703089092E9BB407A6345084048
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Dec 2023 21:00:12 +0000
Certificate not after:    Fri 20 Dec 2024 21:05:12 +0000
Subordinate resources:    AS: 269187
                          IP: 45.181.140.0/22
                          IP: 2804:60bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cd:fb:c4:24:65:c7:03:08:90:92:e9:bb:40:7a:63:45:08:40:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 22 21:00:12 2023 GMT
            Not After : Dec 20 21:05:12 2024 GMT
        Subject: CN=9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:a2:95:0d:5c:a9:4e:a8:5f:bb:f6:4e:2b:
                    cb:e7:9f:9e:85:60:00:0d:0c:80:26:86:24:ce:ad:
                    0d:7b:9e:62:99:01:4d:30:49:d0:f9:02:b5:e2:88:
                    03:23:23:20:1d:be:b6:75:16:71:b7:89:85:91:de:
                    25:d0:ac:25:e4:84:23:95:4a:98:ca:d0:d0:78:09:
                    2c:df:18:5b:ed:2d:7c:c2:dc:74:45:1e:66:e3:a3:
                    5f:de:43:1b:8e:ef:c7:0d:d5:81:86:69:b7:7f:86:
                    ef:1f:88:86:28:8d:5f:e3:52:df:17:1d:96:79:44:
                    ce:c3:6a:f8:9b:e1:c3:ba:ec:51:25:99:24:39:10:
                    8a:33:cb:f0:06:42:d8:ff:79:66:ec:4e:17:21:f6:
                    2c:37:91:34:31:ff:42:4c:55:da:99:ff:9a:e2:75:
                    5c:ee:83:6d:34:3c:41:d8:dd:3b:d1:47:04:7d:16:
                    74:75:28:73:b4:4d:63:58:f3:08:44:7c:18:b8:50:
                    e8:3e:4e:aa:e4:20:40:62:7f:ae:d9:d3:03:4d:1b:
                    ae:93:d6:7a:3b:86:6b:44:22:23:43:52:7d:e7:b2:
                    3d:02:f8:e9:e8:52:89:ae:92:8b:12:87:35:57:b6:
                    7e:8b:d7:7d:2a:69:81:07:2e:e1:1c:5a:d5:23:ad:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:96:B8:CD:86:EF:2E:06:68:35:17:F0:D4:D8:D9:6E:4F:76:F2:F6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.140.0/22
                IPv6:
                  2804:60bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269187

    Signature Algorithm: sha256WithRSAEncryption
         ad:22:be:cd:19:0c:1f:a7:e4:9d:75:21:99:92:ee:d4:90:24:
         0a:ef:92:ee:fe:ad:3d:2a:54:cf:18:10:c7:68:8d:c3:0f:21:
         2a:4b:32:cf:24:4f:f7:0d:23:64:db:d0:ec:86:c9:00:48:b1:
         33:60:85:bd:26:94:a5:1e:a9:49:ee:6a:b6:65:6b:6a:fd:9b:
         46:21:e9:c8:5c:eb:5b:e2:ff:13:ef:72:04:c0:77:76:97:22:
         54:0c:34:1b:e2:9f:c6:af:44:30:5c:76:20:85:6a:b9:c9:30:
         44:f0:28:fa:b3:47:c4:44:91:c2:6f:3d:7f:14:37:08:77:d0:
         a5:9f:1c:78:9c:f8:04:c2:7e:e8:0e:e5:19:1e:8a:33:d1:42:
         d7:08:af:fe:d5:91:dc:84:da:d7:28:ea:b9:62:75:c8:8b:d7:
         26:7f:28:8c:fa:da:36:32:fa:91:71:60:be:cb:76:08:b9:8b:
         d0:40:6e:2e:9d:75:16:8f:83:b3:03:e1:7a:4c:c0:2f:94:55:
         13:c2:28:4b:1c:2a:3c:33:00:a3:6c:51:33:fb:f7:ff:c3:cc:
         9e:14:7e:c3:e3:e6:21:97:56:c5:3f:83:25:e3:b3:60:60:e5:
         42:d4:91:cf:80:e8:4c:3e:34:dc:de:92:cc:45:81:a2:22:1d:
         21:8d:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org