Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9ED3D1A78DAD87E51CB504C6CD156CC6BC8D62FB.cer
File:                     9ED3D1A78DAD87E51CB504C6CD156CC6BC8D62FB.cer (raw, json)
Hash identifier:          hfomS431/nb4QMLrVrx8iqzZx6IKLGHc0Lb7q1OhTb0=
Subject key identifier:   9E:D3:D1:A7:8D:AD:87:E5:1C:B5:04:C6:CD:15:6C:C6:BC:8D:62:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       536672BFE8F2D7E8BA930C72CB3C4FB1A4B679C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9ED3D1A78DAD87E51CB504C6CD156CC6BC8D62FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 May 2023 11:37:56 +0000
Certificate not after:    Sun 26 May 2024 11:42:56 +0000
Subordinate resources:    AS: 271484
                          IP: 181.233.16.0/22
                          IP: 2804:7c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:66:72:bf:e8:f2:d7:e8:ba:93:0c:72:cb:3c:4f:b1:a4:b6:79:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 28 11:37:56 2023 GMT
            Not After : May 26 11:42:56 2024 GMT
        Subject: CN=9ED3D1A78DAD87E51CB504C6CD156CC6BC8D62FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:78:a2:1e:be:54:70:9e:10:db:de:a6:64:
                    4f:40:a6:47:26:c8:d9:b9:96:41:39:93:3e:9d:4d:
                    b4:eb:56:f2:17:67:ad:56:1a:f0:32:cf:19:be:73:
                    f4:86:3a:14:64:da:41:7f:cb:3c:70:bc:29:fd:c4:
                    d4:a9:de:74:3e:62:b9:44:93:52:73:74:cc:a2:74:
                    e9:c2:3c:24:c7:0c:33:45:36:a3:e1:08:f8:9c:60:
                    ad:39:05:4e:5e:dc:f3:b6:fa:c2:c7:58:35:5f:3c:
                    c9:86:d0:9d:ed:7c:57:ba:0c:a8:7a:8b:44:b2:bf:
                    33:38:e1:bb:3d:bd:36:e0:5c:81:c1:cc:86:bb:10:
                    3d:fc:71:ac:8b:c1:9f:f2:93:ee:31:91:89:e5:ef:
                    18:bd:9b:d0:58:a0:90:ae:4b:5a:c3:10:0c:97:6a:
                    53:f4:e0:c7:a3:66:ff:3b:93:02:23:19:e3:43:be:
                    ed:8c:90:85:59:bb:4e:0e:d4:d0:a7:c4:4e:dc:39:
                    c0:6e:d3:fb:e6:a8:07:de:f0:cc:ff:4f:05:09:49:
                    4a:e7:80:82:a4:87:20:8a:2f:1c:c8:7a:75:63:63:
                    59:9b:31:3b:0b:7f:4c:80:75:f0:a5:44:83:db:84:
                    f0:5c:f6:0f:1f:6c:ed:ee:be:6b:1b:f5:20:fa:ae:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:D3:D1:A7:8D:AD:87:E5:1C:B5:04:C6:CD:15:6C:C6:BC:8D:62:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/9ED3D1A78DAD87E51CB504C6CD156CC6BC8D62FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/22
                IPv6:
                  2804:7c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271484

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:9b:52:ec:06:85:7c:16:c2:25:f5:96:3c:81:98:77:00:
         fc:04:90:21:3a:97:2e:ea:f9:95:db:36:84:10:65:49:be:41:
         d2:f0:70:ec:ea:17:99:ec:74:1f:70:15:fa:56:0f:f4:17:a8:
         34:28:9d:10:ac:7d:21:33:79:ba:cb:3c:a4:5b:73:bf:7f:44:
         dd:df:18:7f:a3:00:8e:9b:bf:83:89:46:dc:c3:d0:61:82:f6:
         f8:0f:9a:7c:f1:aa:ca:5d:da:28:10:1e:46:a7:6c:1f:8b:7c:
         05:de:68:7d:27:86:e0:25:bc:18:5e:5a:e7:4b:ad:be:2a:6f:
         a1:7c:02:0b:ba:4f:6b:7c:2a:6c:ea:39:59:04:ee:15:20:e5:
         66:e9:c5:e3:ca:f8:2d:d1:f9:2d:d8:d8:50:ea:62:b4:62:f3:
         c6:24:ca:20:70:74:5e:76:be:47:48:db:f5:01:06:8f:ce:9c:
         1e:e2:b0:ba:f9:07:60:c7:b0:0c:5b:08:b3:2d:b9:ef:a4:ec:
         15:ea:b2:b4:95:2d:ee:63:04:60:2b:15:f7:35:3a:ef:ad:9b:
         14:09:99:d9:17:88:7e:60:55:d7:12:4d:7c:71:46:1e:b3:c1:
         6a:99:dc:0d:fe:00:9d:45:87:d7:d9:43:30:1b:b2:fb:8d:a9:
         2c:51:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org