Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9ED789D38EBBF63414DC8442A12A4EECA933C2D3.cer
File:                     9ED789D38EBBF63414DC8442A12A4EECA933C2D3.cer (raw, json)
Hash identifier:          TedDZtHQpCuEHlp+Blgs1bHtP2AbRwRFaIf9l2jzzeE=
Subject key identifier:   9E:D7:89:D3:8E:BB:F6:34:14:DC:84:42:A1:2A:4E:EC:A9:33:C2:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       243BAA50C9373EF4B4A6A2F162B8AC14417FDEAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/9ED789D38EBBF63414DC8442A12A4EECA933C2D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 12:52:17 +0000
Certificate not after:    Tue 03 Dec 2024 12:57:17 +0000
Subordinate resources:    AS: 263360
                          IP: 191.37.136.0/22
                          IP: 2804:14f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3b:aa:50:c9:37:3e:f4:b4:a6:a2:f1:62:b8:ac:14:41:7f:de:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 12:52:17 2023 GMT
            Not After : Dec  3 12:57:17 2024 GMT
        Subject: CN=9ED789D38EBBF63414DC8442A12A4EECA933C2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:ba:35:03:d2:4b:aa:89:1a:77:37:07:f2:
                    52:27:64:d0:1d:f6:61:d9:5b:4a:04:fc:25:04:65:
                    6a:89:8c:ce:e7:29:76:c8:81:89:4f:f3:e9:c1:d4:
                    6a:d4:ec:b1:4f:ac:36:9c:e4:68:c1:89:1f:11:1a:
                    f0:55:b3:bc:81:9c:74:2d:5d:8f:90:0e:1b:78:6b:
                    59:d3:d1:37:77:a6:bd:40:8d:8e:56:dc:b7:44:11:
                    77:3f:39:02:69:87:28:91:be:f4:14:1e:32:2f:2c:
                    c2:44:28:e1:37:46:62:bd:b7:4d:41:ad:cd:fd:09:
                    30:49:ad:69:a1:86:7c:e6:4f:09:41:50:32:06:5f:
                    8f:52:cc:16:34:ba:c9:b8:fa:4b:26:35:61:a4:40:
                    6f:24:6f:85:51:1f:7e:b1:c1:ac:c4:1a:63:d5:e1:
                    76:d3:29:2a:45:97:40:4a:37:46:cf:eb:10:34:2c:
                    79:0f:3c:83:9f:04:23:82:1b:2d:c2:e9:9b:f8:18:
                    15:a6:1c:1c:ce:2a:01:51:cc:14:20:61:c6:63:c1:
                    1f:06:b2:ab:87:cd:43:88:96:10:02:25:02:05:a6:
                    78:ac:50:21:41:35:53:bb:b9:b2:32:b4:64:d8:27:
                    25:22:dd:df:d0:9a:cb:95:0c:e2:0c:dd:a8:c2:ca:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:D7:89:D3:8E:BB:F6:34:14:DC:84:42:A1:2A:4E:EC:A9:33:C2:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/9ED789D38EBBF63414DC8442A12A4EECA933C2D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/22
                IPv6:
                  2804:14f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263360

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:14:d3:3b:e9:ae:0b:49:1c:a3:6f:af:5d:ab:55:64:36:
         c0:d1:d9:53:4c:f4:af:98:0a:09:9a:61:48:65:fc:9a:ee:58:
         5f:a0:42:d7:0b:1b:1f:fc:88:72:02:6a:af:69:88:37:e5:8c:
         38:5a:75:7e:f4:2b:3d:e4:42:ff:3a:d8:1f:98:d2:52:1a:4b:
         1f:49:bc:2e:a0:0e:d8:2d:88:41:ea:3a:76:62:dc:77:61:98:
         bb:f1:71:94:9d:c9:7a:a0:db:b8:01:a9:a9:6e:e6:eb:66:10:
         09:38:95:c2:46:ce:48:23:3f:bf:f6:25:3c:f3:b1:e1:b0:01:
         3b:3a:4e:50:16:9f:8e:f6:5b:a7:f4:f4:b9:62:6c:fc:9a:a8:
         16:c8:77:61:30:f2:4c:00:e6:f2:e1:ef:c3:a8:54:61:0f:a7:
         e1:12:8f:dc:9c:03:b1:c2:3b:7f:f8:94:40:b0:77:ab:b3:35:
         08:a9:c3:37:09:81:22:d7:8f:f7:eb:25:13:2e:9f:88:d2:5b:
         60:73:85:a5:c4:c3:6b:d6:0c:49:8c:39:b0:f2:1a:8e:3e:e4:
         41:69:e2:3d:31:2e:50:d2:ef:a2:f7:28:13:71:7e:bc:cd:72:
         7d:6c:c6:38:da:67:98:df:b6:6c:2c:aa:35:11:d8:c3:49:5c:
         f0:1b:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org