Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9EDB0501E421814D3BCB6680196107A93F0BE76B.cer
File:                     9EDB0501E421814D3BCB6680196107A93F0BE76B.cer (raw, json)
Hash identifier:          GpD3XA5V6xWQcTY/HHQw+HnZ6+79QwPhDH1cU5O+rYA=
Subject key identifier:   9E:DB:05:01:E4:21:81:4D:3B:CB:66:80:19:61:07:A9:3F:0B:E7:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       382EBEB7BE8F61A12EF9DD62CBA5D4F99E096FD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/9EDB0501E421814D3BCB6680196107A93F0BE76B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 02:55:32 +0000
Certificate not after:    Tue 27 Aug 2024 03:00:32 +0000
Subordinate resources:    AS: 268681
                          IP: 45.165.92.0/22
                          IP: 2804:54f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2e:be:b7:be:8f:61:a1:2e:f9:dd:62:cb:a5:d4:f9:9e:09:6f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 02:55:32 2023 GMT
            Not After : Aug 27 03:00:32 2024 GMT
        Subject: CN=9EDB0501E421814D3BCB6680196107A93F0BE76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:73:87:aa:9a:00:0f:8a:91:50:a3:ff:da:
                    1d:b5:c0:78:45:6d:a5:0b:10:53:15:ad:fd:e4:41:
                    e5:e7:a1:08:a1:84:1d:5c:98:8f:63:7d:92:63:ca:
                    34:30:70:17:9e:5d:4f:35:11:aa:28:8f:9f:a2:e1:
                    19:1a:47:ed:f4:db:01:9c:89:f9:0c:10:16:18:95:
                    cb:a3:f6:6c:ae:bb:b3:58:36:e1:8a:2b:ed:3e:d7:
                    19:0b:9e:87:3c:61:11:dc:a3:ac:4d:1f:2f:0e:75:
                    b1:af:b2:35:b2:2d:76:64:83:fd:57:d1:88:18:61:
                    03:21:68:66:e8:ad:13:1c:98:3e:0f:4f:cb:a4:26:
                    51:93:b9:c6:0c:74:5f:6c:2d:4f:29:0c:60:08:1d:
                    af:e0:87:da:8e:d1:94:6b:49:12:64:d5:21:8e:36:
                    c3:cc:ca:0d:17:85:d0:1d:96:01:5b:00:9c:81:b1:
                    bd:ed:55:d4:d2:17:72:ec:dc:4f:43:9a:73:d0:34:
                    65:13:98:8d:a8:03:40:3c:a4:b7:ba:13:e3:a2:c7:
                    0d:d9:2e:20:8d:d5:9a:88:3d:5f:ba:57:79:e5:58:
                    c3:a8:51:2f:61:59:16:17:2f:39:bc:7a:65:e6:73:
                    6a:8a:81:fb:40:60:a9:73:63:69:dc:07:87:21:0d:
                    e0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:DB:05:01:E4:21:81:4D:3B:CB:66:80:19:61:07:A9:3F:0B:E7:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/1/9EDB0501E421814D3BCB6680196107A93F0BE76B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.92.0/22
                IPv6:
                  2804:54f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268681

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:8e:3b:4d:be:54:b6:60:42:fa:f9:86:95:92:ac:ec:54:
         ed:ad:96:8c:33:94:67:2e:d9:3b:af:a5:86:7a:a9:a6:e1:fd:
         80:1f:46:87:35:2b:85:b2:c8:95:0a:ef:b3:f3:a0:24:b4:19:
         d8:f8:89:39:55:b4:07:cd:f0:fa:24:5e:1d:c0:de:ab:a4:d7:
         74:28:b5:b8:ec:79:c8:31:2f:96:1d:6e:ef:6d:f1:a2:19:3a:
         0c:4e:73:df:15:98:30:6a:f9:67:dc:61:f8:f0:5c:c7:14:a4:
         0e:3c:d2:48:b2:70:a2:05:4a:14:15:04:2b:16:87:f9:a3:31:
         f6:1d:9d:68:6c:da:3f:28:cc:73:9f:28:11:e4:1a:0f:c6:2f:
         aa:5d:64:e2:91:c0:6a:8b:86:20:94:bb:c5:a5:16:1d:68:83:
         23:05:f5:b6:7f:87:24:14:6c:c6:85:21:22:b7:99:97:bc:61:
         52:43:6c:21:7f:12:02:d6:2a:53:e1:1e:5b:08:16:9b:1b:4a:
         5f:d7:7b:0b:01:47:af:11:66:e4:dc:e4:1a:a4:16:65:09:7e:
         6e:bf:37:db:90:92:39:80:bc:b3:b1:ff:b8:96:96:05:4f:4e:
         9a:c6:4a:ce:6e:b4:d4:5e:4a:38:1c:d2:65:8b:a5:cb:bc:f9:
         02:f5:a0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org