Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9EDE2ABC54103FAF77BE99AFFDE0A86C07983566.cer
File:                     9EDE2ABC54103FAF77BE99AFFDE0A86C07983566.cer (raw, json)
Hash identifier:          W4eq4l/NxR31gk3OZ9EZkPKXaMQsnz63Xpjacd1AfGo=
Subject key identifier:   9E:DE:2A:BC:54:10:3F:AF:77:BE:99:AF:FD:E0:A8:6C:07:98:35:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F833325959905078762FDD17F0B767CFB354F2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/9EDE2ABC54103FAF77BE99AFFDE0A86C07983566.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 12:28:13 +0000
Certificate not after:    Mon 13 Jan 2025 12:33:13 +0000
Subordinate resources:    AS: 267357
                          IP: 45.234.104.0/22
                          IP: 131.196.56.0/22
                          IP: 2804:4c38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:83:33:25:95:99:05:07:87:62:fd:d1:7f:0b:76:7c:fb:35:4f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 12:28:13 2024 GMT
            Not After : Jan 13 12:33:13 2025 GMT
        Subject: CN=9EDE2ABC54103FAF77BE99AFFDE0A86C07983566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:9d:04:c7:b5:c5:39:44:01:7a:1b:0f:3f:
                    73:ae:bd:9b:37:76:2d:43:6f:90:4d:e3:a7:1a:fe:
                    ed:34:33:2b:16:a3:db:30:40:f2:ca:e6:82:4f:84:
                    83:e8:c9:da:57:fe:f9:0e:1a:06:29:03:59:ed:b6:
                    77:d5:d5:84:a0:c2:9b:96:9e:1b:96:29:e7:e9:e7:
                    db:67:19:66:28:fd:15:e0:6d:b6:42:e6:eb:e4:27:
                    55:2f:42:55:14:cc:d0:e5:d8:97:b7:c5:20:b7:95:
                    1e:8d:75:e0:f3:ec:b7:23:05:68:1e:c2:0d:94:da:
                    e5:21:8c:d9:dc:a8:f2:5a:95:a8:6e:49:63:bb:44:
                    7b:cd:30:f6:b9:70:ca:75:57:f2:25:f0:54:0a:a9:
                    dc:c3:15:a9:34:ac:70:bf:d5:b3:5e:32:c4:3e:22:
                    c6:8a:10:ac:1d:33:e4:39:f5:27:4d:7a:14:5c:04:
                    0c:9b:14:50:df:7f:7d:a4:87:68:70:f1:77:3b:6c:
                    f1:8c:7b:c1:77:7b:d8:86:e6:6d:4b:3f:a9:2f:03:
                    f7:83:dc:6c:39:e7:4b:e1:52:83:4f:23:fd:66:83:
                    0c:e5:73:de:f0:e7:fe:aa:c0:a1:8d:b4:8e:d7:f8:
                    16:0b:78:b5:b9:d2:99:23:a6:44:6c:dd:ca:16:dc:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:DE:2A:BC:54:10:3F:AF:77:BE:99:AF:FD:E0:A8:6C:07:98:35:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/9EDE2ABC54103FAF77BE99AFFDE0A86C07983566.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.104.0/22
                  131.196.56.0/22
                IPv6:
                  2804:4c38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267357

    Signature Algorithm: sha256WithRSAEncryption
         b1:e1:ab:f6:36:66:32:8a:62:5a:38:67:3a:77:d1:73:8e:81:
         4b:87:31:ac:bc:d8:b3:b5:c7:6e:e4:54:13:6b:b1:56:73:ba:
         f9:da:62:8b:e3:bd:fa:77:82:60:30:5d:b0:8d:10:77:26:9e:
         da:b2:30:0f:9d:12:08:86:33:5c:e7:a8:f6:51:0a:40:0d:78:
         5a:f4:11:63:4b:9a:43:7e:7c:fc:03:0b:6a:e9:bb:1f:3a:5b:
         19:5b:86:2d:b8:d0:30:65:5f:83:06:13:e4:a6:2b:ab:a2:ee:
         c2:d4:b8:f5:e9:cd:5d:2f:e6:2d:29:ed:6d:af:65:44:3d:31:
         30:fd:f1:5e:1c:fe:5c:36:eb:ed:40:12:39:ef:a8:ec:fe:7f:
         d5:4e:06:93:90:c6:81:d2:6d:60:0d:89:5e:b7:68:90:46:cb:
         6d:c3:3c:07:86:ac:2e:2c:27:51:26:d7:e1:0b:28:b6:d5:7f:
         99:c1:d1:c5:35:c0:1d:a5:7f:8e:25:5f:33:ef:97:a5:6a:12:
         1f:50:af:8c:6e:59:18:f2:bc:22:c5:8b:12:58:20:64:de:77:
         a2:31:b0:c6:ea:41:07:02:bf:ba:ce:a1:cb:08:36:d4:ed:10:
         1e:a8:88:f6:f6:15:99:e9:c7:d0:12:8a:03:1c:19:38:e8:7b:
         02:d9:58:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org