Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9EDEB9A1C03E4A3C91F44EF125B75E9F8447D233.cer
File:                     9EDEB9A1C03E4A3C91F44EF125B75E9F8447D233.cer (raw, json)
Hash identifier:          VSyoHts3RGFhjgb0wWITes+NYBAOkA95tq15sLgnupQ=
Subject key identifier:   9E:DE:B9:A1:C0:3E:4A:3C:91:F4:4E:F1:25:B7:5E:9F:84:47:D2:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DCA668DF723D464832804CE86371764DFD685D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/9EDEB9A1C03E4A3C91F44EF125B75E9F8447D233.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 12:55:08 +0000
Certificate not after:    Mon 03 Mar 2025 13:00:08 +0000
Subordinate resources:    AS: 28126
                          IP: 177.37.128.0/17
                          IP: 177.154.48.0/21
                          IP: 187.19.128.0/17
                          IP: 2804:29b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ca:66:8d:f7:23:d4:64:83:28:04:ce:86:37:17:64:df:d6:85:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 12:55:08 2024 GMT
            Not After : Mar  3 13:00:08 2025 GMT
        Subject: CN=9EDEB9A1C03E4A3C91F44EF125B75E9F8447D233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:22:5e:49:bb:57:cf:af:15:a5:20:c1:e7:
                    63:56:73:78:6e:5e:58:48:a6:0b:85:c5:4c:b5:ba:
                    15:ec:f2:d6:c0:97:35:8e:dc:61:11:b1:e9:80:73:
                    17:4e:52:f3:8b:02:0d:19:59:73:1f:24:e4:26:f7:
                    2e:79:1f:c0:64:13:64:2e:d3:60:1f:95:cd:e0:3e:
                    d8:73:0c:15:cd:2c:78:5d:48:f4:d0:6e:68:2b:cf:
                    57:17:38:ed:63:ab:5b:b4:5c:e5:df:a5:68:7a:8f:
                    a7:6e:68:9c:46:cd:e5:70:9e:00:94:aa:5d:28:ce:
                    2f:25:87:57:00:cc:b4:b6:a1:0b:b2:09:eb:1c:6c:
                    42:8b:da:c1:84:30:f7:54:30:57:da:b3:67:58:69:
                    b8:f9:d6:a7:7e:d6:9c:99:43:a5:6c:b8:13:18:be:
                    25:9e:cc:0e:af:ee:04:cd:43:04:e9:e3:9f:92:88:
                    93:34:d5:cc:9c:03:91:3c:9d:76:24:07:a1:2f:98:
                    07:6e:ea:e4:4a:3d:05:b7:67:56:49:01:2e:b9:3f:
                    a8:63:2b:a5:71:7c:8d:c7:01:98:e2:e0:2c:de:db:
                    48:cc:00:db:0d:42:22:c3:24:b9:b2:bb:d5:6b:23:
                    85:4b:72:91:0a:86:69:b9:ba:61:7f:76:b9:b8:c6:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:DE:B9:A1:C0:3E:4A:3C:91:F4:4E:F1:25:B7:5E:9F:84:47:D2:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/9EDEB9A1C03E4A3C91F44EF125B75E9F8447D233.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.128.0/17
                  177.154.48.0/21
                  187.19.128.0/17
                IPv6:
                  2804:29b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28126

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:a3:32:2a:af:73:79:4e:7b:80:0b:b4:6a:16:6c:bb:a9:
         e4:a8:20:25:bb:62:b6:56:11:dd:1e:03:00:33:97:44:7a:4a:
         53:65:b4:40:13:e8:2d:0c:95:d7:87:78:53:99:46:6e:c0:c0:
         1a:05:9b:e1:7f:d6:54:bf:db:34:92:83:31:22:aa:79:0f:dd:
         29:08:42:58:0d:c4:3f:9e:93:e2:f9:73:10:58:69:01:3f:49:
         2e:22:98:a6:73:98:d5:ac:95:6c:d5:1d:7f:a7:ff:ee:a8:75:
         65:00:39:49:e8:c1:12:b4:a8:8a:e2:c0:69:72:2d:61:35:13:
         b1:ee:a8:00:87:15:8f:94:88:82:2e:49:cd:10:4a:ee:a9:b0:
         0c:42:1c:09:d8:2d:3d:47:9a:c7:f4:6d:72:41:b7:25:54:59:
         d9:28:8a:9b:59:b3:37:e5:20:7b:07:96:cc:58:95:91:88:40:
         9f:84:3e:4c:3c:79:e5:db:4c:2e:92:50:35:ea:dc:00:8d:5c:
         0c:b1:88:65:06:24:fe:73:a2:e9:db:bd:5e:67:09:cd:df:79:
         db:b3:08:7f:ae:25:65:cf:60:00:cc:aa:ff:1f:8c:7b:e7:0d:
         d9:b8:eb:12:0a:48:21:9d:04:94:e8:42:0f:0e:15:15:62:3d:
         63:56:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org