Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C.cer
File:                     9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C.cer (raw, json)
Hash identifier:          sO+Sbrjz9wN+1qc+/OJuvythld2oU7UqIw16xcGTna8=
Subject key identifier:   9F:2D:D0:DD:59:31:65:9D:4F:0F:20:C7:A3:EA:E5:B5:7F:C1:E7:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D11F3FF239739B25905B6A0F47CA5A1BBCC74AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/2/9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jan 2024 12:46:54 +0000
Certificate not after:    Wed 08 Jan 2025 12:51:54 +0000
Subordinate resources:    AS: 264097
                          IP: 138.59.144.0/22
                          IP: 2804:2268::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:11:f3:ff:23:97:39:b2:59:05:b6:a0:f4:7c:a5:a1:bb:cc:74:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 12:46:54 2024 GMT
            Not After : Jan  8 12:51:54 2025 GMT
        Subject: CN=9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:09:7a:42:25:3d:e6:80:9b:9b:93:48:40:
                    b0:a4:96:48:bb:c4:49:26:25:22:4c:0a:4e:46:f8:
                    43:4e:b5:32:e1:e7:d0:57:43:dc:8e:b0:f0:91:a6:
                    f6:24:d9:b6:b6:ac:06:8a:2e:57:31:82:b3:09:4b:
                    54:97:c2:19:ae:4d:01:b9:6b:99:85:80:80:ed:81:
                    8d:3c:b2:b3:88:b8:03:45:43:03:ca:12:5c:cd:bb:
                    97:a7:ed:e9:75:f3:9d:30:ac:b4:ce:ae:fb:04:5c:
                    a3:db:16:55:17:5e:fa:89:9e:cb:f0:d1:a4:cb:9c:
                    f5:4f:d7:38:d4:19:fa:38:9b:77:70:7f:4b:59:94:
                    56:d1:01:88:b0:8d:bc:d9:79:31:a4:e3:79:6e:e8:
                    a3:ab:2d:d0:85:4b:f7:39:90:cb:97:3f:74:c7:86:
                    1f:1c:06:a8:27:3c:38:c3:6f:c6:2e:a8:fa:11:a5:
                    97:0d:ed:0c:e2:cc:72:71:e1:66:a0:1d:4d:de:59:
                    6a:fe:46:c5:08:68:48:0d:e9:7c:5b:18:00:5c:67:
                    3b:75:f6:93:d1:54:6e:5f:88:33:74:e6:31:08:9d:
                    e3:7f:32:b5:b1:3b:2c:46:49:d4:d0:f3:88:d0:4f:
                    d8:dc:6d:42:4e:84:b2:03:af:a6:9c:40:b4:31:02:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:2D:D0:DD:59:31:65:9D:4F:0F:20:C7:A3:EA:E5:B5:7F:C1:E7:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/2/9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.144.0/22
                IPv6:
                  2804:2268::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264097

    Signature Algorithm: sha256WithRSAEncryption
         08:ba:ba:63:45:e0:c4:62:9f:71:a6:80:41:16:b2:d7:1b:b4:
         0b:b5:6a:a3:ca:c1:4f:08:2d:62:62:d2:9d:bb:90:92:f6:7a:
         2f:6e:5d:6a:ad:ab:38:48:47:49:9c:69:85:fb:cd:d9:26:b5:
         d4:3a:d9:15:75:04:bb:f4:51:7b:48:89:2a:f5:90:88:9d:0d:
         ba:e4:52:c9:c4:6c:04:42:f2:3e:e0:90:ea:e7:63:fd:50:e2:
         a9:c6:b7:c5:92:b5:24:1b:ca:f6:fa:63:bc:ab:54:e7:38:b2:
         24:4c:2c:cc:a3:80:a6:03:41:18:91:00:0c:02:26:dc:7a:13:
         7a:71:b2:ad:2c:f9:3b:d4:68:93:e8:86:60:83:43:4a:37:93:
         0a:15:38:c0:aa:f6:d4:94:3a:00:c2:05:15:dc:3e:b7:31:9b:
         78:a3:95:3a:2f:8a:f0:17:f4:89:84:72:ba:ac:68:34:be:34:
         4f:05:37:29:15:6f:e6:96:25:2c:25:2c:83:26:ad:21:f2:b0:
         ca:13:f2:6e:49:11:da:d2:d1:92:e5:3a:18:73:2d:72:d5:62:
         59:c7:c8:f1:82:bc:c1:a4:4c:dc:0d:63:b8:f4:06:52:eb:bb:
         58:7e:4b:a4:ac:e9:18:0c:05:a2:3b:bb:f4:fe:3f:7c:b8:64:
         72:bf:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org