Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.cer
File:                     9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.cer (raw, json)
Hash identifier:          mlf/svvoGXaTViY7tO5S/BosNXMDQth5PiETuWltZqo=
Subject key identifier:   9F:7B:B8:1C:7C:61:11:73:1D:1A:97:D3:C8:F3:93:5E:48:48:C3:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       414319D3CD27800AC2A46D0C36592C176C0C15A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 May 2022 13:15:21 +0000
Certificate not after:    Tue 30 May 2023 13:20:21 +0000
Subordinate resources:    AS: 53138
                          IP: 177.53.224.0/21
                          IP: 186.192.240.0/20
                          IP: 2804:140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:43:19:d3:cd:27:80:0a:c2:a4:6d:0c:36:59:2c:17:6c:0c:15:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 13:15:21 2022 GMT
            Not After : May 30 13:20:21 2023 GMT
        Subject: CN=9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:28:6d:8f:8b:9c:96:a1:c1:06:80:72:79:
                    93:f2:77:34:db:df:f1:77:0a:73:50:63:15:a2:85:
                    56:79:7b:76:2d:e5:0e:03:b8:c8:fc:d7:54:c0:f8:
                    58:94:61:90:5e:9e:df:c6:c2:69:32:fb:58:86:1d:
                    90:3c:d8:2c:e4:ca:e6:ef:db:04:3f:11:37:6c:40:
                    ac:03:0a:73:20:85:b2:6a:13:7c:ee:f3:82:95:17:
                    d6:ca:fa:ee:3f:7b:10:18:a0:a2:b5:51:4b:69:42:
                    03:39:be:13:1a:f6:e7:96:ca:4e:24:79:01:90:bc:
                    84:be:c8:1c:3d:ba:8a:64:21:ae:19:d6:86:27:34:
                    88:41:77:75:b6:4b:4a:13:da:b2:96:4f:b2:70:16:
                    0f:4e:44:b5:93:c5:52:ae:72:b5:29:d7:e4:e0:64:
                    64:a7:46:18:01:f9:bf:95:2b:41:84:bf:1f:2b:7a:
                    66:6a:e1:1f:4c:84:10:cd:60:65:ac:ce:c2:ea:88:
                    3a:c9:13:15:82:47:ab:e3:24:16:3d:6d:46:76:19:
                    12:e5:66:49:1e:1e:42:16:3e:91:4c:1b:ca:35:64:
                    42:ef:62:49:37:ee:ba:60:3d:f7:c0:84:fb:f9:46:
                    ef:66:03:d3:43:e5:c3:36:7b:59:26:e3:cf:c3:aa:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:7B:B8:1C:7C:61:11:73:1D:1A:97:D3:C8:F3:93:5E:48:48:C3:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.224.0/21
                  186.192.240.0/20
                IPv6:
                  2804:140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53138

    Signature Algorithm: sha256WithRSAEncryption
         17:20:1a:ef:51:2d:a3:81:4e:ed:a3:80:cc:15:c8:5e:5f:8a:
         49:4d:18:d5:b7:1c:7d:1f:61:7c:29:1b:dd:16:00:a4:ff:f8:
         29:44:c7:9a:73:a4:b3:0d:85:74:be:ed:b7:3d:59:ca:98:2c:
         ac:e5:a3:18:51:8d:9d:e0:2c:d2:98:84:a9:f4:7f:dd:45:4f:
         cc:d5:96:3b:51:e2:8e:40:6b:d1:cd:6e:fe:82:b8:f2:12:d0:
         e9:6f:10:21:66:2c:ed:44:bf:af:f1:5e:10:aa:ab:e1:8c:8a:
         72:33:3e:a9:aa:b6:19:d2:e5:01:51:1c:27:0e:f2:8b:aa:3b:
         50:19:0e:61:71:8a:c1:64:be:51:c8:2d:57:0a:62:b3:18:db:
         5c:c2:50:b5:b2:bf:4b:ab:b6:a4:74:8c:8b:a5:92:5c:97:e9:
         d9:99:8f:dc:2c:c8:a8:20:7b:5f:69:bc:f2:f4:1d:82:ec:9e:
         9c:d5:9c:f8:8e:db:45:9b:3a:75:e1:43:5c:91:1b:d1:8f:e3:
         d2:00:4e:80:5e:8d:d7:26:1e:ef:69:20:36:e9:d3:33:8c:5b:
         cb:fa:59:55:ae:9c:a0:a8:aa:d4:d1:f2:81:ea:3d:ec:4b:7b:
         df:cf:2c:8f:f5:5f:78:cb:62:75:0d:72:1b:c0:c2:6b:d6:57:
         44:8e:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org