Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.cer
File:                     9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.cer (raw, json)
Hash identifier:          BfOIRWNt4Yo0+azrsfrR7kpgBLTBvEHwa1UG24CgzVc=
Subject key identifier:   9F:88:A9:66:AF:C6:F2:42:67:E4:0C:CF:D0:10:AD:7B:1E:D8:2C:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A3201A0215CBC5B565C52E8AE4E8F1A4C5B2C40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Feb 2023 06:15:52 +0000
Certificate not after:    Thu 22 Feb 2024 06:20:52 +0000
Subordinate resources:    AS: 263625
                          IP: 179.125.16.0/22
                          IP: 2804:1038::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:32:01:a0:21:5c:bc:5b:56:5c:52:e8:ae:4e:8f:1a:4c:5b:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 06:15:52 2023 GMT
            Not After : Feb 22 06:20:52 2024 GMT
        Subject: CN=9F88A966AFC6F24267E40CCFD010AD7B1ED82C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:ca:9f:a1:d9:f4:84:cb:4e:83:41:3e:45:
                    38:dc:a0:17:26:9f:d3:64:5d:7b:70:cf:a6:9e:e2:
                    88:82:38:ed:c6:ca:0b:85:73:b6:72:82:94:de:cc:
                    2b:ef:67:04:8c:9a:3e:b7:4e:9c:29:8f:68:0b:f5:
                    4a:9e:4a:28:97:f1:34:92:1d:c1:c5:17:ca:f7:49:
                    bd:cb:a7:5f:52:ba:28:bb:ab:5a:fc:5e:68:f2:e4:
                    0d:f0:b7:f6:3d:f8:08:ce:e5:f5:6e:ed:13:f5:cc:
                    31:01:d7:da:95:64:db:45:0d:82:d9:73:00:71:5b:
                    c1:a0:50:60:a9:32:86:bd:24:44:c4:3b:5c:38:09:
                    56:b5:0f:3b:cf:3f:d3:d2:3b:b6:c5:9a:a4:6e:6e:
                    52:6e:e1:a1:f4:45:b9:c2:24:cf:7a:06:8b:5a:47:
                    a9:97:db:1b:96:c8:9b:c7:3d:53:d7:e4:24:05:9f:
                    13:df:ef:f7:c3:55:f0:df:d3:2c:94:f6:8e:d3:53:
                    6e:f3:d3:c5:20:f0:43:70:48:00:23:87:41:fa:71:
                    1e:23:1a:cd:b5:28:80:9f:a2:69:e7:ca:1d:da:d4:
                    a4:70:48:78:12:55:40:05:2d:f5:63:96:fb:12:e7:
                    36:c8:40:a6:59:ad:51:61:a4:96:5c:f5:d3:f0:a3:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:88:A9:66:AF:C6:F2:42:67:E4:0C:CF:D0:10:AD:7B:1E:D8:2C:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/9F88A966AFC6F24267E40CCFD010AD7B1ED82C46.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.16.0/22
                IPv6:
                  2804:1038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263625

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:78:8f:72:88:2d:9f:58:87:18:73:03:d2:46:d6:10:32:
         1e:eb:7c:78:98:53:90:3b:33:55:09:0b:16:85:aa:18:92:a2:
         86:39:fc:e5:84:4d:20:d4:fe:9d:68:9e:7f:f1:09:4d:60:89:
         d5:96:5b:61:64:c6:53:db:9f:be:51:c9:d5:e2:37:ed:7b:cc:
         64:54:8f:8f:af:d7:a0:38:1b:28:ca:65:e2:08:63:bf:5a:92:
         3e:76:08:8c:64:7f:0f:eb:41:bd:1c:22:ca:1a:8e:37:d3:c7:
         57:51:64:7f:93:46:e6:42:ba:a8:1f:10:4e:a9:c0:73:b0:c9:
         f4:3d:85:8e:24:d3:ad:d2:63:c3:44:35:90:78:dd:d7:a5:2b:
         ca:6c:37:c1:75:af:db:4e:e4:60:51:86:01:56:20:48:b5:af:
         44:1f:ce:b0:f3:ee:f9:7c:d2:21:ca:21:cb:68:64:45:24:51:
         e7:e1:9d:49:c2:c7:38:1f:53:8b:de:b0:d7:35:d9:e3:b2:86:
         24:ac:b8:14:97:3f:e9:14:fb:ab:54:7d:13:bc:45:ce:78:cc:
         87:70:34:e5:e2:59:10:93:8e:68:95:d8:d9:a3:58:26:ee:15:
         3b:ff:24:df:69:16:42:47:e6:15:f6:d4:94:50:df:5f:ab:8f:
         27:ac:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org