Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F9A86935CAD204DD7AB759116AA64E71A38753D.cer
File:                     9F9A86935CAD204DD7AB759116AA64E71A38753D.cer (raw, json)
Hash identifier:          rcj+fSPtE8K983htzlaZ2OkE/IJ7a23rRXUjxu0ojDs=
Subject key identifier:   9F:9A:86:93:5C:AD:20:4D:D7:AB:75:91:16:AA:64:E7:1A:38:75:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       695DE452FB9580AA999E23733CE24DC039308325
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/9F9A86935CAD204DD7AB759116AA64E71A38753D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Mar 2023 20:06:57 +0000
Certificate not after:    Tue 26 Mar 2024 20:11:57 +0000
Subordinate resources:    AS: 266984
                          IP: 45.226.76.0/22
                          IP: 2804:4658::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5d:e4:52:fb:95:80:aa:99:9e:23:73:3c:e2:4d:c0:39:30:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 20:06:57 2023 GMT
            Not After : Mar 26 20:11:57 2024 GMT
        Subject: CN=9F9A86935CAD204DD7AB759116AA64E71A38753D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:c5:9f:bf:d8:c3:cd:90:85:97:ea:29:5d:
                    13:70:92:7d:07:af:d2:30:79:5c:6a:aa:4d:65:26:
                    d3:a4:a9:25:9a:fc:a5:53:93:4f:1b:e2:b1:99:e4:
                    94:16:5b:c3:ce:1d:85:e7:b2:e4:78:cd:6b:67:5d:
                    34:b7:36:db:c1:40:40:c9:8c:20:32:5c:e2:1f:54:
                    2f:c3:2a:fb:4c:7f:41:65:bd:f1:98:0b:4c:fa:07:
                    6a:13:4b:71:34:d0:dc:20:dd:01:13:2d:e7:5c:33:
                    a3:98:08:3e:39:55:5a:82:e5:d1:a3:c2:33:04:67:
                    1f:cc:6d:80:00:37:9f:1e:a0:ef:f4:d4:ea:cd:cc:
                    a6:03:5a:eb:33:d8:e1:33:8a:99:08:f8:e2:cc:d4:
                    e4:18:6e:7b:42:3a:2c:c8:fc:0d:04:db:48:0b:b0:
                    1a:ad:a1:73:95:14:76:56:41:6f:66:5b:3e:b8:52:
                    88:f6:f4:1e:b4:ff:4f:f4:10:d2:2b:7b:1c:0f:d0:
                    41:67:0e:2a:07:97:ee:65:ad:ae:1b:f5:b5:79:b6:
                    8a:d1:87:a7:3f:32:ea:9f:69:14:d6:6b:24:37:33:
                    34:b9:b4:2f:d5:bd:e8:45:b7:7f:70:e2:a5:63:3b:
                    a0:fa:01:d9:64:ca:06:fe:a5:10:77:5e:82:33:9a:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:9A:86:93:5C:AD:20:4D:D7:AB:75:91:16:AA:64:E7:1A:38:75:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/9F9A86935CAD204DD7AB759116AA64E71A38753D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.76.0/22
                IPv6:
                  2804:4658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266984

    Signature Algorithm: sha256WithRSAEncryption
         3d:d9:7c:e5:69:d5:e6:31:ec:b5:3c:3a:e3:0e:5f:3d:df:92:
         10:e2:6b:aa:a6:5c:11:16:ea:29:e4:aa:31:33:4a:16:b5:ba:
         ed:32:77:72:51:43:cd:b0:f1:db:99:f1:81:be:ec:f8:9e:ce:
         63:f0:2b:ad:6c:a1:58:a7:17:cd:0e:81:12:0d:7b:eb:72:da:
         b1:11:5e:5e:f4:7d:64:e8:2a:6d:12:af:9a:5b:a6:fe:b2:bb:
         7c:df:52:53:89:1f:f7:6e:80:bb:c6:45:ad:e6:bb:1a:c9:63:
         b6:d7:0b:44:54:d6:5d:0b:24:51:76:a2:f2:1d:ab:b2:71:91:
         91:eb:2f:d8:6c:f7:ed:e7:1e:b2:56:0b:e3:2a:2a:d8:3c:c3:
         a2:3c:96:cc:3a:cb:9f:49:97:63:38:d8:7e:a7:51:4c:c5:d3:
         ce:62:aa:0a:ad:84:c3:c7:63:3b:73:53:71:f9:52:9f:af:cb:
         71:5b:04:62:25:4c:a6:35:bf:db:7c:00:e3:5b:ce:92:7f:4b:
         e2:8a:20:dd:e3:7b:17:90:0c:42:97:59:e6:dc:04:90:c8:c5:
         62:32:4f:5e:e4:dc:7b:2d:89:d0:dc:47:95:a0:34:f0:86:2a:
         18:f4:af:af:31:c7:b5:f6:35:81:9d:cf:38:d3:70:f1:2a:1a:
         9b:91:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org