Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F9F54797EDB319F0D1FF134932F1BCD25F5230B.cer
File:                     9F9F54797EDB319F0D1FF134932F1BCD25F5230B.cer (raw, json)
Hash identifier:          8kJ/ZgYMoO3q3dQi0vadEsGd/V4Vv+cbGgIUtfxGegs=
Subject key identifier:   9F:9F:54:79:7E:DB:31:9F:0D:1F:F1:34:93:2F:1B:CD:25:F5:23:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7889D1A2D76242453DE44D77071A3C596C9DE64A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/9F9F54797EDB319F0D1FF134932F1BCD25F5230B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 14:39:55 +0000
Certificate not after:    Tue 28 May 2024 14:44:55 +0000
Subordinate resources:    AS: 267517
                          IP: 201.182.120.0/22
                          IP: 2804:42a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:89:d1:a2:d7:62:42:45:3d:e4:4d:77:07:1a:3c:59:6c:9d:e6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 14:39:55 2023 GMT
            Not After : May 28 14:44:55 2024 GMT
        Subject: CN=9F9F54797EDB319F0D1FF134932F1BCD25F5230B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:05:2f:3f:b9:84:4e:33:9b:0c:5b:0c:8e:
                    67:3a:cf:ca:de:95:4b:dc:41:21:37:87:81:4c:03:
                    7e:97:bc:60:05:49:80:99:a6:f7:0b:db:01:cf:87:
                    0f:dd:89:78:e2:f6:4d:20:9f:cd:f9:67:de:2c:2b:
                    d0:38:cd:7b:0a:a6:ea:76:73:fb:dd:bb:d5:42:aa:
                    37:3e:99:a6:99:da:3e:39:76:a1:6b:36:21:c3:5c:
                    87:28:1a:76:8c:fa:7f:04:5d:8a:50:42:34:38:29:
                    31:d0:a8:f5:6e:15:4f:07:08:a2:b8:45:8f:b5:33:
                    11:2c:fe:13:53:b6:f0:34:90:46:48:28:de:44:8b:
                    3e:d9:a8:00:cb:bb:2a:8c:dd:c2:94:a8:78:12:44:
                    43:f4:2a:29:96:4b:f0:cc:02:ab:c0:14:d8:7c:9c:
                    73:b1:9c:be:9a:f9:05:bc:c2:1a:4b:8a:96:fe:51:
                    f8:59:7c:d8:7b:88:f4:ed:cf:fc:c5:b3:73:b1:7d:
                    0d:9b:0c:4c:08:b9:94:75:07:46:ea:57:b3:2d:0c:
                    56:b1:86:8e:19:fc:9c:49:11:2b:4c:fc:c3:7e:cd:
                    3d:96:43:3f:45:95:1d:17:6e:5c:1e:da:20:27:7a:
                    ec:d6:3e:c7:ed:71:e4:6d:ca:a1:18:47:7c:87:88:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:9F:54:79:7E:DB:31:9F:0D:1F:F1:34:93:2F:1B:CD:25:F5:23:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/9F9F54797EDB319F0D1FF134932F1BCD25F5230B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.120.0/22
                IPv6:
                  2804:42a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267517

    Signature Algorithm: sha256WithRSAEncryption
         a9:24:a3:6c:35:7b:26:cd:9a:05:17:d1:24:fb:08:ef:d9:6e:
         9c:a1:36:dd:b4:32:c7:2f:00:3b:65:7b:96:e7:3f:6b:43:9a:
         a3:79:86:be:9b:c2:77:17:0a:6c:7e:fa:f7:4c:e7:e5:6a:2c:
         f1:2c:0f:30:2d:0a:c4:ac:3a:7c:53:6a:49:d1:5b:a8:f4:1c:
         81:15:f7:bd:6e:2c:ec:2f:de:e2:9f:ab:78:2b:6c:04:5a:9e:
         e5:82:61:4a:ce:ec:0b:e2:2e:9c:04:26:57:8b:cd:e7:4f:93:
         1b:c8:c1:db:aa:25:20:86:f9:5d:bb:5a:86:ad:96:27:a8:12:
         a2:0a:f3:48:c3:82:d4:0b:6e:67:32:38:64:9d:03:3b:58:14:
         7f:12:d4:30:ef:5a:95:d3:a2:ca:b2:d9:0b:97:2a:99:32:28:
         8a:60:6e:87:05:0f:55:8e:90:da:ee:49:b6:f7:c5:dc:38:a6:
         71:d3:bf:d8:fb:42:05:8b:f0:ce:cb:de:f3:c3:e9:73:87:32:
         0d:a5:01:a1:51:02:30:e4:26:ed:b7:47:e7:11:ba:1d:5d:f1:
         b9:45:bc:10:48:96:a2:ef:b3:5f:88:c0:1b:48:af:95:94:c8:
         fe:60:25:1c:67:5f:08:89:78:8d:26:4b:88:0d:35:7e:6d:ad:
         a4:c6:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org