Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9FB1534C0245C7BB4E238F2112BDB99FDEE1F80C.cer
File:                     9FB1534C0245C7BB4E238F2112BDB99FDEE1F80C.cer (raw, json)
Hash identifier:          LIX8PgxC19I3Bg4G1dqUrhggFQn5x+/zTryvkCvxves=
Subject key identifier:   9F:B1:53:4C:02:45:C7:BB:4E:23:8F:21:12:BD:B9:9F:DE:E1:F8:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27DE1DBC7370AC82FF7CDDEF2F5D42B5B37D26BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/9FB1534C0245C7BB4E238F2112BDB99FDEE1F80C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Nov 2023 13:59:43 +0000
Certificate not after:    Mon 18 Nov 2024 14:04:43 +0000
Subordinate resources:    AS: 272677
                          IP: 179.63.84.0/22
                          IP: 2804:86f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:de:1d:bc:73:70:ac:82:ff:7c:dd:ef:2f:5d:42:b5:b3:7d:26:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 20 13:59:43 2023 GMT
            Not After : Nov 18 14:04:43 2024 GMT
        Subject: CN=9FB1534C0245C7BB4E238F2112BDB99FDEE1F80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:f4:c5:28:9b:af:81:f9:e9:56:9a:63:4b:
                    97:b9:94:7b:e1:aa:5b:b4:14:c8:ff:a3:f3:6a:c0:
                    fe:00:68:e9:b2:28:28:61:4e:7c:87:2c:10:94:bf:
                    95:d3:b2:97:53:ca:58:6e:ba:a4:bb:24:92:2a:b9:
                    a0:d0:5f:34:65:42:a9:0a:fb:30:1a:f3:b9:73:8a:
                    b7:34:71:1d:dd:70:43:4a:a3:96:a7:50:a5:d1:9a:
                    ad:e6:f8:e6:b7:6d:d0:09:5c:22:2a:2a:61:b4:84:
                    6b:93:66:c2:f6:9f:34:6f:75:b1:50:e0:d6:4b:cd:
                    79:38:20:e9:bf:33:01:a0:a0:50:86:c8:04:cf:a8:
                    19:27:bb:00:f7:60:6e:a8:85:09:df:6c:6d:01:9e:
                    c4:c4:db:39:cf:7a:b6:c3:6b:d4:34:5b:08:56:a3:
                    67:ee:a3:ea:ff:c4:c0:de:5b:39:75:c5:17:c6:bc:
                    9c:5e:10:ec:5a:a7:9d:c8:80:31:61:5b:2c:7d:e7:
                    d0:08:02:d3:d1:20:56:2c:35:b1:b9:d5:41:a8:68:
                    e8:84:5e:88:fc:8f:ed:aa:41:bc:a4:9f:2c:1a:72:
                    c6:4a:1e:f9:01:74:25:32:ff:84:94:23:6e:8d:39:
                    86:10:b4:39:79:9f:f6:8b:13:c2:71:40:05:35:89:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:B1:53:4C:02:45:C7:BB:4E:23:8F:21:12:BD:B9:9F:DE:E1:F8:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/9FB1534C0245C7BB4E238F2112BDB99FDEE1F80C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/22
                IPv6:
                  2804:86f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272677

    Signature Algorithm: sha256WithRSAEncryption
         0d:5b:a8:e9:2e:30:d5:0d:d7:89:c0:65:8a:37:7e:a6:83:b3:
         c9:c9:99:16:61:7c:41:7c:55:64:58:b2:16:07:aa:d1:47:57:
         d7:52:13:76:2c:78:af:36:a7:77:3b:da:fb:43:75:08:e5:b8:
         53:ca:d0:96:5d:af:f3:00:7d:e7:c5:1d:20:38:6e:0d:56:cc:
         ff:8a:08:44:f4:63:6e:70:93:d4:87:a7:58:3e:7f:95:bb:2a:
         02:3e:1d:f8:18:bd:aa:55:74:36:37:11:0c:8d:15:e3:0d:0f:
         6d:38:a5:16:45:6e:10:89:c3:82:f1:e8:21:ca:a1:73:fe:0a:
         a5:fc:ab:4a:7b:84:4c:cf:b6:48:fb:21:e1:b0:81:34:43:38:
         d2:8f:ec:dd:4b:9d:c3:21:6d:68:82:12:07:de:3d:0b:b4:de:
         7c:54:d8:0a:7a:22:00:c6:bb:c3:58:be:ce:09:20:e4:d2:ab:
         95:4d:f2:9a:f4:23:f9:e9:25:e9:3a:a2:2e:01:d3:f2:cd:50:
         6a:88:47:5e:f2:05:a9:77:82:50:73:30:e1:05:16:33:f4:5f:
         57:7b:5e:99:2a:c1:c2:af:ad:17:a0:8a:fb:e3:38:b0:0e:7e:
         89:3f:ab:5e:ed:1b:2b:a6:2f:31:cf:95:77:03:20:4e:a8:9a:
         84:59:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org