Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9FE166C9D95AC26C78D5B62D2A1E19A34A65A61E.cer
File:                     9FE166C9D95AC26C78D5B62D2A1E19A34A65A61E.cer (raw, json)
Hash identifier:          DPJj4og1MWbrRptfcjff99DkDNE1SNBs6GX/fZkwxZ0=
Subject key identifier:   9F:E1:66:C9:D9:5A:C2:6C:78:D5:B6:2D:2A:1E:19:A3:4A:65:A6:1E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       104070F7A63A652F26E1CF9A2BA22FD8675890E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/9FE166C9D95AC26C78D5B62D2A1E19A34A65A61E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 20:13:20 +0000
Certificate not after:    Fri 02 Aug 2024 20:18:20 +0000
Subordinate resources:    AS: 52752
                          IP: 177.155.160.0/20
                          IP: 189.76.64.0/20
                          IP: 2804:11e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:40:70:f7:a6:3a:65:2f:26:e1:cf:9a:2b:a2:2f:d8:67:58:90:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 20:13:20 2023 GMT
            Not After : Aug  2 20:18:20 2024 GMT
        Subject: CN=9FE166C9D95AC26C78D5B62D2A1E19A34A65A61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:a4:a9:bb:76:70:6d:b1:0d:34:53:f1:7a:
                    9f:d6:12:a0:83:69:9f:10:b2:3c:e7:f5:95:11:0e:
                    7f:81:dd:78:d0:91:18:a9:d9:f1:79:28:7b:d6:81:
                    68:b7:6c:8b:06:15:00:e4:7f:d2:82:58:87:b7:12:
                    2f:11:65:e0:e4:de:c7:95:5b:bc:b7:e9:4c:be:e3:
                    14:d7:ce:15:7f:57:8e:3f:e3:09:88:d8:65:ec:eb:
                    54:8f:20:fd:79:b7:ae:4c:39:56:7a:fd:f9:5e:8a:
                    ae:de:81:bd:cc:f8:d1:ff:b9:4d:66:c1:c1:2f:af:
                    c2:df:09:78:7b:89:66:69:c2:e3:b7:84:31:c2:62:
                    83:94:4c:5f:3a:5b:82:50:bf:33:d4:fa:c7:5a:28:
                    c8:17:e8:6c:db:f8:79:bd:c0:c7:08:93:77:0c:61:
                    59:52:00:82:6d:8e:6a:22:bb:d8:13:01:ed:e7:12:
                    de:db:77:f2:11:66:cd:97:26:47:07:d5:da:50:47:
                    51:12:d9:55:14:2a:f4:7c:ba:cb:77:07:5f:eb:fd:
                    5a:37:ed:62:7b:0c:8f:17:9b:10:20:b3:31:3c:6e:
                    77:a4:79:ea:ac:09:68:80:38:8c:0f:15:bc:bb:0e:
                    5f:7c:e2:10:1d:5c:39:cf:6b:ae:90:ce:e4:32:ba:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:E1:66:C9:D9:5A:C2:6C:78:D5:B6:2D:2A:1E:19:A3:4A:65:A6:1E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2monomGxJmNuYXzA6UnJkohk4U2Xd3KGECJ882LoLJCV/0/9FE166C9D95AC26C78D5B62D2A1E19A34A65A61E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.160.0/20
                  189.76.64.0/20
                IPv6:
                  2804:11e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52752

    Signature Algorithm: sha256WithRSAEncryption
         7b:10:0d:ad:71:03:ac:03:d3:05:a8:a0:2e:7e:bf:88:33:ab:
         6d:ba:05:da:04:4a:04:58:74:58:34:f6:4c:ab:d8:5a:90:f2:
         13:5a:18:a8:90:63:57:b5:0d:a8:61:f8:2e:da:79:59:5e:57:
         13:82:88:08:80:33:41:20:e9:2c:7a:91:0b:76:58:9b:a1:1c:
         77:12:02:08:c9:d6:f5:13:74:bb:c3:a2:98:5b:6d:be:03:9e:
         0c:c2:c8:2c:f8:e3:e2:75:91:8a:ee:85:1a:70:ad:f9:8d:2a:
         66:5e:6c:90:67:b5:13:8f:40:92:09:04:12:5b:34:5d:68:e0:
         86:7a:3d:ee:82:df:4d:33:00:42:60:9a:88:76:f4:b8:84:51:
         aa:2b:26:4a:cf:73:b1:37:88:89:ab:15:25:1f:b8:24:cb:30:
         40:b4:ac:0c:0b:fa:7a:ef:67:1e:1c:f1:61:d6:f0:5e:8e:3a:
         38:88:d1:52:ec:36:54:fa:e6:f6:2a:e6:54:09:33:39:aa:93:
         3f:9c:32:69:9a:23:f4:0b:49:60:6e:6c:07:34:f9:a5:75:d8:
         d8:57:57:87:58:6a:07:b4:0a:08:ff:5b:90:ce:41:ef:98:c3:
         1e:92:29:e6:02:1a:b4:6d:8f:2a:8d:05:b7:8a:61:5a:6e:6a:
         a7:fa:b9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org