Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.cer
File:                     A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.cer (raw, json)
Hash identifier:          rZiOSxZAGSyfkg9aVgshm7PcCsBOjDrLlT5lwdjGwVI=
Subject key identifier:   A1:C9:64:66:71:EA:A2:88:6E:18:B7:98:87:6F:4F:DB:5F:BB:0D:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       55C7FB9C0ED0908527CD9F00372DFC6B3E74DD79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 01:55:09 +0000
Certificate not after:    Tue 03 Sep 2024 02:00:09 +0000
Subordinate resources:    AS: 28262
                          IP: 187.17.32.0/20
                          IP: 2001:12c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c7:fb:9c:0e:d0:90:85:27:cd:9f:00:37:2d:fc:6b:3e:74:dd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 01:55:09 2023 GMT
            Not After : Sep  3 02:00:09 2024 GMT
        Subject: CN=A1C9646671EAA2886E18B798876F4FDB5FBB0DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:e5:72:bd:c9:4c:81:98:02:6a:f8:16:9f:
                    9d:ea:12:75:4d:cf:c2:87:3a:52:3a:82:a3:34:23:
                    5b:9b:2b:1c:3d:c1:e2:ab:2b:78:c2:1a:5b:f1:fe:
                    f4:6f:44:07:ed:e8:46:6c:ca:07:99:3c:46:ab:5d:
                    08:09:ba:26:e6:10:38:b5:95:17:51:a6:e6:50:65:
                    f1:0d:cc:fa:61:7a:37:13:05:41:e3:98:10:e3:3e:
                    31:23:73:e0:96:6f:3e:51:32:00:95:c0:c5:2c:b5:
                    e1:db:f8:89:9f:14:be:67:13:9f:7c:f5:fa:6b:12:
                    35:a7:c4:b5:4f:58:a5:31:38:2b:76:9f:76:68:f7:
                    f5:06:10:42:b8:46:9c:85:4d:5e:61:0f:4d:20:04:
                    2a:f6:35:2e:02:c4:21:1b:5b:b5:4f:25:5a:c5:96:
                    ee:f9:91:c1:f7:25:d0:8b:d0:57:30:f8:bf:5a:28:
                    46:aa:32:fb:c5:e7:e3:4c:af:26:7a:e6:1b:5c:49:
                    f0:3b:61:d0:13:cd:bf:d1:f7:63:5a:fe:2c:4c:55:
                    2d:36:1c:9e:fe:35:b2:a7:ad:34:46:c3:bc:76:13:
                    ec:d2:5b:63:fb:68:32:30:2c:56:1e:97:51:cb:93:
                    72:de:f6:25:08:df:73:c7:26:95:47:20:6f:93:65:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:C9:64:66:71:EA:A2:88:6E:18:B7:98:87:6F:4F:DB:5F:BB:0D:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/20
                IPv6:
                  2001:12c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28262

    Signature Algorithm: sha256WithRSAEncryption
         ab:45:ab:fa:42:7d:41:b1:dc:0c:db:c6:51:09:c2:7b:09:22:
         d8:fd:fa:3b:bc:4b:ac:46:32:cd:79:92:b9:07:07:a1:08:ce:
         4a:fc:02:b8:d2:c9:a8:f7:70:9f:ed:b3:f0:36:d0:d2:b2:a2:
         b5:fd:ae:c0:f6:a4:46:46:28:66:98:29:16:1a:e1:da:1d:18:
         66:d8:0b:b3:cf:be:2a:ec:58:f2:fb:8e:45:22:a5:36:07:c8:
         1c:78:36:38:5b:50:dd:c9:27:14:d3:47:b5:a1:e7:93:6f:3e:
         09:7e:f9:6b:94:12:66:cb:3e:c4:0e:7a:c6:f6:b0:2b:b7:26:
         8a:8e:2c:66:8e:e1:c5:f2:0d:63:ea:33:ec:2e:0c:3c:ab:b2:
         cb:d0:84:55:0f:73:5f:35:65:58:a2:d6:f4:9c:2b:d0:e2:24:
         b4:3e:fa:6e:39:4b:cd:5b:95:9c:44:c7:64:9f:cd:4a:04:7a:
         5b:68:dc:91:0b:7d:e2:ed:93:43:01:b4:ba:2c:a7:df:88:34:
         ab:21:20:83:11:43:0b:db:47:3e:02:00:4f:ce:64:b0:cf:0c:
         e2:99:d2:39:51:f4:ac:ac:44:2e:c7:8e:67:7c:8d:e6:87:06:
         b6:4f:c6:ef:f4:a2:e0:0b:a1:b2:50:ec:49:ac:3c:06:d8:9b:
         f8:0c:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org