Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A509FA9FFA9F53D84F058F7156C291C01AD37130.cer
File:                     A509FA9FFA9F53D84F058F7156C291C01AD37130.cer (raw, json)
Hash identifier:          gEPC6swi2jqwTwxzyDbnLmttMPS6v51x7W6JUeQT258=
Subject key identifier:   A5:09:FA:9F:FA:9F:53:D8:4F:05:8F:71:56:C2:91:C0:1A:D3:71:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F16538113962ED688601AE4D553770D4D8DAD24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/A509FA9FFA9F53D84F058F7156C291C01AD37130.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 14:15:24 +0000
Certificate not after:    Mon 24 Feb 2025 14:20:24 +0000
Subordinate resources:    AS: 263024
                          IP: 186.249.80.0/20
                          IP: 2804:a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:16:53:81:13:96:2e:d6:88:60:1a:e4:d5:53:77:0d:4d:8d:ad:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 14:15:24 2024 GMT
            Not After : Feb 24 14:20:24 2025 GMT
        Subject: CN=A509FA9FFA9F53D84F058F7156C291C01AD37130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:d5:4c:bc:c6:ed:29:58:21:bd:a6:50:e9:
                    88:9f:bb:5b:c3:bc:e5:dc:e0:c4:67:cd:fc:f0:e7:
                    4c:53:64:b9:71:7b:0f:83:40:8a:a8:91:b4:e3:53:
                    8a:02:19:fd:4c:f6:37:ae:2c:f3:12:ed:6d:77:d1:
                    62:fe:e0:b8:6e:41:9a:9c:9f:e9:b3:44:a1:9b:27:
                    2e:ca:39:2e:ca:33:7c:5d:c0:c5:5d:2a:65:92:6e:
                    2f:90:c6:d8:7b:27:53:67:9f:73:a1:53:83:71:f3:
                    a6:95:5c:c8:6e:8d:a5:c6:d9:4d:19:f2:b8:87:49:
                    cb:88:51:a6:b0:4f:f4:06:89:6e:16:a1:8e:aa:5a:
                    61:4b:01:5e:67:ca:e8:59:ad:6b:b9:ab:a9:38:4c:
                    fd:72:54:77:23:c6:8f:dd:74:14:00:55:95:49:db:
                    d7:f0:5a:73:4d:d0:b1:a9:36:51:1c:22:6c:26:70:
                    46:e0:4c:56:d0:09:5f:4a:48:af:25:52:14:c3:6f:
                    39:83:2e:a2:98:8b:0e:18:4f:0a:fa:ee:99:b4:b5:
                    fa:f1:d0:e2:34:d9:06:cb:e7:dc:0b:cf:35:59:ad:
                    4d:47:c4:10:b5:ef:d6:71:b7:3b:47:89:e0:9e:62:
                    aa:3a:a2:46:90:5a:26:2b:5c:7a:5c:09:79:3e:fe:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:09:FA:9F:FA:9F:53:D8:4F:05:8F:71:56:C2:91:C0:1A:D3:71:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGz2CgWnBUbtewGZwfdnkktpcT8FvTBmW7trcpFC1dZ/0/A509FA9FFA9F53D84F058F7156C291C01AD37130.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.80.0/20
                IPv6:
                  2804:a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263024

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:c8:c8:de:8b:b9:95:eb:59:1c:fd:87:6d:35:e3:94:12:
         bc:57:bb:2f:ab:d3:c1:4a:f3:00:0e:27:2a:db:53:e4:11:17:
         9f:90:1b:d0:4b:17:11:de:30:47:23:34:cb:6f:01:3e:83:33:
         05:ec:16:b5:1b:7b:f6:6a:d8:27:18:93:c6:06:08:2c:18:77:
         11:50:41:f4:e1:f7:68:c5:b7:72:e7:27:b0:4b:7f:12:a6:7b:
         5b:f5:a1:f2:c5:98:8c:96:36:46:fd:61:b9:58:6b:a4:5f:12:
         fa:2f:37:64:7e:41:da:90:d5:d6:74:4c:5d:aa:84:dd:f9:5c:
         77:3e:93:bd:dc:a5:9e:e3:bc:6d:21:de:6f:d2:1e:d7:8d:45:
         09:8d:b9:ec:18:28:80:fb:f1:af:88:1c:a0:04:0d:ea:fb:39:
         99:64:4d:fe:b9:65:6d:8f:4f:09:f0:c7:35:6f:56:c9:ca:38:
         05:74:6b:9a:5a:6b:7c:8c:94:10:6f:0a:81:a0:50:23:47:cf:
         ae:ba:35:bf:a9:b3:55:6d:18:7e:38:c9:7b:30:9e:5b:1c:78:
         11:ea:12:ad:39:45:f4:59:69:b8:0a:bf:17:69:54:72:c0:49:
         9d:3f:ab:be:c9:9c:45:1d:f7:82:cf:45:7a:0f:b9:69:f0:ca:
         45:74:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org