Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.cer
File:                     A96E260C23174D36DD4710A93B917F2DDF7BF23A.cer (raw, json)
Hash identifier:          /KEI50Cj9sMkfXb3WwZ+wNv4fOLGlznC7Rhcoo0+dCQ=
Subject key identifier:   A9:6E:26:0C:23:17:4D:36:DD:47:10:A9:3B:91:7F:2D:DF:7B:F2:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18B4614CE4BCFC2F2E753669789C28778B55990A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 19:44:32 +0000
Certificate not after:    Fri 07 Mar 2025 19:49:32 +0000
Subordinate resources:    AS: 272626
                          IP: 2804:862c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b4:61:4c:e4:bc:fc:2f:2e:75:36:69:78:9c:28:77:8b:55:99:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 19:44:32 2024 GMT
            Not After : Mar  7 19:49:32 2025 GMT
        Subject: CN=A96E260C23174D36DD4710A93B917F2DDF7BF23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:eb:60:d0:30:d4:15:a4:c1:23:28:4f:07:ad:
                    3a:a2:a9:e3:6d:3b:89:3c:b9:f3:94:0b:d6:53:80:
                    ec:82:da:14:ab:e6:48:66:85:76:db:d0:da:26:6e:
                    10:c0:f2:d2:ff:b1:5e:99:65:2c:cd:75:2d:2d:30:
                    77:0d:20:76:99:fc:fa:7f:72:cc:03:25:69:76:e6:
                    4f:40:20:16:47:16:8b:5b:fc:ec:1d:8c:52:40:f9:
                    0e:30:54:c4:43:5b:00:3a:3c:d3:5c:cd:75:74:a9:
                    36:fe:a7:d2:25:4f:dc:84:a4:ac:23:38:77:53:5e:
                    93:f5:ff:1f:a9:0d:aa:dc:dc:fd:79:0b:bb:b7:90:
                    8a:d9:ef:cb:6a:f9:b4:bb:b8:94:42:94:36:6a:82:
                    46:b6:e9:94:f8:a8:a4:2c:8b:2e:95:7d:f0:e0:e7:
                    95:1f:0a:e1:b8:4b:01:64:8b:a0:66:3f:44:ec:6c:
                    e8:19:e8:aa:06:d3:23:7d:ab:8c:62:87:a4:e0:f8:
                    e0:1b:fa:31:e4:55:5b:02:5a:0d:5e:5e:a5:c6:07:
                    e0:d6:12:56:fb:e3:1f:69:4d:29:33:38:0d:2d:96:
                    67:ac:74:af:a7:5a:82:4e:c4:d8:f1:43:43:d8:aa:
                    fd:e4:a0:74:19:16:ad:8a:d9:02:0c:ee:b8:b1:cc:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:6E:26:0C:23:17:4D:36:DD:47:10:A9:3B:91:7F:2D:DF:7B:F2:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:862c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272626

    Signature Algorithm: sha256WithRSAEncryption
         29:ca:bb:bc:b0:aa:e1:cb:2c:e5:75:45:e3:21:c3:ee:5c:82:
         ee:b7:64:20:c6:9c:e9:be:59:0d:12:81:9c:94:a6:1f:5f:e9:
         2b:59:db:9a:a4:d4:ee:a3:01:f0:16:9f:ec:56:1a:b5:c8:99:
         47:3d:47:51:3f:f9:4e:9c:f6:d3:4d:95:27:ea:aa:d8:b1:bb:
         56:dd:50:84:d2:b0:3e:da:38:3b:5e:7b:23:17:cb:92:83:3f:
         38:a4:32:be:d7:8f:9f:ee:92:9d:a2:f3:0f:08:43:05:a5:1f:
         43:cc:ca:d6:81:7c:4c:ac:06:dc:5c:25:8f:11:b3:d7:b3:4e:
         d8:66:ec:36:0c:6f:36:1c:c0:dc:5c:08:72:d6:25:ae:69:06:
         59:af:ee:73:86:d8:26:b5:bc:2d:14:2a:b7:37:dc:70:85:20:
         b8:5d:ed:7a:4b:d5:bf:bb:e1:76:08:72:ad:45:64:a8:82:6c:
         b5:12:9c:bf:7b:97:8b:91:cf:ac:6a:6e:05:59:0e:0e:f6:e1:
         0b:7a:a2:7e:a8:53:b3:9c:05:cc:07:8b:62:91:d0:60:fd:49:
         af:56:05:df:df:b3:f8:18:4e:a1:e2:53:fa:01:c6:6d:21:01:
         8d:36:f3:0f:a5:e5:93:19:c5:34:37:29:2b:aa:98:b5:71:18:
         65:45:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org