Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A9976A183C148AC3A8D9ACBD166A1D3F1EA93741.cer
File:                     A9976A183C148AC3A8D9ACBD166A1D3F1EA93741.cer (raw, json)
Hash identifier:          eb563DxsQAcIN13ondwDsC7vLsYMAb8C7RwsN2VAUpA=
Subject key identifier:   A9:97:6A:18:3C:14:8A:C3:A8:D9:AC:BD:16:6A:1D:3F:1E:A9:37:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E36A47444EAFF3CE6C02CC3C176F2FDA66D82AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A9976A183C148AC3A8D9ACBD166A1D3F1EA93741.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 00:36:39 +0000
Certificate not after:    Fri 28 Feb 2025 00:41:39 +0000
Subordinate resources:    AS: 28260
                          IP: 177.130.0.0/20
                          IP: 186.193.240.0/20
                          IP: 187.16.240.0/20
                          IP: 187.95.32.0/20
                          IP: 2804:28e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:36:a4:74:44:ea:ff:3c:e6:c0:2c:c3:c1:76:f2:fd:a6:6d:82:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 00:36:39 2024 GMT
            Not After : Feb 28 00:41:39 2025 GMT
        Subject: CN=A9976A183C148AC3A8D9ACBD166A1D3F1EA93741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:87:63:29:a2:5a:bd:d3:36:6d:c3:00:a3:
                    0a:ce:32:9e:39:1d:cc:35:7d:01:cd:cd:2a:26:ac:
                    e9:57:c4:bd:97:5b:45:9b:a8:39:4e:fb:0b:49:74:
                    39:bb:1b:68:98:04:1d:87:25:a9:e4:5f:33:c0:91:
                    8d:c6:7a:1c:ff:84:26:ae:18:e4:72:38:4f:3d:6f:
                    d1:ea:40:ef:ae:50:69:0c:8d:2d:a1:db:76:69:f1:
                    61:4e:c3:8b:ce:8a:73:e0:43:1f:6c:49:54:9a:c3:
                    57:b0:2b:f4:e5:6a:d9:1c:db:82:2c:4e:c0:41:72:
                    bc:a2:19:f9:13:c7:22:b6:6b:cd:c3:45:d6:33:6f:
                    f8:30:72:a0:2d:50:78:e4:c6:95:f4:86:db:6c:ba:
                    80:04:09:f6:42:21:15:d9:b5:41:af:e2:43:18:b7:
                    58:c9:ec:95:17:c7:c0:86:e1:ee:34:6f:23:a1:07:
                    73:8b:0a:13:25:5f:6c:56:81:03:cc:e0:4d:b9:14:
                    aa:a0:1d:25:66:87:2f:d7:0d:87:c1:ec:ee:74:08:
                    e1:a4:f7:c5:5b:ec:e8:9b:0b:53:17:6e:39:44:49:
                    c1:8d:97:bd:34:4b:48:06:86:7a:09:2f:b9:5e:2a:
                    b0:a1:09:b9:48:fa:fa:b5:ac:60:f9:90:b7:66:f4:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:97:6A:18:3C:14:8A:C3:A8:D9:AC:BD:16:6A:1D:3F:1E:A9:37:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A9976A183C148AC3A8D9ACBD166A1D3F1EA93741.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20
                  186.193.240.0/20
                  187.16.240.0/20
                  187.95.32.0/20
                IPv6:
                  2804:28e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28260

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:73:3e:2c:6b:53:15:8b:f5:42:12:23:ff:8b:e6:02:13:
         6a:27:c0:5d:9c:b0:fa:0d:15:95:77:55:d3:3b:fe:34:35:da:
         7d:e9:7c:11:e9:51:0b:f8:17:1e:a7:03:52:79:b7:c7:0a:39:
         ad:ef:b3:42:69:2a:07:77:ce:22:bf:c7:85:1a:07:59:83:d3:
         11:55:f7:56:26:15:c9:68:7c:d6:0e:27:32:5b:c5:6d:a1:a5:
         6d:fe:3c:e5:07:ec:d8:c3:8f:22:91:10:3b:18:c3:15:16:32:
         c2:db:31:80:85:b2:44:49:76:e0:16:63:e9:05:9e:a6:fb:c3:
         2b:7a:2b:0a:e7:aa:b0:44:1e:49:76:f2:1c:dc:27:de:92:d7:
         4c:04:cb:20:d4:b4:5c:4c:e0:c2:e6:cd:eb:61:e1:60:9f:00:
         05:4d:bf:1a:6e:7e:3a:a8:93:87:8e:98:be:53:ac:4d:b7:61:
         80:ae:bf:8f:9a:d3:13:77:af:4f:dc:de:4b:8f:3c:63:ce:5b:
         d3:61:e6:26:f4:6a:70:5f:45:a4:36:92:c7:e9:14:23:56:4f:
         2f:da:18:fe:d6:42:33:74:54:8f:dd:19:30:e9:51:1f:a6:fe:
         dd:5a:82:bb:b0:34:d2:18:ad:16:1f:9a:46:bd:64:69:24:fd:
         e6:ea:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org