Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.cer
File:                     B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.cer (raw, json)
Hash identifier:          oZ2Xa1sWiXwN7MZ1h51Ky9gGMxWSW+Y3MnT5bei+fms=
Subject key identifier:   B9:00:0D:C5:D2:43:46:98:CC:43:B7:C6:AB:8A:3A:C9:18:F0:49:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       232CC55DAFFD401DEE6DEDBD427BF44DE6C4BB88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 18:36:02 +0000
Certificate not after:    Thu 14 Mar 2024 18:41:02 +0000
Subordinate resources:    AS: 273681
                          IP: 2804:8aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2c:c5:5d:af:fd:40:1d:ee:6d:ed:bd:42:7b:f4:4d:e6:c4:bb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 18:36:02 2023 GMT
            Not After : Mar 14 18:41:02 2024 GMT
        Subject: CN=B9000DC5D2434698CC43B7C6AB8A3AC918F049B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:76:d4:2f:2b:79:ce:a9:53:4e:3c:b4:87:
                    0e:96:6f:1b:aa:73:02:b7:09:e1:9f:c8:b6:91:8a:
                    b2:64:55:f2:b5:f2:c8:dc:fd:e2:cf:52:da:8a:08:
                    7e:76:8a:c0:d4:16:5f:46:3d:0f:7c:66:75:a8:d7:
                    a6:8f:e9:60:4b:2a:e4:71:e4:59:6f:64:85:dc:b8:
                    aa:0a:a0:cb:d5:ce:80:fe:83:2c:08:44:4b:4a:19:
                    d6:9c:6a:aa:fb:e6:a1:ee:df:ec:e3:eb:8b:27:a1:
                    55:c1:38:bd:c0:cb:6d:1f:4d:ad:49:b8:7b:26:e4:
                    d5:32:a3:23:be:57:4e:81:22:72:cc:67:38:0c:0c:
                    22:1b:a9:ca:74:ca:02:74:56:95:d2:8f:69:ca:e9:
                    51:5e:64:ef:70:84:fb:25:94:a6:3d:68:63:ec:76:
                    b2:8c:2d:5a:d9:f0:e7:3b:91:7b:07:73:68:33:fc:
                    24:3b:85:9b:6a:35:b2:7c:92:8a:bf:57:50:93:15:
                    4a:75:64:2e:1b:8a:c5:c5:e8:be:48:f6:2c:df:84:
                    64:28:eb:96:e5:a5:23:42:c1:0d:be:de:d4:a9:54:
                    56:0d:14:d7:da:5d:75:41:f2:f8:78:af:64:34:6f:
                    cb:36:6d:bd:96:f2:c1:3e:96:6e:eb:0d:b6:42:46:
                    c9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:00:0D:C5:D2:43:46:98:CC:43:B7:C6:AB:8A:3A:C9:18:F0:49:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6pfqq2wVwbgnQMHyJkD3RBCK1FpKuv8RV8M1nfF12mq/0/B9000DC5D2434698CC43B7C6AB8A3AC918F049B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273681

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:df:e3:7d:5a:d2:1e:03:fc:d0:3d:a7:ac:19:86:ed:98:
         fc:64:88:be:a5:c3:b4:e0:80:09:13:0e:d7:d5:f2:41:4d:81:
         6e:1e:67:e2:cd:b9:8d:78:9f:3a:8f:1c:0d:cd:1d:ac:22:bb:
         f9:3e:47:22:b3:fa:fc:28:1b:11:cf:94:3c:77:c2:49:68:7d:
         49:33:15:ec:16:51:19:cb:74:ac:30:a2:4b:38:ec:25:9f:72:
         4e:ab:91:44:9b:68:09:72:73:16:a2:6f:98:cd:28:cd:6d:68:
         23:a7:a4:46:5c:72:47:ff:09:aa:6b:44:1e:cf:a0:0a:30:e5:
         1b:74:7f:83:6a:24:e4:a4:19:17:59:f5:dd:ce:1c:2f:26:38:
         19:87:e4:15:72:1d:0c:e0:2b:2a:ee:20:a6:34:c0:8d:1b:c6:
         36:a5:1f:25:d2:98:35:5f:c0:af:d9:a1:2b:3e:bf:a2:3c:fc:
         a7:f4:2c:da:60:cb:e4:1c:52:9b:2e:2b:a5:93:30:d0:d3:2d:
         43:b3:73:f9:dc:f3:47:58:21:27:b8:7c:5a:fe:cb:28:bb:ef:
         5c:9e:c0:e6:09:0b:da:65:7a:e0:84:81:86:61:12:57:72:96:
         5f:c5:02:cd:0c:c4:e2:a6:14:05:83:9f:d7:af:d9:9e:44:63:
         4e:d7:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org