Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.cer
File:                     B9095BB2B66362B38306199DFC51A80D9FFFA04A.cer (raw, json)
Hash identifier:          EVUlwDrA9Cf1c7/8pIpAh6eua/hZMJPYkVDgTT0qxvY=
Subject key identifier:   B9:09:5B:B2:B6:63:62:B3:83:06:19:9D:FC:51:A8:0D:9F:FF:A0:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AB21137B79233669C4EB2FFB535CB134E7EA86A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Dec 2022 13:21:23 +0000
Certificate not after:    Wed 27 Dec 2023 13:26:23 +0000
Subordinate resources:    AS: 262607
                          IP: 131.108.12.0/22
                          IP: 170.150.0.0/22
                          IP: 177.85.112.0/21
                          IP: 2804:6cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b2:11:37:b7:92:33:66:9c:4e:b2:ff:b5:35:cb:13:4e:7e:a8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 13:21:23 2022 GMT
            Not After : Dec 27 13:26:23 2023 GMT
        Subject: CN=B9095BB2B66362B38306199DFC51A80D9FFFA04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:fa:9d:e1:2a:b4:43:94:0d:e1:a2:21:87:
                    5f:58:35:a7:f9:c4:2f:84:16:f5:89:fb:92:b6:7e:
                    40:1c:bf:6c:97:13:5c:a1:81:a2:da:aa:ef:63:87:
                    83:00:a2:2b:70:ea:cf:03:e0:41:45:02:ad:4f:00:
                    3f:5a:11:42:1e:b9:c4:a6:a3:00:1a:53:36:8e:8f:
                    da:36:a9:df:3c:07:90:ec:44:6d:f2:71:54:b1:a6:
                    34:b0:29:cc:12:0a:d1:be:d1:51:5f:85:62:05:d2:
                    29:d8:3d:14:a4:80:55:58:fb:e7:79:57:29:fa:b5:
                    43:16:5d:b1:08:7f:d9:c4:18:d5:bc:e1:93:a3:87:
                    77:27:8b:13:ba:70:5e:45:b1:33:92:19:8f:4e:48:
                    f6:e1:ef:a2:93:d9:e1:36:de:cf:0c:bd:36:49:30:
                    15:10:49:23:4d:b6:24:c0:ac:c0:d7:1b:f9:73:ed:
                    e5:6f:f2:bf:90:62:12:0a:be:3f:52:92:70:8f:b2:
                    6a:c3:24:ba:48:24:35:10:4a:d6:ef:1b:e9:7a:bc:
                    e3:a8:ba:83:ea:dd:ba:16:38:b6:4a:90:a8:68:16:
                    fc:c5:c0:e3:2a:a4:34:e4:ba:6c:64:00:70:0f:46:
                    19:82:51:fd:3b:a0:02:77:c7:37:a3:56:b3:15:73:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:09:5B:B2:B6:63:62:B3:83:06:19:9D:FC:51:A8:0D:9F:FF:A0:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/B9095BB2B66362B38306199DFC51A80D9FFFA04A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.12.0/22
                  170.150.0.0/22
                  177.85.112.0/21
                IPv6:
                  2804:6cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262607

    Signature Algorithm: sha256WithRSAEncryption
         79:0c:17:6e:d2:a7:64:d7:fc:c9:fc:b8:0b:3e:19:5c:d3:cd:
         be:fe:dd:e0:f9:9a:66:87:7b:d4:83:b2:c8:a3:57:ed:f4:cc:
         7c:54:38:4a:9e:d9:4c:cd:ef:86:30:f2:95:de:59:24:00:0b:
         87:b5:9a:3b:29:b1:a5:5f:9f:41:8e:cb:63:c2:55:40:38:4d:
         24:ff:56:10:21:c4:c8:9e:6c:c2:40:d8:02:37:b3:d0:47:2c:
         0a:7c:20:ea:ba:c8:2c:2a:59:68:9f:50:5f:f2:b7:fd:29:80:
         4e:36:07:c0:b4:2e:6b:0c:1d:46:2f:ec:40:ff:e5:be:f6:9c:
         7e:2d:12:40:e9:df:97:e9:8f:eb:60:20:1f:0d:f1:f0:d6:32:
         19:6c:c8:3b:ec:89:12:be:8c:07:3a:da:1a:80:58:2a:6c:9b:
         1d:86:fe:b0:96:12:c4:5f:7f:57:11:90:54:6d:91:fa:1e:ff:
         a9:29:76:60:a2:f9:08:ea:a6:14:e8:35:07:66:8a:6f:96:5d:
         7c:29:66:c5:de:b3:7b:11:76:71:10:bf:88:a5:4c:74:55:e9:
         ef:33:6d:73:d4:5a:cf:42:a3:e6:ea:1a:0c:40:3c:48:0b:ff:
         0b:e2:d4:21:60:3d:48:96:57:7c:be:91:0d:b4:23:a2:56:e8:
         87:3f:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org