Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.cer
File:                     B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.cer (raw, json)
Hash identifier:          SIH8iaRWQKDSp8NNoWhzINPZvyTK8/KcVuPQr4aoQR8=
Subject key identifier:   B9:DA:E9:5F:39:B5:4B:48:DC:39:9B:CD:F6:93:0D:13:C6:AE:C2:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A8B4964855E0D070ACED92400E4B2DD10AE4BF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 20:14:57 +0000
Certificate not after:    Tue 18 Mar 2025 20:19:57 +0000
Subordinate resources:    AS: 273458
                          IP: 2804:8ef4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8b:49:64:85:5e:0d:07:0a:ce:d9:24:00:e4:b2:dd:10:ae:4b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 20:14:57 2024 GMT
            Not After : Mar 18 20:19:57 2025 GMT
        Subject: CN=B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:fb:87:ae:93:24:23:a5:3a:b2:d7:6d:73:
                    5f:33:42:d5:f9:6d:2b:5a:d9:c8:c2:c1:40:fe:ec:
                    7a:05:95:d9:de:f7:ec:e2:94:7d:38:be:86:7e:12:
                    fd:33:5f:93:01:a5:9b:a5:b5:00:ad:38:ac:44:d3:
                    4d:78:21:c7:d5:2d:e7:3f:82:19:32:ce:60:0b:45:
                    c1:4a:3e:d1:59:b8:83:b0:2a:ec:74:ad:81:95:ed:
                    84:04:44:38:0e:ec:17:9c:c4:c6:8b:04:be:70:72:
                    bc:49:5e:c5:71:27:d8:b1:86:7c:56:31:67:f4:f9:
                    29:18:dc:be:19:90:8c:01:e9:34:80:36:56:1e:2e:
                    19:cc:05:3e:6b:6a:a2:63:8c:9c:53:6c:3e:fb:3d:
                    3e:f9:8c:e9:f4:24:1c:53:79:33:b2:a5:80:21:e6:
                    b2:4f:58:4c:6b:91:c8:30:c1:4f:b4:f7:31:38:db:
                    0d:b4:8c:d7:8c:64:9b:8d:fa:c7:0f:ee:46:6d:65:
                    b7:ff:56:a6:e2:21:54:c9:8c:d4:b0:fb:c1:4c:58:
                    50:a7:7a:5e:ac:3f:d5:96:d4:a5:0d:09:4b:32:24:
                    e8:fb:79:13:77:5f:cb:c8:02:e7:24:b0:f7:65:bc:
                    2d:4c:88:1f:8e:16:ff:4d:f4:15:30:ce:27:47:eb:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:DA:E9:5F:39:B5:4B:48:DC:39:9B:CD:F6:93:0D:13:C6:AE:C2:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273458

    Signature Algorithm: sha256WithRSAEncryption
         56:2a:9f:e3:6c:7d:78:2c:6d:c6:70:9f:90:12:a7:ea:32:41:
         7d:5c:e2:00:2e:e6:03:75:c1:24:eb:24:a1:22:fc:c6:51:ba:
         1a:a2:4f:9b:f0:12:1f:cc:a8:2b:1e:42:54:60:43:10:5d:a3:
         d4:fd:78:2a:e6:73:8e:fa:a7:43:f7:e9:8e:0d:1e:9f:fe:a7:
         4a:64:7f:b1:cb:7c:7b:21:0a:ec:fb:01:14:bf:96:5b:c0:21:
         25:2a:86:f8:f4:fa:4c:39:a4:89:2c:52:dc:2f:58:76:ad:35:
         33:12:93:ad:01:3a:5c:c5:03:6d:45:89:6e:c5:68:56:13:f9:
         a1:24:d5:92:1f:86:24:d6:57:61:49:f9:d6:0a:af:7a:a1:99:
         23:b8:5f:a9:6c:7e:a7:62:52:9b:d5:56:25:bc:10:0a:96:5f:
         3d:54:00:ad:a6:e2:03:91:da:6d:b6:1c:b4:16:a6:ba:c5:16:
         1f:aa:20:33:f6:31:ba:88:80:b3:35:dd:d2:d4:df:25:33:09:
         c8:05:8e:aa:e9:14:9c:cb:4e:3f:df:c1:d9:d8:5c:74:19:e0:
         4e:d0:7d:66:99:0b:81:9d:10:3e:c9:e0:b4:be:c5:93:27:3f:
         b1:ec:9b:b8:a6:4a:4e:b3:8f:88:08:c5:c0:12:b2:82:84:49:
         fb:c7:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org