Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
File:                     C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer (raw, json)
Hash identifier:          JpYoauTd/PPaqy6aar9jao/yqGH70RWJdPJpkyrqZyc=
Subject key identifier:   C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E53E628A455D5B0631FF8A8B2CF254D649A3551
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 14:05:48 +0000
Certificate not after:    Wed 26 Feb 2025 14:10:48 +0000
Subordinate resources:    AS: 262532
                          IP: 128.201.120.0/22
                          IP: 177.55.240.0/20
                          IP: 186.249.176.0/20
                          IP: 2804:ec8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:53:e6:28:a4:55:d5:b0:63:1f:f8:a8:b2:cf:25:4d:64:9a:35:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 14:05:48 2024 GMT
            Not After : Feb 26 14:10:48 2025 GMT
        Subject: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:01:b1:a2:b8:1c:b8:cd:50:66:58:bf:e1:
                    74:22:ae:c7:94:f7:f3:b5:fb:a6:b8:fc:0f:8a:03:
                    65:0a:7d:40:be:2b:8f:22:90:aa:3a:07:7e:ad:da:
                    e3:37:84:12:f9:de:a3:f4:ac:c8:76:bb:c3:33:63:
                    33:d7:ff:77:8c:ac:6e:34:e0:a2:36:4a:2f:3c:bd:
                    7e:84:a9:14:21:fe:f4:ba:5c:aa:91:92:12:03:e0:
                    b5:5a:c4:d4:b9:a6:98:18:8e:15:1a:b0:66:0b:9d:
                    30:4c:38:b3:7e:32:e7:9e:1d:69:b7:77:95:63:d6:
                    9c:a8:17:ec:70:ca:ae:43:05:1a:52:0d:8d:af:eb:
                    aa:21:0f:af:36:84:a8:d7:37:51:2d:2e:de:1d:64:
                    34:0c:83:e6:72:fb:88:b4:0e:20:82:12:94:a3:73:
                    77:24:a5:1b:db:db:7b:b1:dd:fb:5f:a5:7e:ce:d3:
                    15:4a:74:75:ae:6c:b9:bc:1c:1a:a5:3f:3b:a6:80:
                    52:38:86:2f:06:16:ae:67:e8:23:69:4e:1b:84:33:
                    6d:cf:1e:57:19:2c:e6:8f:4f:5c:14:61:e1:f0:e6:
                    2b:e8:26:09:64:1a:eb:68:60:bd:ab:40:cb:18:55:
                    20:73:76:00:40:65:9f:f6:fd:a0:6d:ff:d7:68:4e:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.120.0/22
                  177.55.240.0/20
                  186.249.176.0/20
                IPv6:
                  2804:ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262532

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:60:d1:d5:7d:d6:73:42:22:bb:28:a9:a1:7a:42:65:ca:
         02:3c:7a:02:3a:30:53:52:9f:78:83:1f:43:d6:7b:a5:cf:76:
         90:08:e6:8e:af:22:36:40:60:45:82:ab:1c:a4:d7:f3:29:5d:
         ae:e0:d7:23:82:83:bf:89:14:4a:41:27:a0:24:72:da:96:93:
         b3:a4:71:39:1e:2c:9e:63:89:38:6c:da:66:57:98:53:f1:73:
         72:f5:63:6c:dc:49:49:19:19:3f:79:36:a3:39:1f:3b:12:48:
         52:aa:13:ab:41:70:10:df:4a:3a:44:70:9b:a6:56:6b:d9:ad:
         a6:ad:60:69:bc:92:cf:f5:8a:7c:59:66:fa:3a:47:9a:af:ac:
         d8:cf:2c:32:d2:35:aa:9d:00:ce:ac:72:96:0a:a0:3b:19:e4:
         4b:fb:cc:ae:a4:a6:26:41:0e:21:49:bd:a7:08:d7:15:3f:b8:
         07:66:30:59:8d:2a:20:90:42:fd:15:4c:01:62:5c:d6:0d:0b:
         21:f7:ca:01:d5:16:1e:79:76:a9:0e:34:49:1f:ea:6f:f2:a0:
         21:38:5e:a0:18:70:c8:be:9f:ec:33:99:f8:31:fc:36:15:9f:
         62:00:b2:75:fb:0c:68:4c:70:f5:ee:e8:b0:5d:c0:2b:65:fe:
         0c:36:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org