Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.cer
File:                     C98C64D9AE2B76AE930D9CD40C87D80301EED54C.cer (raw, json)
Hash identifier:          vxtFj1mWSAgslMMbhKflGI3+T9+IjXF0kTzq5g79EHI=
Subject key identifier:   C9:8C:64:D9:AE:2B:76:AE:93:0D:9C:D4:0C:87:D8:03:01:EE:D5:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DFD3390B1C3BD2EF289DA7A5797A64F13490EE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 17:58:56 +0000
Certificate not after:    Tue 18 Mar 2025 18:03:56 +0000
Subordinate resources:    AS: 262565
                          IP: 168.0.140.0/22
                          IP: 177.73.48.0/21
                          IP: 2804:610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fd:33:90:b1:c3:bd:2e:f2:89:da:7a:57:97:a6:4f:13:49:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 17:58:56 2024 GMT
            Not After : Mar 18 18:03:56 2025 GMT
        Subject: CN=C98C64D9AE2B76AE930D9CD40C87D80301EED54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:56:67:c9:03:b2:92:70:e0:df:01:ee:3c:
                    79:8e:73:ad:69:e9:63:b5:c1:a4:09:05:73:53:50:
                    e9:38:dc:e1:ab:1b:7b:b2:a5:eb:64:e7:63:53:72:
                    62:52:3f:31:6a:a0:4b:0a:e5:15:2a:9c:fa:f5:ef:
                    11:35:87:4e:3d:f7:f3:5f:4d:35:bd:65:ae:68:c3:
                    1f:fc:e8:ae:7e:bd:a5:d0:c8:c8:02:fe:d9:28:81:
                    84:a6:ed:52:54:86:b2:61:61:28:ed:bc:f0:74:e9:
                    b9:2a:db:53:3e:5a:d9:93:4c:2c:02:96:a5:98:dc:
                    4f:6b:76:d8:26:ca:b5:4f:26:78:79:69:4f:b1:f8:
                    5d:87:9a:f0:6a:b1:b7:e5:b4:05:ef:24:c7:89:30:
                    25:f4:25:7a:a3:02:bf:1b:86:5e:a2:0d:04:4a:3f:
                    50:43:64:1a:ab:3c:c8:50:b6:5b:c1:bb:38:40:67:
                    f4:54:52:7c:27:fb:61:d8:f1:4f:d6:a2:16:76:51:
                    33:c0:bf:e8:ad:ee:fd:7b:83:be:7c:ed:be:f6:e3:
                    a6:b5:2d:24:e1:95:69:5a:bc:c7:7e:d1:ac:39:39:
                    7b:3c:00:f1:b3:08:dc:08:a0:76:ce:39:38:48:36:
                    2b:e7:77:1c:a3:5e:3d:94:11:8e:08:04:e6:69:d4:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:8C:64:D9:AE:2B:76:AE:93:0D:9C:D4:0C:87:D8:03:01:EE:D5:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.140.0/22
                  177.73.48.0/21
                IPv6:
                  2804:610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262565

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:e3:da:e7:9e:79:3f:64:32:32:ba:bb:63:33:5e:57:8d:
         5a:58:b1:e0:1b:57:80:2a:87:8b:32:da:e0:e3:f8:92:06:c2:
         23:d6:26:14:2b:e3:ac:68:4a:d4:6e:2b:46:1f:d8:db:80:86:
         63:e6:7e:76:94:bd:ae:6b:0d:df:4c:a2:65:6e:78:72:10:22:
         1e:7b:77:b1:25:85:67:d1:43:cd:1b:cb:dc:20:94:a9:d7:db:
         76:96:32:95:ca:82:5f:62:83:99:20:16:df:d1:06:50:fe:0e:
         e8:20:bc:0b:63:4d:f8:65:3e:f1:5a:8a:50:be:c2:7f:94:e0:
         df:fa:db:7c:54:c7:73:3d:da:c2:63:63:d4:fb:fc:a4:30:02:
         55:61:64:ec:12:ed:3e:c7:fb:9c:b0:1d:60:99:cd:5e:14:29:
         91:fb:cd:0e:03:fb:33:1d:5b:d6:15:0f:62:c3:d1:c6:cf:55:
         01:dc:42:1c:13:3b:1f:13:43:2a:06:67:2a:a6:4f:24:a6:e8:
         b8:77:5b:e9:36:5f:16:43:00:a3:4e:43:e3:a2:bf:fb:a6:f7:
         f4:fc:1e:df:61:56:d8:ec:48:6e:fe:5f:58:5e:57:97:4a:61:
         72:33:de:75:4c:60:66:3a:e6:dc:df:0b:6f:88:84:30:9a:b4:
         50:bd:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org