Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.cer
File:                     C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.cer (raw, json)
Hash identifier:          RtUx9zMDKnzjpAgaBE3yeJKbMuwOk0XIK7ff0K7fzic=
Subject key identifier:   C9:93:0A:AA:CF:A8:88:D4:80:AE:8B:38:75:C4:B4:F4:DE:61:2F:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       056888BBD888D7AEE19ED887226320D8266F11B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 23:08:51 +0000
Certificate not after:    Thu 23 May 2024 23:13:51 +0000
Subordinate resources:    AS: 269329
                          IP: 45.184.128.0/22
                          IP: 2804:62f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:68:88:bb:d8:88:d7:ae:e1:9e:d8:87:22:63:20:d8:26:6f:11:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 23:08:51 2023 GMT
            Not After : May 23 23:13:51 2024 GMT
        Subject: CN=C9930AAACFA888D480AE8B3875C4B4F4DE612FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:20:2a:a2:6e:3b:80:ef:c9:bd:80:34:ad:
                    a2:94:31:8b:b0:c7:34:b6:eb:88:92:1f:45:2b:64:
                    52:6d:14:80:82:3a:78:6e:d4:96:d8:a5:95:ff:79:
                    7e:1d:29:d4:4d:5f:7e:24:43:fe:a1:e7:be:47:c5:
                    4f:6b:6c:4f:bf:39:e1:ed:85:67:f3:e9:09:29:03:
                    ce:6b:ab:f5:2a:37:95:4e:ad:a2:c7:42:b8:7c:3a:
                    ec:5d:7e:b1:e6:c1:0d:6e:aa:d2:68:ff:3e:60:b8:
                    10:60:0b:51:9c:d5:d3:47:f1:03:29:96:b7:9c:15:
                    22:90:9a:e8:cc:07:a9:ff:7d:0c:0e:15:9c:fb:33:
                    e0:67:48:e1:af:ae:94:c8:0e:10:d1:94:66:ec:9c:
                    af:1e:38:d4:8b:d7:5b:f5:6e:45:52:3f:93:67:58:
                    f2:7a:39:b2:a7:6b:1b:ff:f3:93:a8:a8:c7:72:6f:
                    62:5c:ec:0b:72:af:c0:de:f4:4b:64:f7:fd:e1:df:
                    d1:ea:99:a2:62:29:a0:3b:c5:52:c0:f0:96:4d:18:
                    47:ab:f5:0e:55:4a:93:76:1d:04:e7:98:57:fe:36:
                    8d:d3:c5:4e:72:cc:e2:da:03:59:a7:a4:1c:42:9c:
                    c0:fd:d0:f6:b7:5b:95:1d:b7:8e:18:c5:5b:f5:22:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:93:0A:AA:CF:A8:88:D4:80:AE:8B:38:75:C4:B4:F4:DE:61:2F:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/C9930AAACFA888D480AE8B3875C4B4F4DE612FB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.128.0/22
                IPv6:
                  2804:62f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269329

    Signature Algorithm: sha256WithRSAEncryption
         67:19:1c:41:05:e5:19:b5:68:c1:99:8f:39:ea:e1:5f:3d:56:
         ca:40:9e:88:50:1a:53:48:68:df:5f:79:09:cb:7a:04:c5:13:
         6a:be:a2:f3:c1:6f:06:f8:e4:79:0e:f9:b4:00:d0:68:a1:19:
         8a:19:61:16:b9:c4:22:a3:dd:5e:e9:c3:5a:74:35:91:23:3a:
         af:ea:43:1e:ab:c1:3c:a0:6f:0c:be:21:73:0b:af:f3:c2:f3:
         4f:78:29:47:02:be:06:75:5d:5b:da:9a:52:85:76:c0:32:a9:
         23:60:6b:62:17:8e:44:c2:00:31:89:ce:19:1d:80:f8:b3:fa:
         c2:41:ea:29:68:3d:39:56:37:62:d5:9e:33:56:31:b6:5f:7e:
         e2:d4:84:0c:19:d5:be:40:ea:bc:cf:5f:ac:8d:85:59:de:94:
         2e:c2:ab:bc:d2:88:b6:b9:f8:81:7a:05:49:0a:ee:ec:e9:d4:
         84:86:24:61:b7:7f:34:2d:cd:12:3b:e1:65:89:87:c0:db:6e:
         04:a7:bf:c2:f0:57:00:db:7c:ea:8a:78:d7:1a:14:b7:bd:0f:
         f4:24:8e:9c:01:31:4a:11:3c:ba:cc:8a:17:fa:04:9d:0a:f8:
         96:2b:15:e9:ef:96:a6:43:f2:f6:0c:d4:72:97:f0:a1:d9:90:
         38:98:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org