Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9946F4445E1C2660D7C4658D7DB77F56A4276A8.cer
File:                     C9946F4445E1C2660D7C4658D7DB77F56A4276A8.cer (raw, json)
Hash identifier:          9lWTmoWZLxK7zxnss+dRomdNfcjk/hPu230pjNCt6b0=
Subject key identifier:   C9:94:6F:44:45:E1:C2:66:0D:7C:46:58:D7:DB:77:F5:6A:42:76:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7AD8FD83632D8ED7BEAAC815B024E6F262E82AD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/C9946F4445E1C2660D7C4658D7DB77F56A4276A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 17:10:24 +0000
Certificate not after:    Fri 01 Nov 2024 17:15:24 +0000
Subordinate resources:    AS: 264086
                          IP: 143.208.24.0/22
                          IP: 2804:2aa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d8:fd:83:63:2d:8e:d7:be:aa:c8:15:b0:24:e6:f2:62:e8:2a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 17:10:24 2023 GMT
            Not After : Nov  1 17:15:24 2024 GMT
        Subject: CN=C9946F4445E1C2660D7C4658D7DB77F56A4276A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:10:60:de:c2:3a:85:ca:5d:6f:bb:b8:5f:
                    fa:07:8c:ea:4f:b1:6e:7e:8f:9f:5b:0b:36:61:ca:
                    22:44:bd:a4:22:13:1e:4c:f0:30:cc:00:88:db:9c:
                    3e:45:33:1c:c1:ad:37:69:93:18:72:0c:40:6e:1d:
                    57:fb:1e:b8:ff:98:19:fd:4b:18:73:ea:2e:d7:2a:
                    59:80:9c:48:79:61:4f:3c:4e:7e:ec:e7:79:e0:ce:
                    13:16:dc:1a:77:75:af:fd:d1:45:9a:ae:eb:76:28:
                    51:3b:75:9e:83:c7:bb:7c:28:8e:f1:56:57:ca:ce:
                    d8:c2:02:dc:70:3f:a2:ed:4d:31:1c:dc:ff:e9:07:
                    e0:8d:40:bc:3f:e0:6d:a0:22:a8:16:25:ad:d4:32:
                    af:6b:bb:0a:cc:85:28:11:08:12:07:3e:0f:25:d4:
                    cf:e3:17:3f:ef:c2:21:94:9f:a1:d1:e5:19:25:0d:
                    17:82:bb:54:5c:6a:c0:b0:04:93:61:a8:c7:ab:aa:
                    6b:43:6e:be:8f:74:fd:db:e2:90:cb:e4:34:0f:d0:
                    b6:3a:c1:40:18:6b:24:53:29:48:8e:06:03:27:5c:
                    29:5c:df:ee:ae:3e:6c:25:9f:db:2f:0d:c9:d7:9d:
                    a6:c8:0d:a5:34:e0:71:6a:9c:5e:7c:d7:a2:97:5b:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:94:6F:44:45:E1:C2:66:0D:7C:46:58:D7:DB:77:F5:6A:42:76:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/C9946F4445E1C2660D7C4658D7DB77F56A4276A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.24.0/22
                IPv6:
                  2804:2aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264086

    Signature Algorithm: sha256WithRSAEncryption
         85:e3:2f:44:88:9d:c7:38:3a:10:61:40:39:01:94:07:d9:43:
         9a:c0:23:6b:51:eb:03:8a:46:9a:e2:08:de:36:38:4d:2b:f8:
         f0:e1:21:02:9c:e1:4b:29:2f:a2:6c:cc:12:fb:c5:bd:d6:07:
         1b:b3:75:fd:c3:e8:f3:27:03:d3:19:e6:f5:78:67:30:7a:53:
         fd:0d:89:de:12:9f:5a:cc:29:d6:fa:6d:70:08:fd:ba:82:22:
         d1:30:29:de:4e:33:c7:62:00:6b:c3:64:d5:3c:ab:4c:9a:85:
         01:64:5a:06:e6:79:17:63:c6:6c:65:63:49:81:15:07:b9:94:
         a1:40:47:b6:0b:a2:05:96:ab:1f:31:98:2d:7a:bd:89:66:5c:
         0d:cd:54:fe:89:7e:b7:09:00:a2:d7:2c:1f:28:79:33:5c:bd:
         84:f0:64:5d:fc:88:bf:57:34:1a:cc:a3:4b:72:32:53:7e:86:
         ad:91:96:13:37:d7:44:2f:2e:3f:6a:2b:ec:c6:b3:3c:5d:92:
         10:68:36:b3:6f:a9:d3:a0:09:25:72:db:e3:5b:f1:45:d3:d8:
         79:01:29:87:8b:cf:ef:4f:99:16:d0:14:3c:28:88:a2:32:97:
         bd:00:49:0e:d8:ae:02:b1:7b:22:c2:6f:f1:56:28:88:6e:45:
         9b:8e:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org