Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
File:                     C9993E4E7A469482F48DE6C557C1BE415E192A34.cer (raw, json)
Hash identifier:          MuW60DnArxUDbe/+S48X8F4TKzLLdPtz7c/S4yd9OPk=
Subject key identifier:   C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       282E85FD12BCEC37ADD240F47EEFD7279BECB30E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 13:45:16 +0000
Certificate not after:    Wed 26 Feb 2025 13:50:16 +0000
Subordinate resources:    AS: 267420
                          IP: 45.235.160.0/22
                          IP: 170.231.208.0/22
                          IP: 186.209.123.0/24
                          IP: 186.209.222.0/23
                          IP: 2804:4d3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:85:fd:12:bc:ec:37:ad:d2:40:f4:7e:ef:d7:27:9b:ec:b3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 13:45:16 2024 GMT
            Not After : Feb 26 13:50:16 2025 GMT
        Subject: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:53:19:57:81:b2:2a:5d:aa:74:fe:f4:4b:
                    ac:47:37:98:fe:a9:34:e6:70:3e:71:e3:89:56:21:
                    cd:03:2b:62:ea:38:ed:bc:58:5d:74:84:91:de:02:
                    15:36:27:1a:d9:13:01:65:0e:0b:0c:4b:2b:9c:2d:
                    32:b4:40:12:ac:18:ad:43:42:4c:f3:60:ca:96:c6:
                    92:19:f3:36:fa:ba:7f:69:e3:df:3f:35:c9:00:f9:
                    8e:5b:29:41:4d:be:c3:17:59:84:60:5a:5c:6b:fd:
                    17:40:6e:c4:ca:72:b8:49:01:fa:75:ef:70:4f:3c:
                    e6:f9:67:bb:b1:9e:42:92:a0:16:32:67:0b:27:98:
                    5e:3d:a6:b9:b9:d8:f2:6b:66:27:c5:05:a2:16:d3:
                    64:b5:d3:9a:b0:cd:32:bc:f8:25:9a:d8:bc:a8:55:
                    27:7d:6b:6b:9c:25:44:8f:5d:3c:a4:31:18:7e:6c:
                    ad:d5:05:94:bd:81:37:86:91:a5:86:a8:77:1b:66:
                    f7:6b:53:10:87:0f:4d:32:eb:cf:76:72:89:ac:9e:
                    27:07:d0:b2:03:84:03:2b:48:11:2b:cc:47:d1:5e:
                    1a:6d:eb:ea:02:3a:d6:9f:82:f5:d2:5c:f4:c9:a2:
                    b4:f4:d0:50:3b:8b:40:3e:8b:06:5d:60:6f:58:62:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22
                  170.231.208.0/22
                  186.209.123.0/24
                  186.209.222.0/23
                IPv6:
                  2804:4d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267420

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:6b:5d:c7:48:91:c4:75:55:44:2a:0c:8e:62:e9:21:e0:
         5c:b9:47:40:6a:e2:12:e0:47:2d:01:a0:a4:92:f0:6b:78:c2:
         ae:44:80:68:50:3f:5b:31:47:91:e5:3c:7f:dc:8f:c4:15:72:
         f9:16:9e:cc:39:b7:7f:7b:05:4d:7a:cf:7d:f3:35:81:e0:b3:
         7c:23:8b:c1:56:84:1d:4d:16:a0:57:b1:04:73:97:16:c9:31:
         ec:58:d4:6f:5b:e6:6a:97:0d:bc:5e:07:53:f9:2d:9c:65:d3:
         a9:0f:ae:fe:5d:ab:cd:02:9a:d5:fe:61:a8:06:ea:cd:56:c5:
         3d:24:98:a7:3a:f4:34:76:24:d6:24:b8:b3:c2:d8:d2:2f:9e:
         c2:db:6d:e2:80:ef:08:db:9e:ef:f7:da:29:39:ac:17:d4:e1:
         6b:56:03:fa:af:40:f3:f2:1b:1f:6c:f5:34:9e:e8:cf:90:cc:
         ee:71:c4:2c:35:07:ac:f4:ad:09:87:92:61:b9:66:bf:a3:e2:
         69:a2:b0:e4:68:6b:b0:b6:44:2b:bb:1a:a2:c8:31:2f:16:2f:
         11:13:1c:dd:85:94:75:fd:39:22:9b:0a:e7:0e:1e:2d:a0:14:
         3f:6d:4c:93:d3:5c:9b:13:e8:80:15:96:48:cc:69:a1:dc:7d:
         a7:de:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org