Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9BCE7ED5329B2924BB6ED82F5127100E496B51E.cer
File:                     C9BCE7ED5329B2924BB6ED82F5127100E496B51E.cer (raw, json)
Hash identifier:          jsjcnbrmsTlLB6q/P1zuDuu50P8o+jMvQJZe7F+0z70=
Subject key identifier:   C9:BC:E7:ED:53:29:B2:92:4B:B6:ED:82:F5:12:71:00:E4:96:B5:1E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4349089FB0603BF4E9830B1F816C4285D828131A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/C9BCE7ED5329B2924BB6ED82F5127100E496B51E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 10:26:05 +0000
Certificate not after:    Wed 04 Dec 2024 10:31:05 +0000
Subordinate resources:    AS: 267351
                          IP: 45.234.4.0/22
                          IP: 2804:4c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:08:9f:b0:60:3b:f4:e9:83:0b:1f:81:6c:42:85:d8:28:13:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 10:26:05 2023 GMT
            Not After : Dec  4 10:31:05 2024 GMT
        Subject: CN=C9BCE7ED5329B2924BB6ED82F5127100E496B51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:10:aa:b3:9f:12:6e:5f:b2:f4:15:aa:9b:
                    7c:ec:d4:47:d4:62:5b:ef:ca:85:15:fb:94:79:c4:
                    d6:08:a7:d5:41:66:a2:f6:a8:9e:2b:16:74:ce:ac:
                    84:fe:19:d1:36:1a:94:f1:4e:a7:80:d5:d6:60:13:
                    05:50:af:73:7c:aa:0f:64:b1:c4:42:78:f3:28:d6:
                    1f:ce:71:22:14:3c:07:7b:87:88:58:fc:52:44:5d:
                    7b:d8:ee:a9:c7:33:12:72:ea:b8:41:22:a1:b6:db:
                    a4:c5:25:c3:8e:fb:c0:1e:9f:d3:43:44:44:b9:e3:
                    63:ed:ae:a7:b7:c3:8d:9b:4c:26:b8:cc:2c:60:30:
                    ef:f4:27:59:31:67:c2:90:be:91:1c:b1:f9:36:93:
                    16:22:ee:d1:a1:bf:d5:af:85:31:54:2f:5f:a1:e3:
                    42:71:b9:b0:7c:b1:a6:d2:a0:48:6d:78:aa:9f:50:
                    2e:ed:95:7e:91:14:fd:fc:01:1a:d3:c0:61:b4:19:
                    eb:5b:68:67:56:6b:d9:1b:a7:e2:be:7c:d0:6e:8b:
                    c6:da:98:bd:18:d1:ad:cf:3c:d9:06:7e:bb:2a:bc:
                    d9:2f:c0:77:2a:d5:dd:91:9a:b1:aa:30:db:55:dc:
                    20:08:23:5f:9f:e5:32:27:64:41:e1:c0:b9:55:19:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:BC:E7:ED:53:29:B2:92:4B:B6:ED:82:F5:12:71:00:E4:96:B5:1E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/C9BCE7ED5329B2924BB6ED82F5127100E496B51E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22
                IPv6:
                  2804:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267351

    Signature Algorithm: sha256WithRSAEncryption
         77:8c:00:3d:d6:a5:0d:76:b7:6f:b8:d4:92:ed:7b:60:ef:7a:
         0f:77:d3:5d:54:c8:3c:b0:94:68:7d:0f:9c:1c:99:e1:77:21:
         32:72:94:c2:99:cc:72:b3:b3:b0:13:5e:24:51:77:84:e2:04:
         ac:36:07:07:1a:a1:4d:6f:b6:b7:66:5e:9f:c2:7f:89:43:dc:
         b5:97:65:0b:ac:6e:88:c2:5c:bb:0d:e2:3c:d3:a6:cd:43:66:
         b7:1b:10:45:a1:b5:62:c9:0a:36:0d:17:39:27:43:77:18:a8:
         dc:ad:84:cc:95:20:8f:16:4b:f6:85:b8:96:1a:e1:f4:e4:21:
         26:02:d3:15:00:79:31:f1:b5:06:7f:bf:56:b9:7e:9d:69:c9:
         59:a6:60:1c:8a:23:64:4b:0a:27:bf:f3:61:9a:53:c2:50:d4:
         8c:07:5c:10:ec:06:0a:ae:ce:e1:90:de:1b:79:e7:25:0a:15:
         a3:27:18:06:1e:f0:c6:54:ed:22:06:15:8b:83:34:f0:50:34:
         00:de:d5:24:e6:43:53:49:fb:c8:bb:3c:15:0e:fb:61:83:08:
         85:99:be:36:0a:7f:90:ed:0d:ff:b7:13:85:b9:b5:1c:da:3e:
         7d:7f:82:3a:1e:5d:74:81:03:ae:b2:70:b6:ea:df:7a:40:96:
         10:49:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org