Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9BFC16C40DB4CC9D46B763644A8B282D1A4A820.cer
File:                     C9BFC16C40DB4CC9D46B763644A8B282D1A4A820.cer (raw, json)
Hash identifier:          OyckFRW16q+sqXOuDkvfcNOrxc/Yo1TW4ncKBLc9p6A=
Subject key identifier:   C9:BF:C1:6C:40:DB:4C:C9:D4:6B:76:36:44:A8:B2:82:D1:A4:A8:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CE25B5A1D163B085E86C9D7516973A42B1EBB90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/C9BFC16C40DB4CC9D46B763644A8B282D1A4A820.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 15:10:19 +0000
Certificate not after:    Mon 06 May 2024 15:15:19 +0000
Subordinate resources:    AS: 264386
                          IP: 45.6.240.0/22
                          IP: 131.108.172.0/22
                          IP: 168.197.80.0/22
                          IP: 2804:1db0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e2:5b:5a:1d:16:3b:08:5e:86:c9:d7:51:69:73:a4:2b:1e:bb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  8 15:10:19 2023 GMT
            Not After : May  6 15:15:19 2024 GMT
        Subject: CN=C9BFC16C40DB4CC9D46B763644A8B282D1A4A820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:3d:54:7b:d1:41:39:f3:34:2d:6a:57:cc:
                    61:2d:5c:cf:25:f7:f5:7e:dd:59:28:c9:35:41:21:
                    ef:84:1a:8f:a7:2a:28:6e:5a:74:df:c3:02:56:77:
                    f3:0a:4a:6d:8c:dd:ed:14:2c:cb:f4:e1:5a:da:ed:
                    81:b4:e4:de:58:c9:ad:64:db:95:4c:79:f4:9d:0b:
                    d9:5f:2f:ca:c7:8b:56:1f:49:59:b6:35:03:06:db:
                    0b:7c:17:0c:44:42:f4:a9:77:3b:af:71:10:8e:76:
                    17:e4:86:2e:2f:ce:59:35:88:ed:1d:3b:50:8c:82:
                    41:30:77:57:41:ab:a2:dd:f4:80:9d:f8:23:17:c8:
                    16:31:b4:e6:0f:80:e2:8d:f5:56:4f:43:53:a2:bb:
                    05:8d:02:9c:35:9a:8f:f2:6f:3e:c2:58:4f:33:c9:
                    91:3b:4b:83:73:5b:aa:1e:cc:22:55:58:07:97:4b:
                    65:62:a5:e7:68:b3:1d:3b:b3:c2:e6:60:8d:2e:78:
                    08:d3:c4:12:d6:6e:60:2f:af:55:fb:08:e9:6c:73:
                    e6:46:a9:3d:d1:93:a1:d1:4e:c1:6e:f0:6c:e9:fe:
                    00:48:86:39:fd:5a:e7:f9:d9:bd:d3:6c:1b:7b:9c:
                    e3:97:f6:86:50:51:07:e8:76:7a:af:45:b8:af:97:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:BF:C1:6C:40:DB:4C:C9:D4:6B:76:36:44:A8:B2:82:D1:A4:A8:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/C9BFC16C40DB4CC9D46B763644A8B282D1A4A820.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.240.0/22
                  131.108.172.0/22
                  168.197.80.0/22
                IPv6:
                  2804:1db0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264386

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:2a:68:57:38:8c:b2:7c:a1:8f:5e:7d:d6:1c:b0:88:f3:
         fe:bb:e7:8e:27:ab:c1:fe:39:98:c5:3b:ad:f5:fc:d7:1f:d2:
         c3:12:b7:40:ef:5a:b2:61:b0:7b:21:b7:c2:4a:74:41:5a:84:
         f1:a3:da:86:6d:8b:12:e2:04:33:3c:90:bf:06:42:6c:0e:8b:
         5e:4c:1f:a0:a4:68:fd:09:f8:fe:ec:0f:a9:da:6f:98:42:fa:
         96:52:87:b0:0f:59:8c:e9:43:0f:a6:5d:0f:5d:22:5a:d4:1a:
         da:e4:f7:69:b5:0a:9c:e6:23:d6:17:9b:de:5e:2f:71:e1:87:
         a3:9f:7a:63:f5:f0:eb:83:12:e3:d0:18:c7:da:a5:fb:d2:15:
         e2:df:6b:13:d6:08:34:f9:99:be:1f:e2:13:0f:44:59:29:c4:
         c5:0a:b4:8d:d1:76:6e:3d:53:03:63:63:21:3e:56:16:44:ee:
         ab:de:8d:e8:0f:a4:17:c8:47:10:dd:49:bc:10:6c:d7:00:23:
         23:92:26:f4:58:26:41:39:05:78:6d:77:57:d1:80:c4:e2:13:
         1e:48:3c:2d:6a:1c:18:fc:b3:3d:64:a8:ad:70:5b:79:0d:86:
         82:dc:92:72:e0:a5:7e:08:0d:8d:11:16:c7:f2:51:8f:3c:96:
         17:05:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org