Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer
File:                     C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer (raw, json)
Hash identifier:          aWthAgHKs7aFbGoueuDzxkIMH0BA2s9u/bFtBjEJtBU=
Subject key identifier:   C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D8FD1DBD4FA43BB830879ABA9053D8DC28551BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Nov 2022 16:52:54 +0000
Certificate not after:    Thu 02 Nov 2023 16:57:54 +0000
Subordinate resources:    AS: 264450
                          IP: 131.255.36.0/22
                          IP: 2804:1edc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8f:d1:db:d4:fa:43:bb:83:08:79:ab:a9:05:3d:8d:c2:85:51:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 16:52:54 2022 GMT
            Not After : Nov  2 16:57:54 2023 GMT
        Subject: CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:63:4e:c1:98:41:18:2f:b4:9e:e0:c1:d5:
                    1c:86:b5:b7:c9:1a:e0:7a:6d:47:23:03:c9:11:74:
                    71:b9:cf:e1:ee:fd:4e:89:f1:d5:0b:d5:67:bb:87:
                    91:a9:6c:d7:28:b6:b9:72:a8:90:21:cf:4e:c5:2e:
                    8c:9b:d8:b2:bd:64:94:21:d5:1c:b5:fc:bb:ab:d2:
                    39:ac:42:67:4e:88:6c:31:65:d9:a1:33:4d:d3:6d:
                    d3:98:11:e9:73:55:14:08:48:7c:4b:07:79:2d:8a:
                    ad:69:7d:69:80:6b:6c:04:92:32:bd:51:3a:38:c6:
                    b1:a4:0f:37:00:8c:39:cd:c2:36:ec:2d:f2:08:2b:
                    4d:17:f5:64:50:74:87:97:6b:8e:b3:cc:b9:58:26:
                    e5:ce:5e:ab:a6:4f:ab:64:fa:7f:1d:cf:63:1f:09:
                    5c:12:ad:74:52:67:3a:4f:29:00:3b:3c:ad:7b:3e:
                    12:fe:ed:30:7a:73:58:c1:17:cd:dd:b2:10:29:93:
                    93:a6:ed:8b:e0:55:89:12:41:e7:fd:b4:b5:79:98:
                    3a:d9:74:0d:8a:d4:29:46:84:96:5e:b8:1d:e4:e9:
                    41:c6:59:94:f9:4c:ec:07:80:70:66:16:91:ae:7b:
                    b4:0d:25:f6:c8:73:3e:f1:8a:2a:7e:80:23:b2:2c:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/22
                IPv6:
                  2804:1edc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264450

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:88:af:34:01:e1:2f:81:7b:4e:f8:a6:4d:73:59:eb:79:
         17:37:5d:d8:d1:b0:14:4d:07:c5:42:2b:82:7e:0f:21:52:3d:
         ca:d2:f7:f6:c1:43:2a:5b:8a:8a:c9:44:8a:ba:25:ff:aa:d1:
         89:5b:5d:d2:b7:b9:b4:5f:68:cc:cd:a0:16:ec:e5:32:de:1c:
         ef:f7:fc:5e:f5:ff:a8:30:a6:10:aa:58:03:b6:e2:14:af:5c:
         6a:72:02:af:8f:f1:d0:0f:f1:f4:89:14:f8:85:9f:e8:53:a5:
         2c:aa:18:89:4c:86:45:15:e9:df:e3:7b:62:d3:cc:45:d1:73:
         c3:85:a9:c4:ac:b7:1e:34:23:01:cf:4e:41:c1:c2:1a:95:00:
         e2:93:ac:69:b6:4e:32:a2:7f:ae:b6:d7:55:57:c1:d3:a1:ef:
         a7:4f:b5:e3:5e:a0:ab:36:26:8e:23:d5:5e:88:2c:1a:ff:68:
         1a:9d:21:cb:f4:a7:c4:71:70:7d:37:60:72:99:a9:0a:03:64:
         06:59:e0:93:4f:23:0e:89:f4:14:b4:99:dd:fc:1d:a1:79:e4:
         28:fd:77:58:3e:c8:76:e0:2d:20:61:2a:51:2f:0f:cc:e0:1d:
         ea:d8:a3:1c:69:6e:b0:0f:88:36:3d:cd:a5:38:34:b4:df:66:
         9e:d0:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org