Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.cer
File:                     C9EE4131FE58F0A7EF441B1C61A79EA84897009C.cer (raw, json)
Hash identifier:          x6Hvc0N8Xz82oxfffmwlir5IWZ3X1cQCQ9ewZc3bNuo=
Subject key identifier:   C9:EE:41:31:FE:58:F0:A7:EF:44:1B:1C:61:A7:9E:A8:48:97:00:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       513B0CD206B31112660160A328A55893BBED06C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 12:54:32 +0000
Certificate not after:    Thu 20 Feb 2025 12:59:32 +0000
Subordinate resources:    AS: 271042
                          IP: 177.36.16.0/22
                          IP: 2804:7560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3b:0c:d2:06:b3:11:12:66:01:60:a3:28:a5:58:93:bb:ed:06:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 12:54:32 2024 GMT
            Not After : Feb 20 12:59:32 2025 GMT
        Subject: CN=C9EE4131FE58F0A7EF441B1C61A79EA84897009C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:a8:a3:3e:bb:c3:8b:e9:15:84:e7:06:2d:
                    6e:52:ea:66:d8:3d:48:42:1c:db:66:a4:13:c7:08:
                    61:1f:50:15:4b:1d:0c:b6:fe:4e:45:cc:80:d7:0c:
                    d3:dd:a2:13:3d:54:2d:14:9f:a7:df:c3:78:76:eb:
                    c6:10:40:fb:b4:cc:1f:5f:c7:b0:60:bb:7b:1f:a3:
                    a0:7e:a2:51:8f:1f:e9:7b:be:a2:e4:9a:ad:f9:fa:
                    25:e0:c7:10:23:0d:43:56:62:12:fe:e9:fd:e6:d1:
                    bc:c8:4f:de:df:bc:c1:9a:ca:e6:2e:e0:c8:8c:3a:
                    89:98:ea:86:18:5c:26:6f:a0:8d:22:41:98:91:7e:
                    3c:94:e4:dc:90:f8:ed:dd:ed:93:8f:91:df:3b:b9:
                    4f:7a:59:58:9a:ed:3d:d7:b1:4f:08:ec:d5:8f:10:
                    df:83:55:d6:b9:19:73:04:d2:b0:43:66:ad:ca:1d:
                    3a:4b:36:7e:39:24:92:b2:06:24:97:85:cd:29:06:
                    3c:59:d3:e7:3b:06:a9:bc:08:bc:7e:ed:31:27:89:
                    be:fd:fa:28:c9:10:75:95:db:81:e7:af:0a:89:28:
                    cf:b8:54:34:f2:24:c4:2b:62:b1:3f:35:57:53:b3:
                    e9:65:57:a6:df:64:0d:34:f4:ad:34:fc:21:15:08:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:EE:41:31:FE:58:F0:A7:EF:44:1B:1C:61:A7:9E:A8:48:97:00:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/C9EE4131FE58F0A7EF441B1C61A79EA84897009C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.16.0/22
                IPv6:
                  2804:7560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271042

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:a0:32:e6:3d:4f:09:32:d7:3d:4b:d8:f0:e9:8b:53:17:
         27:77:42:86:1b:b4:1c:e0:66:af:55:ff:08:6a:d9:5b:d8:45:
         61:77:11:60:50:80:4b:0d:7f:26:09:a2:8f:0a:78:fe:23:1d:
         54:3f:a8:94:64:c4:96:55:3d:d2:bf:0c:9e:66:85:ef:c3:6d:
         64:22:56:b7:65:02:f9:f8:f4:4d:56:66:82:20:df:aa:9f:c0:
         a5:db:9c:22:01:6e:e8:2f:a5:1a:da:b5:17:c1:0f:d8:2c:83:
         88:36:90:8a:16:64:6c:87:d9:15:e2:06:d0:d4:0d:87:57:ad:
         a3:72:33:69:d7:8b:5b:73:2e:9d:b7:69:d0:a8:27:f0:ac:7d:
         dc:5b:38:55:80:74:43:bc:a7:b4:66:ec:f5:6c:da:61:b2:0a:
         6b:39:e8:d5:f4:de:02:a8:db:50:4f:d7:d8:8f:59:b6:db:bd:
         d7:05:42:3b:4e:ea:c5:f5:6a:00:09:88:3b:f1:45:02:7e:5e:
         05:b6:7c:99:68:f3:3c:39:65:bf:a3:71:8d:27:3c:ea:1c:dd:
         c3:72:bf:f8:f9:d8:77:5b:f9:10:30:72:e4:2a:18:62:aa:98:
         79:6b:d6:6b:ff:68:36:12:e4:c6:c7:26:e2:b9:a5:71:c3:6d:
         4b:41:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org