Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer
File:                     CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.cer (raw, json)
Hash identifier:          7po1x15BDNSnVcnq/+mUjc7bp7YX9Bqi+9hGMCuq/vQ=
Subject key identifier:   CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5994E8EC0E1608B9DE7B4E06A96183A2C248290B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Dec 2023 03:05:15 +0000
Certificate not after:    Sat 28 Dec 2024 03:10:15 +0000
Subordinate resources:    AS: 265477
                          IP: 168.197.104.0/22
                          IP: 2804:34c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:94:e8:ec:0e:16:08:b9:de:7b:4e:06:a9:61:83:a2:c2:48:29:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 30 03:05:15 2023 GMT
            Not After : Dec 28 03:10:15 2024 GMT
        Subject: CN=CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:81:86:8c:d2:41:43:18:ef:d9:8e:05:bb:
                    aa:22:57:65:ef:62:54:3c:b9:62:2f:44:c0:47:8e:
                    d1:54:a8:98:39:69:e7:b8:d0:3f:66:2e:fe:27:58:
                    93:f7:a2:0d:1a:fa:8f:93:4a:ff:4f:93:af:c2:b3:
                    cf:7e:40:8a:31:55:4a:7b:bf:c4:2f:b2:c1:69:9d:
                    00:c1:0a:ee:e3:a2:79:ee:09:ca:cd:4f:fc:79:74:
                    a9:a0:fd:52:4b:10:30:16:09:ec:7d:72:68:06:21:
                    06:75:4b:a6:a0:42:89:d4:b5:e2:c0:b0:c2:32:93:
                    05:c0:70:d0:4b:62:97:08:7a:4e:2c:92:a6:d5:98:
                    f2:1a:16:e3:81:94:5d:34:59:89:72:4f:03:f3:6e:
                    72:e1:90:64:fc:f8:88:c6:b3:01:fc:78:21:08:bf:
                    86:33:2b:ce:43:9e:aa:66:82:35:7e:c8:0b:5b:6b:
                    e7:b2:e3:77:d1:c5:d1:39:8b:d2:ec:ca:d6:a4:66:
                    8e:63:e6:eb:73:49:4f:5d:7f:02:b3:a1:fb:27:ad:
                    b3:56:b2:62:e4:c0:db:53:c1:41:9f:79:e5:e0:04:
                    1d:c3:c5:7b:c2:a7:11:bb:38:24:a9:b4:22:6c:dd:
                    98:c8:25:c0:ae:8b:81:b0:f5:8a:14:72:36:f1:29:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:9E:03:E3:25:DB:50:E5:12:9B:E1:E9:A5:D2:E0:A1:98:44:EF:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/0/CC9E03E325DB50E5129BE1E9A5D2E0A19844EF84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.104.0/22
                IPv6:
                  2804:34c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265477

    Signature Algorithm: sha256WithRSAEncryption
         3f:85:75:25:c8:d5:b0:21:6f:e0:c8:ae:0a:cf:74:10:07:5e:
         ce:43:9d:e5:5b:58:df:06:0a:51:c1:19:0b:68:aa:a7:31:60:
         99:44:23:69:4c:e4:4b:79:d4:ff:9c:74:21:88:a8:a7:f3:78:
         de:fe:a6:0f:8b:b0:7a:a1:e9:8f:c3:73:5c:07:40:99:95:c7:
         13:b0:5a:20:13:5f:a0:df:ea:31:c5:ee:30:b0:a0:2b:17:d9:
         5f:d3:e6:79:73:3a:e0:2d:de:c0:ca:d3:0d:10:7a:06:8d:65:
         db:e3:d5:5c:34:1a:8d:50:db:91:e4:20:29:1e:5a:6d:08:43:
         ad:60:7b:07:f8:ad:64:d1:7b:13:9a:75:3f:88:56:6b:c8:34:
         b6:d4:9c:36:0f:6c:0b:a2:29:80:2f:ef:95:37:24:41:71:1b:
         82:a9:30:6e:79:2c:bd:7c:81:f8:ef:8d:89:cb:20:7a:65:31:
         82:40:f0:3a:59:69:a7:5f:da:ee:25:80:5c:f2:c3:63:cc:ac:
         22:d9:0c:94:51:9f:99:63:55:08:d2:b0:7c:9d:b9:4a:1b:f0:
         5e:46:5b:ed:c6:c2:69:bc:3b:e5:cd:e7:f1:e7:f8:82:ce:4f:
         3b:b2:26:a3:79:c7:25:85:c5:a9:bc:08:c2:b2:86:50:da:a3:
         8e:50:82:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org