Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.cer
File:                     CC9E345A5443E54716B824EB79F1A5F6060302C0.cer (raw, json)
Hash identifier:          ay5L5XeqoozPDqj4fpc8QzEEFqZk7TNOsmj4ut+wKKc=
Subject key identifier:   CC:9E:34:5A:54:43:E5:47:16:B8:24:EB:79:F1:A5:F6:06:03:02:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FFD5ADF870B5EFF2C0E8D75B3B42E8C3618F0BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jul 2023 12:32:44 +0000
Certificate not after:    Mon 08 Jul 2024 12:37:44 +0000
Subordinate resources:    AS: 270917
                          IP: 177.200.136.0/22
                          IP: 2804:7378::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fd:5a:df:87:0b:5e:ff:2c:0e:8d:75:b3:b4:2e:8c:36:18:f0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 10 12:32:44 2023 GMT
            Not After : Jul  8 12:37:44 2024 GMT
        Subject: CN=CC9E345A5443E54716B824EB79F1A5F6060302C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:77:cd:9c:63:45:75:c6:8a:0d:c9:e8:98:04:
                    d4:af:21:45:ea:d4:75:d2:ef:cc:91:ca:ef:da:15:
                    bf:cc:5d:8f:16:ab:5b:b7:a5:f6:23:b5:a9:35:a8:
                    fa:86:37:32:29:2a:b1:6a:ec:8d:f9:0a:04:cd:35:
                    a1:ca:14:6e:57:b1:b2:8c:9b:4b:26:37:13:bc:28:
                    84:9c:84:d1:9a:fd:ad:4c:2e:a4:74:92:af:89:9e:
                    8a:78:3c:28:e9:51:81:84:81:9e:04:ea:45:b6:06:
                    de:a8:a0:01:2e:58:f2:7f:aa:80:fc:57:d1:d5:2a:
                    67:45:4d:df:d1:7d:bb:f2:9a:28:03:4c:22:93:f1:
                    ba:78:05:48:a4:00:58:e1:ab:6c:c8:58:93:4f:41:
                    c5:7a:60:b6:e4:69:02:24:ab:ed:fe:d1:73:61:07:
                    c9:2d:92:39:46:c4:3f:c6:17:7a:9f:0d:b7:4a:8e:
                    df:70:cc:4a:e2:25:bd:be:ba:9b:c1:e6:4b:0c:d7:
                    ab:95:f8:72:46:ac:9c:1b:f6:71:a5:8c:30:87:6d:
                    59:72:a5:48:97:6d:b3:8b:80:11:ed:6d:b6:7d:1e:
                    36:55:ab:20:a2:98:34:e6:d4:a4:03:99:29:a8:38:
                    ed:29:05:ea:f0:4e:38:4c:43:3a:89:7d:13:1a:f7:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:9E:34:5A:54:43:E5:47:16:B8:24:EB:79:F1:A5:F6:06:03:02:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.136.0/22
                IPv6:
                  2804:7378::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270917

    Signature Algorithm: sha256WithRSAEncryption
         06:71:d8:e3:8a:97:28:3c:eb:09:57:67:44:aa:ca:8c:43:98:
         78:1c:de:08:5d:5e:c5:fc:23:de:a0:82:5b:b4:70:21:00:9e:
         44:db:0a:e9:f8:1f:2c:d1:2e:59:e2:37:6f:da:31:3b:cb:6e:
         78:fc:ff:13:a5:0d:a3:35:4c:4c:32:0f:16:61:dc:4c:0f:0f:
         83:11:14:e7:9a:56:9e:a6:c0:f0:de:11:ba:ce:49:8a:a5:f7:
         b3:71:19:33:58:7d:49:c4:b1:1d:c4:cb:81:11:45:f0:5f:5d:
         5f:a3:81:8c:6f:57:79:f2:af:a0:02:71:9a:57:6b:4c:b3:1d:
         f9:17:b6:e3:34:53:df:e8:e8:ac:de:8f:40:7a:d1:c2:28:d9:
         9c:68:89:e6:13:19:37:88:ff:2e:6e:26:ea:7b:ea:4b:d1:6b:
         80:1f:c0:55:94:69:8a:da:f1:87:2c:b3:f0:61:7b:b3:36:32:
         bb:84:6f:21:dc:41:97:bc:c9:14:13:44:61:e7:6f:68:1d:8b:
         19:26:10:09:c7:32:4a:8b:14:92:5b:03:b8:0b:05:69:aa:4f:
         49:31:a0:cd:e1:c7:db:bb:63:a6:12:e1:06:cb:78:3b:e7:e1:
         e2:ed:39:26:52:26:43:13:9f:c2:b2:0c:28:f5:b3:ff:a2:92:
         7f:ca:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org