Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.cer
File:                     CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.cer (raw, json)
Hash identifier:          4B8THaJA2OPhsyqiVdnsXcD8iW0eAljw7/0qjdOpoIY=
Subject key identifier:   CF:F9:A9:38:6A:BE:C5:98:9C:B5:A4:7F:74:A0:E3:7E:F2:FF:0B:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5ADF5F72E8B1531882C04E603EE4793B59701C80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jun 2022 02:07:37 +0000
Certificate not after:    Wed 28 Jun 2023 02:12:37 +0000
Subordinate resources:    AS: 269612
                          IP: 45.189.228.0/22
                          IP: 2804:6734::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:df:5f:72:e8:b1:53:18:82:c0:4e:60:3e:e4:79:3b:59:70:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 02:07:37 2022 GMT
            Not After : Jun 28 02:12:37 2023 GMT
        Subject: CN=CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:b1:d1:e5:12:c7:9d:ee:04:c7:c8:43:01:
                    b3:12:b2:e4:9d:88:76:dd:34:11:8f:93:80:25:c5:
                    9c:c5:ce:00:fe:64:93:0d:87:cf:3c:45:a1:de:b1:
                    07:ad:35:08:08:8d:e6:b3:b1:d4:b0:06:fb:a6:bf:
                    6d:ed:ef:b2:d5:8b:b9:27:a8:7a:77:33:3d:ad:8d:
                    aa:67:37:a4:0a:2e:5c:b6:24:bd:c2:e4:17:5a:e3:
                    39:52:6c:43:97:4e:4f:c8:67:cd:c3:7b:ca:d2:b3:
                    6a:6d:a2:b8:b1:91:8a:ac:ac:85:55:0f:61:7b:68:
                    ba:69:be:a4:ef:92:fa:06:c3:85:38:96:35:b8:1f:
                    18:7c:bf:9a:f5:11:f2:d1:f6:ba:d7:74:40:64:eb:
                    c4:a1:7b:26:74:f0:94:40:27:ca:53:a2:90:d5:28:
                    d8:87:32:ed:76:d9:16:9d:08:16:a2:03:14:58:48:
                    a5:bc:67:57:d2:cc:d8:23:a2:3a:77:79:8f:5b:ec:
                    0d:be:d0:53:88:9a:26:08:32:ae:b6:56:f1:15:be:
                    20:1a:28:11:36:bf:1c:4a:a5:1c:b7:5e:83:99:ed:
                    da:71:e7:f0:78:81:01:ec:a8:4a:48:51:bc:5e:f4:
                    61:be:2c:1d:b2:59:b7:f7:fb:35:c0:04:6b:3a:b4:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:F9:A9:38:6A:BE:C5:98:9C:B5:A4:7F:74:A0:E3:7E:F2:FF:0B:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/CFF9A9386ABEC5989CB5A47F74A0E37EF2FF0B4B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.228.0/22
                IPv6:
                  2804:6734::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269612

    Signature Algorithm: sha256WithRSAEncryption
         3e:41:44:40:d7:1a:94:4b:51:d0:96:cf:e4:68:f2:95:80:d9:
         b8:07:ad:b0:a6:48:77:78:c4:ba:87:6a:e7:0f:8b:ac:e8:3f:
         b1:f7:dc:80:66:17:88:78:4d:94:16:98:55:e3:b7:e2:56:de:
         5a:1c:a5:0c:5f:50:9b:3e:07:48:2b:f0:82:f6:b4:db:10:2b:
         95:ed:4f:bc:49:38:a9:6d:81:13:12:8e:56:bc:c0:f5:54:10:
         f0:0e:97:da:32:59:37:d1:c1:25:e0:dd:c0:8a:b4:f7:54:f4:
         15:59:d9:82:6e:a5:4a:90:4c:ff:83:af:bf:bb:dd:a3:eb:27:
         2a:2d:51:1b:78:66:85:66:b8:e8:cb:8a:c1:f1:97:2b:5b:9e:
         76:28:0d:7c:0d:dc:f9:f6:35:6d:cb:ff:90:60:5d:03:74:6c:
         f9:06:ef:41:02:0f:c1:12:72:d8:b7:16:03:61:8f:0a:e9:c1:
         e1:56:81:3f:19:6f:fa:f3:5a:2f:0a:10:c1:93:9a:cc:be:a1:
         77:06:1a:05:83:d1:f6:c0:96:88:4d:57:5e:43:d7:06:a8:9a:
         17:64:3b:78:f5:b8:17:32:16:a3:f6:d6:42:30:f7:e1:3c:d5:
         2a:bc:54:92:71:cb:ec:d6:b7:1d:8c:99:fa:56:10:8a:8c:f2:
         86:2e:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org