Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D9674629E111CB01526468B6021BAADE74F2F68E.cer
File:                     D9674629E111CB01526468B6021BAADE74F2F68E.cer (raw, json)
Hash identifier:          hbx9nepODi9fv8QOzhIA+ATNyUi1RzrCgL9xBzABZvs=
Subject key identifier:   D9:67:46:29:E1:11:CB:01:52:64:68:B6:02:1B:AA:DE:74:F2:F6:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DE6DDB114A4D7FE7BAA1EEF7CF5C3CC40D10427
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/D9674629E111CB01526468B6021BAADE74F2F68E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jun 2022 11:23:28 +0000
Certificate not after:    Fri 16 Jun 2023 11:28:28 +0000
Subordinate resources:    AS: 270972
                          IP: 191.37.80.0/22
                          IP: 2804:744c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e6:dd:b1:14:a4:d7:fe:7b:aa:1e:ef:7c:f5:c3:cc:40:d1:04:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 17 11:23:28 2022 GMT
            Not After : Jun 16 11:28:28 2023 GMT
        Subject: CN=D9674629E111CB01526468B6021BAADE74F2F68E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:b3:cf:f4:27:6e:be:8b:4d:9f:fa:22:94:
                    a6:18:e7:25:7a:24:35:63:b3:fb:d7:5d:ea:a2:d5:
                    30:00:06:84:d2:90:6c:7e:92:a7:cd:df:2f:78:9b:
                    8c:a3:96:d5:d8:05:59:a6:91:62:02:9c:5d:5a:9f:
                    50:36:33:c1:80:af:b5:2f:be:15:06:31:53:a8:fb:
                    aa:3b:ef:48:ba:f0:7c:9b:d0:ac:49:fc:a6:cf:6a:
                    2f:a8:00:16:d1:47:90:dd:52:38:23:5b:ff:ec:48:
                    ce:43:bc:61:f0:e4:df:7c:63:60:2e:c0:b0:b5:ff:
                    2b:6d:3c:11:43:8e:03:bf:43:2d:01:57:08:aa:55:
                    f3:71:37:31:bb:35:17:58:8a:6e:2f:e0:0d:9c:45:
                    31:f5:50:99:9a:ea:fa:45:48:ab:cc:32:8a:fe:4f:
                    d0:9c:34:86:72:e2:ef:a2:40:a4:8b:e5:18:54:a3:
                    a2:84:67:1c:47:9d:d3:a2:25:67:22:15:71:a0:12:
                    55:f1:32:99:f9:35:c7:a8:51:fb:f1:1b:a1:86:6c:
                    c0:70:c3:37:23:dd:a3:65:25:51:26:d6:44:ac:d8:
                    51:95:d2:6a:9a:ec:04:73:eb:19:74:b9:00:dd:0e:
                    30:d7:49:16:c5:4c:c4:5a:0d:d0:28:0d:aa:bd:52:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:67:46:29:E1:11:CB:01:52:64:68:B6:02:1B:AA:DE:74:F2:F6:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/D9674629E111CB01526468B6021BAADE74F2F68E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.80.0/22
                IPv6:
                  2804:744c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270972

    Signature Algorithm: sha256WithRSAEncryption
         70:98:0e:54:c7:0c:88:54:4c:54:f6:00:b9:fe:ed:00:33:79:
         ba:25:58:0a:be:f4:63:d3:c1:73:cc:db:7f:b0:a6:75:09:76:
         45:21:af:68:d1:df:35:79:44:b7:d9:6b:56:07:ad:0c:4d:29:
         d1:e7:cd:a1:73:6b:ce:93:87:84:f4:dc:6a:3a:ea:f8:8f:09:
         59:8b:b5:fa:5d:5f:b4:74:ce:63:7e:71:49:02:0f:e9:70:32:
         a9:dd:54:2d:db:17:70:5e:e1:4c:eb:09:c7:0e:13:92:65:72:
         65:21:d7:8a:65:c4:78:12:f3:f5:24:8f:2b:fb:43:c0:4d:9f:
         bf:58:cc:38:39:c5:09:8a:08:7c:88:5a:01:d0:4b:f2:2c:d1:
         95:1b:00:14:2f:95:9a:08:d9:4b:19:09:a8:8b:7b:df:23:17:
         54:ec:8a:48:d5:88:b9:f3:2f:4c:48:df:76:87:95:da:03:a3:
         bc:72:df:ba:75:ed:66:62:7d:5a:57:b7:ce:f6:da:0b:c8:dd:
         a8:6a:39:5f:80:d4:6e:e6:f0:5a:cd:50:c0:e8:94:b2:98:4e:
         04:c9:bd:5c:90:97:19:0a:8f:aa:9b:9a:61:8a:34:6e:e8:cd:
         d8:2a:74:a7:4b:75:fb:f3:f5:5f:a1:a4:12:e2:a0:fa:f2:b8:
         db:1e:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org