Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
File:                     D976D8643DDAC04E9DF4107DC27106249788AF8F.cer (raw, json)
Hash identifier:          Rs3fZhAZrBJW+vP0TsBZKDhY58qoQ8tuhkC79o6Z54o=
Subject key identifier:   D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       096F22CB672EFD18225252CC9BB8291B8DE8FEBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Oct 2023 19:59:10 +0000
Certificate not after:    Fri 18 Oct 2024 20:04:10 +0000
Subordinate resources:    AS: 266066
                          IP: 45.4.124.0/22
                          IP: 2804:3a08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6f:22:cb:67:2e:fd:18:22:52:52:cc:9b:b8:29:1b:8d:e8:fe:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 19:59:10 2023 GMT
            Not After : Oct 18 20:04:10 2024 GMT
        Subject: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:ae:a3:16:b9:8e:45:4d:bd:54:48:79:f4:
                    10:21:3f:36:0d:26:ae:6c:d3:ad:a9:c6:99:8d:19:
                    8e:69:55:da:f7:2d:2c:66:b5:f0:05:d4:24:a2:75:
                    a1:c0:f8:4f:3e:10:5f:6e:54:f9:ca:51:4f:47:d8:
                    51:ae:9d:e2:f8:b7:fa:40:71:35:1d:bc:7e:31:6e:
                    fd:6f:8a:2b:e4:de:ab:32:0a:2b:d1:1c:99:3f:c3:
                    5a:4e:d1:31:ae:4d:2c:a1:38:cf:f3:42:b6:eb:b6:
                    52:9a:15:68:27:39:c8:10:fa:de:2c:86:0b:86:45:
                    9c:2b:09:8f:2f:4d:cf:54:49:68:ea:50:63:16:52:
                    e2:28:41:91:ec:6b:dc:75:33:c5:f0:73:3a:c0:92:
                    f9:cd:0c:54:64:34:99:28:c0:fb:ed:39:c7:91:6d:
                    28:16:96:59:78:fe:42:b7:d8:17:99:b7:58:ca:ac:
                    de:c9:dd:94:05:85:8d:3f:67:00:a7:0f:1e:da:da:
                    57:94:60:eb:0b:c8:fb:bf:57:92:1f:8d:38:28:e7:
                    b0:53:6e:1e:7d:c0:e5:c2:d0:bc:fb:de:dd:49:22:
                    fd:05:4e:c2:19:eb:fb:52:33:4e:28:bb:2a:40:43:
                    27:22:f0:e4:00:0d:e0:a7:26:e2:ed:1d:39:a1:f6:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.124.0/22
                IPv6:
                  2804:3a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266066

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:a5:c4:d9:c4:02:99:7d:fb:cd:be:f5:bc:6d:2b:3c:12:
         14:9f:6b:2a:8a:56:1e:81:42:87:bc:81:72:51:59:e2:26:63:
         76:7a:e1:37:54:1a:23:5e:aa:7b:d7:b1:35:15:f5:1a:60:e9:
         45:df:0a:14:b1:7a:59:bc:d9:94:79:3c:3c:d5:d3:2a:19:f6:
         87:19:7b:09:dd:d4:d3:bc:b2:c7:db:a5:1d:73:2f:80:e1:89:
         fe:af:a5:3d:93:3b:02:d8:15:f0:7c:47:1b:48:54:ae:ed:b9:
         66:52:1b:bd:40:2a:d1:a5:58:a2:12:bf:7e:8b:a0:d2:e7:7b:
         a6:04:60:c5:e8:0f:49:e9:97:a6:79:75:10:ef:f6:c6:8d:84:
         ff:ed:c7:85:6a:d7:5a:ca:0e:51:bf:aa:30:0b:3b:32:87:ea:
         44:56:9e:4d:49:c1:b6:f1:79:68:21:94:8a:4e:52:32:d9:5e:
         ac:29:3e:16:8a:f8:33:20:bd:7a:d3:59:a1:58:ab:dd:8f:2e:
         54:98:91:06:23:00:96:fe:78:11:fa:f3:1d:f7:89:4b:d9:58:
         89:c7:1b:ea:93:05:99:78:da:2b:b9:48:df:db:9b:b0:59:8e:
         3d:58:25:0a:15:0d:a2:3a:36:cf:17:1f:91:36:88:0c:e6:7e:
         25:dc:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org