Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D9BD705BE36A2F18825AFE073B77A0222E11A312.cer
File:                     D9BD705BE36A2F18825AFE073B77A0222E11A312.cer (raw, json)
Hash identifier:          EXIgtk6I3kj8coCOCyk99u2qvNvsz0pP8tgsidZy3fY=
Subject key identifier:   D9:BD:70:5B:E3:6A:2F:18:82:5A:FE:07:3B:77:A0:22:2E:11:A3:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F482A17A1391ADED17BA0FC73009EC2ECC2ACE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/D9BD705BE36A2F18825AFE073B77A0222E11A312.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Nov 2023 17:25:52 +0000
Certificate not after:    Mon 18 Nov 2024 17:30:52 +0000
Subordinate resources:    AS: 268398
                          IP: 45.160.24.0/22
                          IP: 2804:5098::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:48:2a:17:a1:39:1a:de:d1:7b:a0:fc:73:00:9e:c2:ec:c2:ac:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 20 17:25:52 2023 GMT
            Not After : Nov 18 17:30:52 2024 GMT
        Subject: CN=D9BD705BE36A2F18825AFE073B77A0222E11A312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:7e:63:af:72:d5:12:71:22:1b:61:e2:aa:
                    d3:d3:a2:43:e3:ad:5f:44:15:9c:a5:ef:dc:73:c5:
                    67:cd:16:9c:1f:9b:fd:1b:a0:94:ee:2a:34:8a:fe:
                    ef:7a:ef:0b:7a:19:cf:8d:65:c5:2e:50:16:5f:e3:
                    fc:ba:54:73:f0:63:df:20:72:d1:b3:3d:5a:f6:73:
                    d7:a4:8e:ac:db:dd:52:73:00:22:c4:33:f2:91:5f:
                    c5:2f:a4:0a:da:9e:6e:76:17:4e:36:0e:4e:6f:b9:
                    49:78:7f:28:a9:e5:b1:d5:70:9b:5e:86:a8:28:b2:
                    d0:b3:a9:52:1b:a3:89:c0:f4:65:61:e3:af:3f:3f:
                    e9:22:a5:63:98:10:69:1f:5f:4e:9d:6c:7c:89:8e:
                    6e:b3:35:46:26:d3:41:e6:de:fe:4b:34:36:a5:fb:
                    b4:e7:12:f0:70:93:f8:8e:ae:c7:82:b2:8f:63:0f:
                    91:3b:b4:95:f4:0f:99:e3:13:b6:d2:35:f7:a5:50:
                    d8:2d:ea:12:2e:8f:50:df:90:f4:f1:98:cd:6d:6c:
                    29:67:03:b7:ed:74:e7:22:ee:5f:1c:91:70:42:45:
                    fd:89:86:b3:c3:dc:f1:75:8c:83:05:ce:0a:2f:ac:
                    77:9a:7d:a3:1d:6d:93:9a:d2:45:4a:b8:f8:d3:c0:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:BD:70:5B:E3:6A:2F:18:82:5A:FE:07:3B:77:A0:22:2E:11:A3:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/D9BD705BE36A2F18825AFE073B77A0222E11A312.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.24.0/22
                IPv6:
                  2804:5098::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268398

    Signature Algorithm: sha256WithRSAEncryption
         05:51:c2:dd:b2:e0:ea:52:f4:0a:59:08:06:8c:0d:f8:b5:b6:
         10:5a:12:26:aa:3c:43:f0:e8:84:bc:7e:f8:6e:8d:ce:88:28:
         b0:29:e6:b8:b6:55:15:c1:0c:49:ac:69:57:ad:02:9a:e3:f2:
         e1:d4:c0:89:00:d2:e5:23:30:af:f8:a8:10:2e:37:8b:b1:61:
         3d:b9:a1:14:6f:11:f8:28:ba:81:5a:cf:65:24:03:ba:04:aa:
         fb:4a:9f:8c:a2:9c:49:7a:50:40:68:e8:40:12:b0:20:fb:78:
         1e:e2:c8:4a:dd:e1:82:cf:ab:8a:bf:e6:0e:b9:9d:3f:4f:ca:
         7a:ba:14:c2:4d:19:f8:6d:74:49:4e:af:18:83:aa:bd:f5:49:
         e2:76:44:03:1e:9d:df:b3:60:42:57:80:12:aa:ef:ad:2b:0d:
         9a:f0:83:16:48:62:ac:c9:4d:07:a4:3c:bc:aa:aa:b8:48:da:
         c3:81:ab:08:b4:ac:b4:ec:dc:98:95:c4:f4:7e:12:be:ef:db:
         90:80:57:fd:01:ff:bf:f1:4b:ea:73:b8:4f:7b:5d:74:80:66:
         c2:62:28:9a:43:ce:cc:7c:90:ad:57:25:28:32:ce:82:0b:a9:
         02:7b:ad:b6:f6:4e:cf:8d:2a:65:61:32:a3:cc:90:9b:ce:9d:
         ee:1f:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org