Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
File:                     D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer (raw, json)
Hash identifier:          J9HFKrWj7w7D5+/hozvxlZ3gGZiYepSUNLQOuwklw9A=
Subject key identifier:   D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BCB96289226587EB197D6371A59574C6068B860
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 18:55:08 +0000
Certificate not after:    Fri 08 Nov 2024 19:00:08 +0000
Subordinate resources:    AS: 268092
                          IP: 45.168.220.0/22
                          IP: 2804:57e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cb:96:28:92:26:58:7e:b1:97:d6:37:1a:59:57:4c:60:68:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 18:55:08 2023 GMT
            Not After : Nov  8 19:00:08 2024 GMT
        Subject: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:5f:b7:aa:b1:0e:b4:f6:0f:48:7a:ac:ab:
                    72:77:25:6e:f4:05:f4:d0:ef:5c:e4:b4:93:bc:4c:
                    28:cf:6c:cd:44:bd:e4:63:75:c8:fd:8f:a0:b3:96:
                    be:4d:39:bd:b9:85:63:29:5c:4f:42:51:2a:f4:bf:
                    59:6d:20:dd:8d:ec:1e:f3:91:ec:6c:a3:dd:0d:f8:
                    b7:a1:fe:11:09:d5:1d:89:71:42:32:b1:18:8f:a4:
                    4d:25:57:07:59:13:16:bd:0f:44:35:74:60:9d:d7:
                    51:94:66:1c:ca:41:cf:0d:25:b8:74:9e:1e:ef:ea:
                    f2:c1:72:d6:a5:1f:9f:c9:df:3b:9b:64:37:bc:b6:
                    60:25:42:3d:1c:20:62:2b:30:ac:e9:2e:37:84:8a:
                    5b:72:1d:a7:8b:85:b5:74:c0:35:ce:25:44:7c:6b:
                    50:f3:99:c9:5f:f8:d2:52:55:49:d0:7f:29:e6:65:
                    57:39:78:0f:ca:b7:94:65:8d:dd:dd:21:98:5b:d5:
                    b9:22:4d:70:03:39:6d:07:bf:d8:33:3a:10:a9:98:
                    1b:39:17:ed:30:72:22:a5:96:c2:ed:1d:fd:9f:bf:
                    bc:b1:28:27:41:be:c3:26:05:d1:e3:62:a7:c6:d9:
                    e4:a6:88:8e:35:3a:4e:3f:e5:5c:23:81:30:a0:a7:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.220.0/22
                IPv6:
                  2804:57e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268092

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:93:3f:61:83:4e:ca:c7:00:fe:8d:d4:14:0d:05:cf:9d:
         4f:42:b1:04:93:d7:9e:a5:1d:be:89:e8:63:82:c8:38:a9:68:
         38:05:32:6b:16:db:4a:03:cb:9e:9b:8e:b4:6d:5d:80:80:6f:
         ab:77:44:97:0b:cd:3b:6b:5e:94:dd:6c:57:e0:26:db:d3:f4:
         4c:87:9b:2f:b2:15:75:3b:35:04:63:e7:66:af:e7:e7:d4:de:
         cd:87:da:dd:ab:5c:d2:5a:06:6d:90:e7:be:09:e5:36:d7:3f:
         07:ce:e6:8b:6f:32:31:ec:ba:c5:2d:8f:ae:42:39:fb:3d:74:
         b8:ef:42:5f:2e:fe:22:a2:c6:dc:91:dc:20:43:c4:67:28:96:
         2b:8e:be:82:f4:79:0e:c3:b7:b2:08:15:8a:bb:3d:ba:97:66:
         46:34:04:fd:5f:35:35:b4:33:7f:36:b0:b1:34:dc:b3:0f:a0:
         a7:9e:e7:f3:42:f9:12:22:c2:cb:da:72:ac:63:77:02:7b:62:
         bb:c4:36:02:11:6c:86:4c:12:53:1b:8a:90:df:94:4f:70:1a:
         ed:27:21:7a:ab:85:02:c2:23:e3:38:de:d8:43:8d:29:8a:3d:
         a7:d8:d3:13:53:51:31:05:cb:4c:07:3e:83:96:04:82:d6:58:
         5f:41:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org