Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.cer
File:                     D9E853F23912A999E8A8BB82B4CF91C9593F0717.cer (raw, json)
Hash identifier:          D1XhA5yQ79+Ic4uaTtdEa68RiCRqg9nzT2pd+qASlh4=
Subject key identifier:   D9:E8:53:F2:39:12:A9:99:E8:A8:BB:82:B4:CF:91:C9:59:3F:07:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       048C88CA7D66C3C1678ADA9C6010533A57B786B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.mft
caRepository:             rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 20:10:04 +0000
Certificate not after:    Fri 14 Feb 2025 20:15:04 +0000
Subordinate resources:    AS: 271477
                          IP: 177.152.124.0/22
                          IP: 2804:7c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8c:88:ca:7d:66:c3:c1:67:8a:da:9c:60:10:53:3a:57:b7:86:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 20:10:04 2024 GMT
            Not After : Feb 14 20:15:04 2025 GMT
        Subject: CN=D9E853F23912A999E8A8BB82B4CF91C9593F0717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:8e:7e:5a:5f:41:76:27:7a:37:28:98:1d:
                    90:54:47:a9:8c:52:e9:c4:be:f9:82:b7:43:cd:fe:
                    c4:b9:28:3e:6a:c7:2d:d4:8a:ce:d3:ba:61:e4:5e:
                    d5:44:70:2a:ed:f4:c3:bd:09:ef:77:fa:44:8c:8e:
                    c5:44:ce:65:6d:49:46:ac:87:09:2d:1b:6e:aa:c1:
                    1a:62:55:7f:72:69:85:24:cc:df:61:86:7e:15:ee:
                    45:fb:81:d6:81:58:d2:58:42:42:85:8a:4f:f0:87:
                    1b:4d:eb:04:8c:0b:0e:04:df:49:c4:cc:96:e3:bc:
                    6c:50:52:62:ac:bf:2f:43:b3:93:e8:a2:79:fa:4f:
                    d2:ce:1b:74:6d:45:ec:91:83:62:0f:23:54:f6:b1:
                    2d:e9:aa:c2:58:fe:90:8c:2a:80:91:f3:05:dd:68:
                    25:da:bd:26:9b:8e:b1:65:68:2e:07:0f:a2:11:cf:
                    f2:a3:6d:a5:79:19:60:15:bd:92:7a:cc:b7:d2:6f:
                    96:f6:96:e9:8c:b9:43:cd:71:e2:15:4c:59:db:8d:
                    d2:7d:5f:72:5d:8f:d0:28:de:f2:18:8b:27:12:2f:
                    27:75:4e:fe:f2:1c:e1:eb:80:91:2b:85:ae:eb:42:
                    7d:88:7d:a4:fc:07:7c:86:81:78:b2:76:91:97:9e:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:E8:53:F2:39:12:A9:99:E8:A8:BB:82:B4:CF:91:C9:59:3F:07:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/D9E853F23912A999E8A8BB82B4CF91C9593F0717.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.124.0/22
                IPv6:
                  2804:7c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271477

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:3e:2f:04:4e:4e:4e:5b:fe:bd:c9:af:06:d5:3a:12:1f:
         70:d7:a8:6c:cd:03:e0:2f:68:3a:ec:8d:d4:3d:85:b1:2d:c1:
         c1:7a:43:db:62:21:9f:ac:3d:25:65:c3:cf:12:27:55:81:41:
         4e:00:63:c0:c9:f5:be:23:04:83:50:eb:92:81:1e:6c:a6:01:
         9a:a4:c3:d3:c9:0d:b9:25:33:56:ca:85:ca:55:94:37:77:d9:
         37:fa:4c:63:88:86:63:9f:dd:30:1a:00:aa:17:69:b8:10:93:
         a4:7b:97:2b:17:85:ed:49:ff:ac:71:de:61:d3:40:08:98:b1:
         48:2a:1c:84:1b:d4:ab:97:a3:97:44:41:e0:4e:1a:4d:d8:90:
         93:53:0c:18:99:ce:35:4c:17:d7:b0:45:57:2a:e2:91:a4:be:
         24:d9:0a:16:02:dc:b7:94:ce:88:3d:ed:bf:fb:06:1e:00:db:
         3b:05:90:26:56:96:ce:8d:0e:db:13:8d:ca:ea:a6:ec:0e:17:
         77:cd:a1:b6:85:e6:80:b5:13:68:9b:2d:42:75:c0:ab:9e:47:
         d8:47:79:91:06:ab:55:09:8d:69:2e:91:e9:32:7a:0b:4b:f8:
         90:dd:b1:05:35:a1:32:8a:11:53:03:3e:77:4c:b3:0c:28:ef:
         75:0e:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org