Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F9C33AB62CACC9DEE89E46CFDF02A4E0A77760F3.cer
File:                     F9C33AB62CACC9DEE89E46CFDF02A4E0A77760F3.cer (raw, json)
Hash identifier:          gfYKW0Qjp9VouPRmyxUL36MW70ySwxvCy6YfNO5zGHw=
Subject key identifier:   F9:C3:3A:B6:2C:AC:C9:DE:E8:9E:46:CF:DF:02:A4:E0:A7:77:60:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16441F561A687AF36A7711183BD44B859B44478C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/F9C33AB62CACC9DEE89E46CFDF02A4E0A77760F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Jan 2023 21:25:13 +0000
Certificate not after:    Wed 03 Jan 2024 21:30:13 +0000
Subordinate resources:    AS: 28665
                          IP: 177.12.0.0/18
                          IP: 177.136.128.0/19
                          IP: 189.1.128.0/20
                          IP: 2804:f88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:44:1f:56:1a:68:7a:f3:6a:77:11:18:3b:d4:4b:85:9b:44:47:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 21:25:13 2023 GMT
            Not After : Jan  3 21:30:13 2024 GMT
        Subject: CN=F9C33AB62CACC9DEE89E46CFDF02A4E0A77760F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:c7:ea:51:92:d2:1a:d9:9d:79:d0:62:09:
                    e4:76:83:10:c5:01:83:f8:11:4e:6c:72:e3:21:89:
                    c6:41:d1:63:f6:64:8c:6b:53:a7:43:2c:24:67:c4:
                    79:83:0c:2f:bf:19:ad:87:d8:26:9d:4c:1c:b9:c8:
                    23:25:8c:70:39:04:85:7e:63:e9:2d:40:e4:d9:21:
                    6a:2f:b8:59:f8:82:2f:d4:00:9d:d4:6b:35:d5:fd:
                    8f:6b:33:d5:7d:4d:5c:d6:69:8a:a9:9a:ca:ca:37:
                    16:46:33:49:16:35:7b:07:9f:40:11:8e:76:69:45:
                    50:36:70:67:48:94:a3:6f:f9:0f:fd:e0:3f:0d:ec:
                    6f:54:09:77:05:92:e8:3d:6e:f0:2e:b2:b2:81:8e:
                    93:92:28:58:c7:39:31:f4:d8:2d:a1:c1:36:08:bb:
                    82:c3:5a:8a:1c:af:17:fd:5b:5c:7b:72:60:ba:39:
                    81:56:b0:b4:52:91:be:08:1b:f9:81:9d:5a:e0:d1:
                    d9:3d:8f:72:b2:8e:99:ef:18:78:76:ac:14:b4:56:
                    cf:03:ec:06:d0:f2:3d:b4:2d:c2:03:a3:34:2f:c9:
                    35:67:fc:ab:8e:4f:03:c7:5f:b4:50:83:de:a3:0f:
                    7d:e9:50:a5:e0:6d:0f:5b:13:9c:aa:e8:c1:07:ad:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:C3:3A:B6:2C:AC:C9:DE:E8:9E:46:CF:DF:02:A4:E0:A7:77:60:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/F9C33AB62CACC9DEE89E46CFDF02A4E0A77760F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18
                  177.136.128.0/19
                  189.1.128.0/20
                IPv6:
                  2804:f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28665

    Signature Algorithm: sha256WithRSAEncryption
         7a:0a:cb:97:da:98:79:41:8b:f0:4d:4d:98:4d:9d:94:44:06:
         89:3c:3b:ed:6f:4a:71:02:76:ec:2b:df:88:74:0d:c6:d8:9e:
         e4:ee:94:21:cd:5c:70:6b:50:28:77:0b:29:3b:25:59:fc:4a:
         eb:6b:e1:f1:48:c7:c6:fe:03:be:b2:a7:ee:28:98:ea:44:45:
         62:4a:7b:c7:82:51:36:49:60:78:94:d5:a0:c1:86:95:09:7d:
         d7:13:db:ab:f9:ae:c2:45:f7:70:27:13:f8:51:b6:df:62:f1:
         eb:1f:c1:03:49:b5:9c:26:20:ca:5b:97:5d:d1:63:42:08:2f:
         37:b3:cd:5c:36:16:b7:93:e8:f9:33:20:39:f6:5c:cd:d6:15:
         98:e2:98:ba:53:b8:c1:da:af:2c:b5:92:29:f8:8e:80:29:6b:
         b8:03:01:c4:5f:62:17:fa:8e:a4:f7:c2:2f:de:43:3f:74:2c:
         9d:d7:ae:d2:5b:a4:2b:60:39:76:36:fb:4d:8a:51:25:17:fc:
         49:1b:a8:09:a2:6f:c0:13:6b:dd:17:87:10:d8:48:08:55:5f:
         8c:c1:a6:db:a3:d1:16:ea:20:c9:c3:49:cc:a2:6d:25:0a:00:
         c6:b4:ad:c9:13:47:19:3e:6b:3c:af:f2:22:c8:72:68:25:e3:
         4e:7b:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org