Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.cer
File:                     F3BDCD1528286CE48AC6FD653291774EA335B83E.cer (raw, json)
Hash identifier:          sCjg8CtIrvrHLmW0Zz/X7LDvkJgd2vyCg4Q+Gpa/ias=
Subject key identifier:   F3:BD:CD:15:28:28:6C:E4:8A:C6:FD:65:32:91:77:4E:A3:35:B8:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DB9E0002ADB4B8EC50F7F9DC4E7B2D548B59BD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Feb 2023 00:42:43 +0000
Certificate not after:    Tue 20 Feb 2024 00:47:43 +0000
Subordinate resources:    AS: 263321
                          IP: 138.117.24.0/22
                          IP: 168.90.24.0/22
                          IP: 170.233.204.0/22
                          IP: 191.7.136.0/21
                          IP: 2804:1440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b9:e0:00:2a:db:4b:8e:c5:0f:7f:9d:c4:e7:b2:d5:48:b5:9b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 00:42:43 2023 GMT
            Not After : Feb 20 00:47:43 2024 GMT
        Subject: CN=F3BDCD1528286CE48AC6FD653291774EA335B83E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:94:3a:ea:30:0f:f6:3c:ef:45:c5:39:a6:
                    98:48:f4:b9:dd:98:d2:77:2d:ae:c2:95:a2:b4:dc:
                    2b:6f:ee:0f:ff:1d:dc:aa:e2:94:50:3b:89:ed:8b:
                    6a:4f:34:ba:6c:52:08:05:d4:d2:b4:22:b4:39:5b:
                    e4:36:66:94:3e:56:4c:2d:c5:08:58:56:5e:79:29:
                    01:85:25:6d:87:12:f0:da:2d:b3:e6:90:ce:7e:52:
                    3c:98:ef:77:d0:64:78:c2:92:d0:13:45:c8:9e:a9:
                    0e:16:61:25:29:a2:e4:43:2d:5d:23:be:a9:3b:07:
                    02:73:2a:08:10:5c:cb:c9:3b:10:41:f3:8d:11:3c:
                    32:85:41:09:26:3b:a5:30:57:6a:66:a6:72:a6:2c:
                    d0:f8:e2:8f:14:5c:45:3e:b2:b5:ea:a9:b6:c7:e7:
                    1b:11:bf:1c:83:06:aa:c7:4d:69:fc:74:d1:50:ae:
                    83:4d:af:3a:2b:9d:57:f9:f0:ab:7c:2c:df:d9:d2:
                    45:83:a7:db:96:9a:8e:c0:8e:fc:04:6c:30:d2:ca:
                    97:b9:32:04:42:41:d4:d6:89:38:32:55:26:0a:fc:
                    e1:12:2b:c0:26:5d:b7:66:25:b4:b1:08:9f:3a:83:
                    18:9b:bc:dc:94:b9:7a:d0:58:6c:af:4b:ad:78:d2:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:BD:CD:15:28:28:6C:E4:8A:C6:FD:65:32:91:77:4E:A3:35:B8:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22
                  168.90.24.0/22
                  170.233.204.0/22
                  191.7.136.0/21
                IPv6:
                  2804:1440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263321

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:bd:db:c7:44:70:87:08:07:3c:48:03:9e:d6:0b:61:f2:
         31:47:d8:2d:07:ea:05:b6:8b:20:dd:7b:4c:04:41:32:e2:0a:
         71:d4:c6:37:ae:ff:78:30:95:72:70:47:d5:83:15:97:88:db:
         13:39:43:39:80:02:10:90:f4:5f:bd:57:18:93:32:d6:7b:db:
         1f:a9:3e:3c:32:c5:7b:a0:b5:bd:1c:3d:8c:39:8d:9b:6b:85:
         c4:41:0e:2e:c3:e3:07:a3:44:d2:5d:fe:7d:92:31:90:51:bf:
         1e:c2:84:d7:1d:c1:86:3d:ee:b8:e3:7c:e7:70:31:0c:86:5e:
         8b:fc:82:a9:74:8b:4f:14:62:1b:1c:8c:cd:80:e2:a9:a7:ec:
         96:b1:06:f1:71:d2:ab:89:4e:57:1b:f4:bc:6b:31:e5:8f:44:
         e6:27:16:46:e0:a7:f4:5f:0b:77:cf:d4:fa:86:b9:4d:85:7d:
         6b:ed:cf:46:28:55:98:9d:c0:2e:ee:d4:61:3d:42:81:53:58:
         34:c7:a3:a8:14:80:48:24:22:2c:18:3e:46:37:76:04:09:f1:
         35:2f:36:7f:3c:2c:76:63:52:72:bc:79:e3:f6:2e:f4:c7:79:
         d1:e2:79:c5:8e:95:6d:ff:95:e6:1d:e6:b6:7a:a2:ab:51:db:
         7f:9d:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org