Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer
File:                     00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer (raw, json)
Hash identifier:          yODwtz/AjRyXUqMP0BMlxhY4bwVcC/l9Kas1x5SDQ6k=
Subject key identifier:   00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F6DCCA6530D6D11BB994A6D92D23F6ABAB01B78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 23:28:36 +0000
Certificate not after:    Fri 28 Feb 2025 23:33:36 +0000
Subordinate resources:    AS: 269441
                          IP: 45.185.36.0/22
                          IP: 2804:64ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6d:cc:a6:53:0d:6d:11:bb:99:4a:6d:92:d2:3f:6a:ba:b0:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 23:28:36 2024 GMT
            Not After : Feb 28 23:33:36 2025 GMT
        Subject: CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:f3:5a:33:70:06:4e:4f:5e:01:b2:ce:bc:
                    79:2b:41:db:cc:1b:5f:f9:7f:30:a6:13:cb:e0:b7:
                    a4:f5:9d:c4:62:5f:f4:ad:30:6c:ff:3d:b2:3a:40:
                    89:2c:40:22:61:34:7f:15:22:6b:20:a8:68:37:19:
                    97:cc:c8:e2:38:b3:42:24:62:d4:2b:38:99:e0:c6:
                    44:86:5b:1f:1a:c2:d5:5d:50:06:2e:99:6b:0d:86:
                    5d:a8:14:a8:80:71:7a:02:2d:7b:91:dd:67:89:f2:
                    3a:c6:e9:14:52:9a:45:7f:0a:93:0f:0b:d1:b4:18:
                    88:2c:84:51:e6:f6:32:f0:09:4e:fa:ba:ac:e3:44:
                    5c:dc:a4:c5:3d:4d:4a:88:48:8b:1d:ca:de:79:f1:
                    6b:8e:57:c8:18:a0:0d:c0:47:b5:80:71:ae:c6:34:
                    5f:24:a6:27:b9:13:27:a2:5d:90:f8:ea:07:72:7c:
                    d4:e0:0c:f9:4d:ae:5e:35:dd:e1:d3:05:fa:0a:de:
                    d7:dd:62:ef:a9:ac:de:c7:9b:92:1d:05:16:4d:c1:
                    c9:16:c2:d6:7f:37:4f:d8:e8:27:f9:0f:0c:c5:fb:
                    12:c7:5d:82:28:52:90:8b:95:52:82:eb:3c:b5:ea:
                    58:63:11:18:d5:a6:f5:e0:c7:da:2b:5e:ad:3d:6b:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.36.0/22
                IPv6:
                  2804:64ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269441

    Signature Algorithm: sha256WithRSAEncryption
         54:50:c3:20:69:13:e2:5b:e0:4f:1d:3c:17:38:19:35:01:3d:
         7f:41:7d:04:09:ab:46:e9:0d:43:3b:91:7e:d5:4e:28:55:81:
         66:5c:51:1c:45:31:d9:d0:97:08:25:b0:53:cc:33:5b:79:64:
         75:0a:4d:6a:89:26:71:56:f4:56:60:b8:d7:f6:18:33:8d:30:
         55:47:1d:4b:bf:b2:91:b6:c0:f5:18:e4:02:e0:ba:30:47:77:
         17:61:13:cf:ed:55:d2:27:cf:3b:80:1a:bd:c6:73:2d:fb:c1:
         a4:a9:d5:a6:a9:3a:b9:78:2f:fb:c3:14:5c:38:20:3c:4f:fd:
         88:fb:db:d8:38:73:09:e4:29:41:df:21:32:f9:91:38:e2:88:
         35:9e:5b:e4:8f:44:9b:4d:2c:a9:e1:70:04:b6:1f:1b:58:3b:
         e8:a4:c8:71:d6:af:04:60:46:40:7b:ce:3f:56:9c:64:e4:5d:
         a7:76:4d:4b:2a:95:4e:08:4d:c8:81:e9:00:ac:89:85:8b:0a:
         d1:d6:0a:fe:06:37:52:64:65:c4:fb:b4:bb:97:d9:2b:f4:15:
         91:91:f0:53:38:eb:d0:19:b4:e9:52:2d:7f:3c:81:41:fe:96:
         8d:6c:8b:36:9c:9b:81:b1:cd:80:8f:29:a0:15:ba:32:df:fc:
         a4:26:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org