Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.cer
File:                     04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.cer (raw, json)
Hash identifier:          8KQfntucIU1u49TBRXlacWdoTqvg2LeJNDNTrmnrak0=
Subject key identifier:   04:F0:01:56:B4:C5:8E:25:C6:78:88:7B:EC:E6:D0:A7:D6:C5:E2:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       500DBB18724AA7BBEB33F19C5E63F8485698B84F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 13:34:08 +0000
Certificate not after:    Fri 15 Nov 2024 13:39:08 +0000
Subordinate resources:    AS: 266631
                          IP: 128.201.140.0/22
                          IP: 2804:3ef4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0d:bb:18:72:4a:a7:bb:eb:33:f1:9c:5e:63:f8:48:56:98:b8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 13:34:08 2023 GMT
            Not After : Nov 15 13:39:08 2024 GMT
        Subject: CN=04F00156B4C58E25C678887BECE6D0A7D6C5E2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6c:d2:56:b0:11:eb:53:9c:f1:b8:47:09:d5:
                    66:e4:62:99:39:f6:24:fe:b4:c7:76:3a:02:8b:57:
                    9c:23:ca:24:bc:87:17:7f:27:a3:6f:76:73:54:be:
                    dd:37:38:fa:b8:fa:be:d1:7b:b7:81:37:11:ef:12:
                    d4:98:69:9b:64:8a:84:ba:ad:4a:93:44:0e:43:d9:
                    b2:63:3b:02:8a:e4:be:2f:37:b0:d9:2d:80:c0:be:
                    0a:fb:9b:89:cb:09:4a:d4:3c:85:dc:2c:e0:fb:7d:
                    c9:d0:35:5c:fa:78:a0:b2:5f:1b:c3:39:11:69:88:
                    2f:f8:14:b8:c4:18:50:a8:12:2b:71:a2:41:ba:84:
                    d6:1b:e7:9c:2e:84:30:71:b5:9f:43:aa:43:d4:22:
                    d3:53:b8:da:43:33:9e:7f:e5:20:02:cd:7a:8b:8f:
                    48:52:91:3d:85:07:ab:37:0b:fd:66:d3:81:c0:00:
                    36:8d:16:82:48:2c:55:03:be:72:ff:90:30:c9:15:
                    89:32:e4:1d:7b:cb:79:75:7d:20:6c:02:c6:d6:67:
                    3c:37:3e:20:2b:ba:ed:0c:d3:07:c1:df:ec:d2:53:
                    f3:57:39:70:ce:20:dc:95:c4:29:20:3b:a3:02:71:
                    ee:85:ce:e6:d5:de:50:4b:1e:01:31:9e:3f:95:96:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:F0:01:56:B4:C5:8E:25:C6:78:88:7B:EC:E6:D0:A7:D6:C5:E2:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.140.0/22
                IPv6:
                  2804:3ef4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266631

    Signature Algorithm: sha256WithRSAEncryption
         a4:9a:d6:c4:3e:93:2e:9e:e5:60:2c:b1:82:a2:43:95:f1:fa:
         52:1b:a3:3f:51:2d:c5:cc:4f:81:d5:6c:b3:2d:ef:87:e3:43:
         80:87:7a:79:5d:be:19:05:d9:21:13:11:73:c2:8d:25:01:32:
         3b:8a:b6:ab:02:eb:07:66:d6:15:db:1d:41:66:0d:bc:f5:09:
         a9:b3:d7:34:e2:5e:03:a8:12:00:32:fc:7c:48:bf:be:f4:45:
         8f:5b:54:da:cc:f3:87:b8:2d:0b:bd:da:de:c6:00:e5:ac:2c:
         97:2d:a5:ed:88:66:a7:6e:fc:ad:b7:bd:25:03:4e:4b:24:9b:
         cc:73:c3:c3:ed:ed:31:7b:89:8a:f9:06:53:c8:53:d9:b1:e7:
         21:9b:75:4c:8e:dc:10:52:3a:4b:ae:fa:72:e3:3a:ae:7b:4d:
         a0:14:d7:ca:0c:cc:ce:8f:4d:6d:6f:69:3c:03:44:d4:37:be:
         99:5c:aa:0d:fd:2b:f7:c0:06:fb:b1:28:20:35:bd:5a:7d:53:
         b9:bd:82:08:19:79:e7:19:1f:23:15:3f:2d:fa:b3:d9:8b:27:
         f2:a6:a7:84:ff:43:6f:b3:95:d2:c3:1d:cb:c8:7a:e3:51:a4:
         c0:d0:36:e4:da:91:d4:08:99:c8:12:62:f4:d9:9a:f5:a1:3c:
         00:d9:a1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org