Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3.cer
File:                     0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3.cer (raw, json)
Hash identifier:          2PhfjAfW5BAlYpCa+Vqssz1UyRZhLlVcBtYuY7MNaAA=
Subject key identifier:   0F:10:41:BE:8F:9A:EE:E3:66:D7:D2:31:36:0C:7A:CC:AE:DD:FA:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2132E0E974D3B797CB124603699E4102A7792411
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8GBjw634nyyhbUXRXbmFedjDWGy4aaDt9JpmUdf69f1M/0/0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8GBjw634nyyhbUXRXbmFedjDWGy4aaDt9JpmUdf69f1M/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 15:17:10 +0000
Certificate not after:    Tue 20 Aug 2024 15:22:10 +0000
Subordinate resources:    AS: 268212
                          IP: 45.234.24.0/22
                          IP: 2804:4dac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:32:e0:e9:74:d3:b7:97:cb:12:46:03:69:9e:41:02:a7:79:24:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 15:17:10 2023 GMT
            Not After : Aug 20 15:22:10 2024 GMT
        Subject: CN=0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:fb:2b:49:ed:31:71:c3:b0:30:8d:c2:7f:
                    ad:ff:05:c5:a4:19:28:c2:34:f5:40:19:16:a4:91:
                    b3:ba:b0:c8:0c:34:3e:96:37:d7:73:83:31:35:49:
                    07:79:67:b7:48:77:29:f4:1a:00:ae:aa:86:c8:6b:
                    38:fd:f3:87:e2:f7:b0:4d:a9:82:5b:fb:4b:8f:5e:
                    fc:a0:1a:76:24:3a:42:c2:dd:c6:3d:ad:16:3d:d2:
                    90:1b:1a:8f:b8:b2:d8:ac:d4:09:a5:2c:e2:11:96:
                    21:22:6d:f7:ab:7f:4f:00:75:56:37:22:6b:01:27:
                    81:89:02:c1:3a:35:95:f8:30:93:e3:80:7c:e0:4f:
                    52:98:88:da:22:c3:d7:24:82:ce:2b:66:b7:86:80:
                    8a:33:df:1c:3e:d6:38:13:ad:4e:8f:59:b4:4e:9c:
                    6d:0d:1d:2e:a9:26:53:11:68:c3:7c:21:11:ea:37:
                    75:07:8e:84:bf:7f:fc:8f:29:61:7f:dd:39:78:2d:
                    f2:46:ab:7b:9c:ef:51:04:0c:66:9f:57:57:1e:23:
                    50:30:84:81:f5:a2:05:f9:f8:ec:c9:ff:c5:61:e4:
                    1a:5c:f8:aa:8a:6f:28:83:6a:db:3b:dc:e0:a2:78:
                    1e:68:40:cc:38:68:9c:86:8b:ae:a1:81:b4:35:96:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:10:41:BE:8F:9A:EE:E3:66:D7:D2:31:36:0C:7A:CC:AE:DD:FA:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8GBjw634nyyhbUXRXbmFedjDWGy4aaDt9JpmUdf69f1M/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8GBjw634nyyhbUXRXbmFedjDWGy4aaDt9JpmUdf69f1M/0/0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.24.0/22
                IPv6:
                  2804:4dac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268212

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:61:f0:21:43:4e:f4:2f:49:2b:75:a7:55:15:71:46:9b:
         81:e7:6c:24:63:a0:c5:ed:0d:16:a9:d3:a0:5e:6e:df:2d:82:
         24:a2:7f:8e:27:c5:3c:c4:7e:d6:23:65:54:1e:6d:47:9c:4e:
         0a:16:16:f5:0a:92:ca:fc:38:59:32:9d:79:56:47:36:96:d6:
         3e:55:35:35:87:74:27:6c:c9:97:11:3a:e9:54:b1:3c:d2:65:
         2d:b4:c0:2f:df:45:aa:af:9f:ba:78:bb:88:39:b2:cd:cf:2f:
         10:10:f3:c9:14:ae:09:8e:cb:3a:bf:8e:d9:72:91:3a:98:0a:
         05:8e:03:67:13:48:ed:a1:3b:5e:63:44:6b:05:bc:6c:1c:49:
         03:eb:e0:38:00:2a:d1:43:97:c2:c7:5d:54:50:5e:12:87:8e:
         df:65:88:c6:14:ca:24:64:c6:b2:95:42:3b:9b:7c:99:fe:4b:
         cc:53:98:a8:29:18:6a:b8:cb:e7:d1:69:33:7c:11:09:b8:2b:
         aa:be:16:a5:e2:3f:e0:f9:49:aa:05:af:43:68:98:a6:28:51:
         5b:b8:66:9f:8b:09:24:5b:11:31:38:06:90:99:fa:1d:4b:b9:
         67:2c:5f:e2:c0:5c:44:2d:c0:8c:e1:aa:79:07:e9:cd:fa:f9:
         74:50:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org