Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F33DBF074E846796BB02195D5AFA318BCC2A4DA.cer
File:                     0F33DBF074E846796BB02195D5AFA318BCC2A4DA.cer (raw, json)
Hash identifier:          VpJbFlJpk39oQRsZLoib/6NgoQlRbdbsA1+WzAsblhU=
Subject key identifier:   0F:33:DB:F0:74:E8:46:79:6B:B0:21:95:D5:AF:A3:18:BC:C2:A4:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       637FB75C8FD261D5A5BA2CFFF7398850F89B0636
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/0F33DBF074E846796BB02195D5AFA318BCC2A4DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 09:48:48 +0000
Certificate not after:    Thu 06 Feb 2025 09:53:48 +0000
Subordinate resources:    AS: 271658
                          IP: 131.255.131.0/24
                          IP: 2804:7ef8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7f:b7:5c:8f:d2:61:d5:a5:ba:2c:ff:f7:39:88:50:f8:9b:06:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 09:48:48 2024 GMT
            Not After : Feb  6 09:53:48 2025 GMT
        Subject: CN=0F33DBF074E846796BB02195D5AFA318BCC2A4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:99:4c:32:ae:e7:9d:2a:9e:8a:ee:cd:65:
                    c1:1b:06:4a:fa:f4:77:dd:29:11:b3:54:7e:05:ae:
                    65:44:12:17:c3:fd:7e:6e:61:15:21:d9:f7:f4:53:
                    27:f6:ff:4d:4d:33:7d:e2:e0:70:c9:fd:4c:11:4d:
                    27:cc:0a:f4:24:76:17:77:e5:5a:df:48:f9:12:07:
                    69:fd:58:ae:1c:3d:05:0e:ce:a5:d6:93:01:59:5f:
                    50:6a:db:4f:a2:ba:05:d8:0d:8a:27:22:a6:36:18:
                    de:eb:61:36:34:ee:f1:0d:d0:2c:70:89:9e:bc:cd:
                    da:43:ff:f0:0c:60:51:47:a5:bd:92:49:b6:58:6b:
                    cb:83:b7:5b:14:d0:2d:5f:bb:6c:cc:59:ba:c4:7f:
                    0d:96:f1:7e:ee:47:6d:79:52:f8:b3:fb:58:ff:3b:
                    46:ed:b2:3d:64:16:77:a2:2e:2d:c1:d7:f9:5c:fb:
                    9c:98:a0:12:cf:88:cc:d2:c7:b3:3e:83:e7:44:1f:
                    74:b3:58:38:4c:1d:79:e0:b4:a5:c7:fb:d7:4c:b2:
                    b2:02:b5:64:c8:14:e8:99:fc:0e:a0:85:08:cc:a3:
                    c8:eb:94:36:db:c9:cc:5b:6b:f6:b0:14:f5:f4:8f:
                    31:f8:c4:05:09:70:7f:36:36:8e:1a:79:50:0e:01:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:33:DB:F0:74:E8:46:79:6B:B0:21:95:D5:AF:A3:18:BC:C2:A4:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/0F33DBF074E846796BB02195D5AFA318BCC2A4DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.131.0/24
                IPv6:
                  2804:7ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271658

    Signature Algorithm: sha256WithRSAEncryption
         84:eb:a1:48:e9:66:4c:17:56:31:ca:52:32:ed:68:02:09:9d:
         5c:02:17:16:0f:7c:a2:e7:02:6f:52:26:66:9e:c7:61:8d:fc:
         5a:13:e8:07:a8:9e:5e:98:22:92:c2:80:2c:69:a3:b6:07:45:
         31:b1:69:5e:b8:c1:cf:1e:38:e6:d8:5e:ec:f4:ed:35:b7:f9:
         77:32:c8:f0:c4:2b:d2:42:ad:ff:de:ca:46:d9:c2:56:27:41:
         33:11:f0:d4:ea:cb:75:2b:29:da:ac:55:7f:79:79:3b:45:3a:
         2d:10:1c:63:9b:27:e2:11:a6:4a:16:26:bd:ca:07:3c:fe:83:
         e1:cd:d6:95:9e:fa:93:2e:43:58:ff:f4:68:21:c9:17:e5:b2:
         f4:d7:6f:a6:e8:1f:88:e5:bd:f2:38:21:5c:75:96:00:51:32:
         d4:24:75:63:10:88:ce:29:7f:3f:ce:b3:55:c1:6c:a3:87:66:
         c6:bd:4f:28:89:15:3f:77:4a:40:fc:89:16:74:e7:58:1b:af:
         89:0c:33:5a:d8:76:47:73:6c:d9:e6:21:b1:89:e8:77:6c:ab:
         3c:eb:94:0a:bc:8b:46:ed:d1:9a:3f:4f:68:3c:3a:2e:f7:6d:
         87:0f:48:b6:0c:5c:ad:6c:4b:2d:4f:98:50:b8:c9:b7:91:43:
         a5:6b:7c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org