Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F44793935E5A2CB02EE27167883178091FEC5B5.cer
File:                     0F44793935E5A2CB02EE27167883178091FEC5B5.cer (raw, json)
Hash identifier:          01IjjQ1A6NWqjoofc1zQG4kh3GEOZTm5HXOEG0kNN4E=
Subject key identifier:   0F:44:79:39:35:E5:A2:CB:02:EE:27:16:78:83:17:80:91:FE:C5:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CABF640D4AF4471D953D5225E1A3BCF871AF156
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/0F44793935E5A2CB02EE27167883178091FEC5B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 13:44:21 +0000
Certificate not after:    Wed 18 Sep 2024 13:49:21 +0000
Subordinate resources:    AS: 263950
                          IP: 138.255.0.0/22
                          IP: 2804:2840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ab:f6:40:d4:af:44:71:d9:53:d5:22:5e:1a:3b:cf:87:1a:f1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 13:44:21 2023 GMT
            Not After : Sep 18 13:49:21 2024 GMT
        Subject: CN=0F44793935E5A2CB02EE27167883178091FEC5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:7e:ac:6a:7f:a6:15:2e:9b:b0:db:16:ed:
                    a8:24:06:0c:60:51:97:b1:aa:f9:44:26:a4:09:63:
                    3a:00:d3:a2:69:15:95:87:00:d9:e7:63:62:77:b9:
                    5c:05:61:e2:c9:e6:4c:de:3b:26:f8:92:13:f0:e0:
                    01:89:a6:68:39:2d:0c:f3:97:c0:94:54:e0:e8:3f:
                    60:98:1d:21:8c:36:fb:51:25:6f:dc:e7:38:e0:34:
                    3e:52:00:af:31:ac:5d:7e:be:75:b7:0b:0a:1b:ba:
                    65:21:35:47:17:f7:37:05:92:a3:14:5b:71:54:2a:
                    09:0e:0c:7f:6d:a4:d4:9b:50:02:e4:d0:65:b3:3d:
                    64:3e:61:4f:62:b2:90:f1:fc:c7:fb:01:62:68:9b:
                    c4:21:50:ae:73:fc:b5:8d:57:94:0d:cd:da:7d:ba:
                    a6:02:50:aa:36:f4:5b:21:23:e6:ab:f4:46:24:a1:
                    0b:b4:8f:ae:f1:47:38:5b:89:cd:d1:cd:49:fa:3c:
                    92:ec:ed:1a:04:25:6d:ef:d9:7a:0c:02:98:b4:7f:
                    6a:31:73:ac:e5:e7:75:b7:5e:30:63:4c:a5:6a:d2:
                    0f:69:a3:cc:5b:dd:3a:87:a9:6c:61:42:a5:ad:df:
                    9d:8b:d1:fa:99:f3:91:cf:ab:14:e6:93:c3:90:5a:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:44:79:39:35:E5:A2:CB:02:EE:27:16:78:83:17:80:91:FE:C5:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/0F44793935E5A2CB02EE27167883178091FEC5B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.0.0/22
                IPv6:
                  2804:2840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263950

    Signature Algorithm: sha256WithRSAEncryption
         a2:65:c0:83:4e:5e:6b:3c:6d:2d:0b:2f:4d:4f:9b:94:1f:29:
         df:53:76:4b:a1:ae:07:2b:59:d1:e0:87:b4:ad:5c:11:2c:85:
         d1:34:fb:e1:ed:a4:60:6f:9c:8e:84:2f:d5:43:32:81:6f:06:
         23:9c:c5:f7:e7:d0:d7:35:16:27:82:9a:41:f9:ce:2b:2c:0d:
         0f:a1:96:75:f3:a8:62:af:02:12:83:ba:5c:4d:fd:81:b1:7a:
         4b:de:cd:dd:f7:07:34:90:48:45:59:c4:85:85:ae:7a:6e:b7:
         21:34:be:01:d6:23:62:25:24:d1:20:f9:7c:d7:e9:65:2e:9e:
         07:c8:fc:77:15:e8:f9:7d:be:d1:e9:dc:63:41:34:a7:15:9e:
         2d:ce:ec:74:60:bb:17:67:45:71:53:b3:29:b1:57:fc:37:d1:
         3e:ca:9f:95:71:2a:86:c3:35:95:36:11:61:f4:12:c4:13:90:
         2c:f6:63:77:1c:1a:45:db:df:b2:91:4e:e0:8e:e7:18:7f:ce:
         71:6a:27:56:52:a2:ef:9b:25:d4:7d:6e:10:fb:62:cc:8b:64:
         66:b0:3f:0f:c6:8d:32:11:ea:e7:1b:d8:3c:01:70:ff:50:46:
         3c:74:07:76:54:06:53:4b:ec:78:cf:2c:86:f8:cf:27:e1:18:
         35:d4:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org