Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F50D59D177AB017D7F56E73A95750DE936FFBD9.cer
File:                     0F50D59D177AB017D7F56E73A95750DE936FFBD9.cer (raw, json)
Hash identifier:          SGbfxhz6qVH2wr013YpT6r/8jDWPbrYN4Ie1k1seyyA=
Subject key identifier:   0F:50:D5:9D:17:7A:B0:17:D7:F5:6E:73:A9:57:50:DE:93:6F:FB:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5740D0DA4FDEBA8336FD2164A19044D1BF2370AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/0F50D59D177AB017D7F56E73A95750DE936FFBD9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 19:15:23 +0000
Certificate not after:    Tue 04 Feb 2025 19:20:23 +0000
Subordinate resources:    AS: 271477
                          IP: 177.152.124.0/22
                          IP: 2804:7c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:40:d0:da:4f:de:ba:83:36:fd:21:64:a1:90:44:d1:bf:23:70:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 19:15:23 2024 GMT
            Not After : Feb  4 19:20:23 2025 GMT
        Subject: CN=0F50D59D177AB017D7F56E73A95750DE936FFBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:f2:f9:0a:99:52:7e:d0:21:bb:50:24:0f:
                    c0:dc:dc:fd:b0:0d:cb:f0:cf:46:6d:3d:97:93:78:
                    fb:58:e5:fb:f2:0d:0e:e4:b4:63:b6:99:cb:de:a1:
                    16:5b:d9:e3:3a:7a:a1:32:2d:ac:13:64:68:ea:2e:
                    a1:1c:99:48:a3:aa:c3:97:28:5f:fa:7a:7b:45:c2:
                    a6:e1:9b:70:ce:2b:5c:e6:c2:f0:88:da:40:79:2d:
                    b2:fb:e6:81:16:97:47:6f:57:34:51:03:ba:00:03:
                    89:5d:d1:9a:40:92:34:d8:f3:03:99:b1:dd:c4:bf:
                    b6:dd:e1:b4:bc:bb:7f:67:c4:74:fc:6c:7e:26:83:
                    56:00:50:5e:89:d2:b0:59:70:60:c0:eb:9b:68:34:
                    48:fd:46:79:72:6d:92:93:7d:0c:f8:61:b6:b7:92:
                    49:b3:a7:bc:ff:af:31:42:7b:89:72:db:23:07:6e:
                    2f:b7:45:58:f2:45:6a:0c:ed:fa:e0:16:8e:78:26:
                    55:04:c1:6b:b4:4e:8a:64:15:e0:98:ce:5f:e8:c7:
                    32:e9:21:a1:91:27:c4:e3:62:82:cb:e7:c6:51:fc:
                    c7:01:0d:33:96:e5:cd:af:10:6b:c6:d7:25:ab:33:
                    5f:78:bd:f7:d1:f5:21:55:a6:bb:ea:04:35:95:c1:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:50:D5:9D:17:7A:B0:17:D7:F5:6E:73:A9:57:50:DE:93:6F:FB:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/0F50D59D177AB017D7F56E73A95750DE936FFBD9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.124.0/22
                IPv6:
                  2804:7c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271477

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:c3:32:d5:19:df:0c:be:41:78:35:e4:9d:49:16:7e:f4:
         42:ee:8b:ce:e2:26:49:1b:7c:e2:da:56:2b:8d:b3:81:a4:9a:
         1c:c8:ee:ce:ff:43:0c:85:4c:35:3b:1d:7f:27:82:66:93:62:
         ba:e2:c8:d9:3f:6b:96:18:ab:1b:e4:8b:f5:d7:26:7a:3e:1a:
         fa:9b:22:0a:f8:eb:e6:d0:50:92:a3:2d:cd:20:bd:9a:fa:f7:
         ab:bb:ca:7c:c5:0e:d4:b2:24:00:03:ef:af:04:59:0d:ef:79:
         17:cd:29:7b:f9:57:b2:c5:1a:3f:74:7c:49:3c:a0:06:cf:38:
         44:53:51:c7:d7:59:ec:02:07:65:4e:71:ab:17:58:bb:b1:20:
         3c:1c:50:4b:7d:c3:52:80:ce:42:87:57:3c:b3:bc:49:0d:8e:
         0e:96:66:25:66:55:bf:a5:93:55:6d:0b:e4:14:6c:c7:08:cd:
         95:61:05:38:e3:f6:dd:9e:b7:5b:91:61:be:98:df:ef:a2:27:
         9a:46:de:4f:e4:de:c3:de:d1:e4:e7:97:a8:e7:82:a0:16:d9:
         63:0f:d2:59:c1:17:59:d6:4b:1f:4c:1f:fa:d5:9f:ab:0c:d6:
         a5:54:40:1e:7f:ce:13:c1:84:56:07:9e:c9:30:c1:41:14:84:
         8a:d8:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org