Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F7198A51EAA28259172F3904E50E0ED71514278.cer
File:                     0F7198A51EAA28259172F3904E50E0ED71514278.cer (raw, json)
Hash identifier:          xyA+g67VyMObAgOX+JxqAPIjRK71jxy9h5j0Du9xMHw=
Subject key identifier:   0F:71:98:A5:1E:AA:28:25:91:72:F3:90:4E:50:E0:ED:71:51:42:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F1087A5DEBBEA890642E54226F4C995B676A30A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/0F7198A51EAA28259172F3904E50E0ED71514278.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Jul 2022 15:04:23 +0000
Certificate not after:    Tue 11 Jul 2023 15:09:23 +0000
Subordinate resources:    AS: 267602
                          IP: 45.71.84.0/22
                          IP: 2804:4418::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:87:a5:de:bb:ea:89:06:42:e5:42:26:f4:c9:95:b6:76:a3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 15:04:23 2022 GMT
            Not After : Jul 11 15:09:23 2023 GMT
        Subject: CN=0F7198A51EAA28259172F3904E50E0ED71514278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:71:7b:a8:61:76:ad:80:92:5c:04:97:eb:
                    0a:db:98:22:e8:08:27:75:80:2b:05:20:4f:8a:b1:
                    2c:89:05:8d:84:94:71:ec:d6:7b:3f:fa:3f:fd:d6:
                    5f:5e:13:71:56:c8:82:81:be:38:5c:d7:6a:96:7b:
                    0c:b1:76:c7:08:21:df:ee:ff:2f:15:55:ff:48:0d:
                    7c:c5:b4:33:e5:b3:29:50:eb:ee:b4:cc:0a:59:81:
                    d9:4d:dc:7d:05:48:33:df:62:ee:75:ca:f4:ea:81:
                    a0:66:7a:f1:ed:dc:c8:3a:2f:41:ff:e2:d9:f2:ce:
                    7b:5c:ae:20:62:bd:cc:3f:77:af:f7:5c:82:9b:4c:
                    c4:ff:b7:9d:71:7e:aa:95:5e:91:71:17:2d:22:59:
                    8b:af:42:1c:9c:b1:2a:21:dc:56:73:5e:7b:92:a4:
                    15:8e:09:1f:2a:a4:89:e6:8e:5a:91:52:da:f6:33:
                    ed:3a:c5:29:17:4a:e4:bb:f4:fc:6d:67:b1:ba:53:
                    ef:e9:7b:40:d6:c3:4f:c3:8e:19:d2:61:35:bc:6c:
                    92:fd:2b:49:e8:a0:b9:ad:ef:d2:a1:7e:dc:a6:c9:
                    20:c5:e9:f4:f2:79:70:16:c2:3c:69:07:b7:80:a3:
                    1f:5a:04:2e:f2:c5:5c:2d:74:1e:a9:0d:a6:75:ff:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:71:98:A5:1E:AA:28:25:91:72:F3:90:4E:50:E0:ED:71:51:42:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/0F7198A51EAA28259172F3904E50E0ED71514278.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.84.0/22
                IPv6:
                  2804:4418::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267602

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:8e:05:00:98:98:ca:db:e8:c1:e7:65:74:98:a7:dc:55:
         9d:51:95:79:5f:f5:b4:c7:3b:58:77:59:19:fd:3a:bb:61:cb:
         ee:7a:9a:79:56:d7:68:09:c2:8e:36:19:a4:40:9b:ad:ec:fd:
         f1:40:b3:15:22:90:68:1b:b8:b5:2f:25:ba:a4:a6:e8:93:21:
         7e:e2:24:a3:49:45:3f:f2:a8:a8:ec:6b:64:81:6c:92:a3:60:
         9e:ae:9d:99:40:e2:a4:f7:51:18:22:28:0e:26:02:b4:1b:cd:
         92:ae:26:52:db:86:92:7e:81:b2:16:e0:d3:ba:5e:6b:87:ec:
         1f:d0:12:b5:74:fb:51:01:ed:ba:57:c8:98:88:9e:b1:c4:e5:
         c8:10:0e:3c:e7:8a:60:13:8c:c6:2f:a2:d3:46:bc:54:f6:4c:
         c7:b9:42:58:10:1c:2f:81:2a:17:fd:9b:d5:28:72:fc:71:e1:
         6b:79:19:2e:a1:6b:8c:aa:da:e2:4c:bb:5e:ce:65:c0:0e:96:
         ab:04:3d:94:e8:26:0e:61:ad:4f:73:c9:65:0c:30:c5:fd:ea:
         ec:37:e9:4c:22:35:08:40:a6:a5:05:76:ca:dd:25:73:d4:a1:
         da:b1:fb:5f:25:bb:40:a4:45:e7:d9:3a:53:54:bd:d4:48:2b:
         21:a8:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org