Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
File:                     0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer (raw, json)
Hash identifier:          Fh2Hni/UZ0LUdCsCn53PdLWWXMY5xu9VBaMzXa+3X9Y=
Subject key identifier:   0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       741F7D033392BFDCFB3426C336E3CB9A94582E59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Jan 2023 18:24:51 +0000
Certificate not after:    Wed 10 Jan 2024 18:29:51 +0000
Subordinate resources:    AS: 262535
                          IP: 167.249.56.0/22
                          IP: 177.67.240.0/21
                          IP: 177.84.208.0/21
                          IP: 201.159.116.0/22
                          IP: 2804:5b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1f:7d:03:33:92:bf:dc:fb:34:26:c3:36:e3:cb:9a:94:58:2e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 18:24:51 2023 GMT
            Not After : Jan 10 18:29:51 2024 GMT
        Subject: CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:ad:58:5b:1f:cd:d6:4c:11:ab:83:e3:34:
                    39:4b:38:f1:54:e5:85:86:d5:bb:83:25:46:3a:20:
                    c4:25:5c:7f:03:30:96:f6:d1:8c:fa:06:11:da:a7:
                    6e:34:c1:60:85:5a:9d:83:89:95:c8:33:a2:79:f3:
                    13:35:e7:d3:a4:16:cb:ee:7b:b8:3b:b3:c5:1d:d1:
                    0b:be:64:ee:66:b8:0b:96:48:5d:c1:d8:bd:2b:81:
                    3d:da:ff:d2:0d:2e:7d:16:56:0a:96:31:b8:72:7d:
                    05:1b:9e:fa:e1:db:40:a9:ad:18:2b:45:ba:eb:8c:
                    0f:46:e4:76:4a:a5:25:5a:68:6a:91:63:e5:ab:aa:
                    df:4b:68:e8:55:27:07:36:65:35:0f:57:5a:ea:07:
                    37:55:a3:49:a0:b3:8e:46:f1:60:44:80:22:09:69:
                    eb:a6:f4:a3:d8:bf:29:48:d7:29:db:03:11:9f:67:
                    77:0a:ed:ec:83:ab:34:34:05:af:c1:ae:c8:8c:92:
                    dc:7b:82:33:f9:bb:d5:4a:44:1d:b1:ab:68:ea:82:
                    99:2c:4d:74:b6:19:7f:07:f3:fd:09:67:aa:46:54:
                    ba:de:6d:fd:b9:25:cf:aa:a3:9a:6b:b6:de:6b:c7:
                    35:57:3a:1a:94:be:e8:cb:35:c2:bc:32:5c:10:ef:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/22
                  177.67.240.0/21
                  177.84.208.0/21
                  201.159.116.0/22
                IPv6:
                  2804:5b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262535

    Signature Algorithm: sha256WithRSAEncryption
         84:13:81:c9:c8:9f:0d:46:4a:74:a4:76:cd:e6:6c:19:c4:ff:
         8f:f3:a6:f9:2a:6c:a6:a9:0c:e4:94:9d:bc:3c:bb:3f:88:f8:
         4c:57:b8:bb:11:b4:a3:f2:ec:cf:58:5b:36:fc:5a:86:03:dd:
         33:13:a8:8d:52:67:08:c7:99:3b:5c:e4:3a:7c:0b:6e:1e:48:
         db:ac:94:68:13:aa:88:73:c8:46:00:99:01:57:2a:80:17:05:
         da:3f:9c:64:42:5d:d7:62:5d:30:bf:f4:c8:cc:f3:c8:45:8d:
         24:50:ae:59:f4:92:0f:c7:22:a0:d3:ef:45:6a:4b:f2:45:40:
         0b:8b:42:ce:72:29:a3:8f:49:28:21:61:d7:53:66:de:18:e2:
         e6:d7:e6:58:4e:27:6c:ab:9a:84:23:ca:f2:84:e9:50:67:86:
         7f:70:da:e3:55:01:84:c4:c4:22:dd:82:5c:cd:43:b7:fa:a0:
         f8:b6:7e:22:06:d2:9c:3f:0d:93:b6:f9:0c:47:6f:4c:f8:6c:
         82:b8:31:ff:4f:cc:a3:17:bb:98:46:1a:39:7c:41:f4:6a:88:
         78:39:7c:04:b0:89:7b:2b:81:6c:a5:7e:f9:ee:da:53:9f:ca:
         53:b6:bd:bc:93:c8:63:f6:da:24:6e:d7:d9:6d:69:16:70:e1:
         38:6f:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org