Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FA65CF75626D221655891D023EE7D1DF08C74BE.cer
File:                     0FA65CF75626D221655891D023EE7D1DF08C74BE.cer (raw, json)
Hash identifier:          /VpCKauCmwnl+oNqTj3RuZzwhynEcJtizk31g9TCKgs=
Subject key identifier:   0F:A6:5C:F7:56:26:D2:21:65:58:91:D0:23:EE:7D:1D:F0:8C:74:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FD3E157BE2C185C2763C16FCB439BCD40119E77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AdaSao1CGNU5vATZhmchmSyH8kgSrBf3mwa4bR5GGk7Q/0/0FA65CF75626D221655891D023EE7D1DF08C74BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AdaSao1CGNU5vATZhmchmSyH8kgSrBf3mwa4bR5GGk7Q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 14:27:16 +0000
Certificate not after:    Thu 20 Jul 2023 14:32:16 +0000
Subordinate resources:    AS: 265893
                          IP: 131.196.56.0/22
                          IP: 2804:3f74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d3:e1:57:be:2c:18:5c:27:63:c1:6f:cb:43:9b:cd:40:11:9e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 14:27:16 2022 GMT
            Not After : Jul 20 14:32:16 2023 GMT
        Subject: CN=0FA65CF75626D221655891D023EE7D1DF08C74BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:d2:f4:8c:05:2f:1d:13:e5:fd:01:8e:26:
                    00:06:48:7a:8e:1c:6c:a9:a7:f9:24:84:c3:38:50:
                    ee:a7:f8:e8:5e:e5:db:2b:ac:62:96:48:fe:07:56:
                    08:e3:df:b5:bd:06:40:5b:cf:21:03:1b:77:71:80:
                    66:04:04:83:0f:8f:d5:eb:bf:71:1c:15:57:ed:cb:
                    06:7f:fc:7b:22:ff:54:24:d0:a6:87:07:10:f6:f7:
                    7b:3d:0b:51:3f:44:86:59:99:be:fd:ee:e5:a7:1f:
                    a2:22:01:66:6f:3f:ad:e2:7e:81:73:d7:08:44:96:
                    8b:24:26:1f:a5:b2:b7:85:10:9c:51:cf:2e:6b:dc:
                    20:f2:fd:d3:4e:3d:2f:a9:f4:69:c4:2a:4c:26:22:
                    ab:6a:27:b7:00:c1:0e:3e:8e:c8:da:43:93:d5:45:
                    9a:db:51:f7:45:f2:ce:40:6e:8b:f8:8a:f5:9c:b9:
                    5c:b6:89:57:8a:3e:85:69:4d:0b:1b:c9:1d:53:01:
                    a8:d2:c6:a1:0d:e5:aa:e5:08:ab:25:42:fb:b8:90:
                    88:7a:94:44:b7:34:9a:3b:21:1c:03:74:26:2a:37:
                    bb:28:23:4e:0d:89:8d:97:4a:e8:5b:37:a4:9e:b3:
                    18:67:1e:a9:31:da:a4:a5:13:26:5f:28:62:40:da:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:A6:5C:F7:56:26:D2:21:65:58:91:D0:23:EE:7D:1D:F0:8C:74:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AdaSao1CGNU5vATZhmchmSyH8kgSrBf3mwa4bR5GGk7Q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AdaSao1CGNU5vATZhmchmSyH8kgSrBf3mwa4bR5GGk7Q/0/0FA65CF75626D221655891D023EE7D1DF08C74BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.56.0/22
                IPv6:
                  2804:3f74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265893

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:3c:39:96:3c:9b:bb:73:5c:1d:4e:ed:a4:ff:3a:cf:ab:
         cd:91:6b:c7:eb:4a:3f:41:ea:b1:e1:81:54:c4:b7:24:84:ec:
         05:90:ff:fe:8b:c2:36:89:d4:c5:2b:33:50:c5:50:1a:5b:f2:
         0c:19:38:af:a3:6d:62:a2:1a:c6:aa:d7:99:98:47:b7:b0:d9:
         55:65:b3:01:a9:8f:37:9b:d9:57:93:63:34:49:8e:4e:4b:af:
         23:ca:4e:91:40:9d:6c:0f:87:1b:2b:8c:b7:a4:3c:96:8f:d4:
         52:8f:96:35:45:96:1e:bc:8c:fe:7d:80:06:4b:49:a1:69:09:
         0a:dc:1b:fc:95:b2:18:d4:21:b4:63:95:bb:84:fb:5d:fd:38:
         5f:92:8c:f9:35:5c:f2:cf:2d:6a:c8:88:12:64:9b:cc:47:6d:
         10:35:ee:91:70:90:de:82:e2:e3:53:61:2a:c7:63:ed:c5:df:
         00:0a:eb:34:db:69:bc:93:35:7b:95:ab:3c:c8:60:09:f2:ce:
         f9:ed:38:d0:62:d3:7e:0e:d0:0b:f2:48:3e:f9:f2:8e:bc:9b:
         c8:d7:e3:68:bf:25:21:8e:35:77:39:d7:01:b7:88:49:e2:c2:
         fc:a7:9e:f3:57:3f:9b:c7:30:87:06:ee:46:7e:61:10:c7:b0:
         9f:b6:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org