Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.cer
File:                     0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.cer (raw, json)
Hash identifier:          ik3DYwaIzRTM1PVhnI2WbHvIGmDBffAYxPAsJEs3pt8=
Subject key identifier:   0F:A7:C8:49:27:E8:14:47:CB:E8:A0:F3:C5:AB:1A:D1:8C:8D:25:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0199BC519B1D14B195B58AB72DA620824F1767A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 22:47:51 +0000
Certificate not after:    Fri 15 Nov 2024 22:52:51 +0000
Subordinate resources:    AS: 264157
                          IP: 138.99.76.0/22
                          IP: 2804:2358::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:bc:51:9b:1d:14:b1:95:b5:8a:b7:2d:a6:20:82:4f:17:67:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 22:47:51 2023 GMT
            Not After : Nov 15 22:52:51 2024 GMT
        Subject: CN=0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:7b:2e:bb:59:aa:72:92:9f:77:98:2a:75:
                    22:42:e7:1c:bf:4f:32:35:7f:7b:26:11:be:7c:66:
                    86:74:26:f8:22:21:8c:b7:f0:6a:d0:71:73:ea:ea:
                    9e:0d:d6:f9:00:67:cc:2b:a8:56:38:2e:2e:13:a6:
                    a2:df:37:8c:20:ed:f4:23:b0:3d:0f:cc:aa:61:bc:
                    24:32:29:cd:2f:af:c4:35:a5:62:23:f3:dc:ae:2b:
                    70:3f:22:86:32:17:c8:1b:4a:16:6a:4d:18:58:81:
                    44:1d:b5:0b:44:a4:73:de:7f:85:66:8e:2d:e3:11:
                    0c:9c:0e:dc:cb:88:93:ab:89:8c:b9:2b:1e:65:75:
                    ff:60:e4:b9:6c:07:4f:35:e4:dd:c6:5b:63:58:8a:
                    dd:4a:aa:01:fd:4f:b1:b9:2f:94:74:86:60:ef:ab:
                    da:52:5c:d2:83:27:a3:ff:1b:ec:d2:17:8f:cb:ae:
                    0b:73:e3:09:eb:b2:c6:01:a1:3d:c1:3c:44:bb:74:
                    69:03:1c:a2:4a:03:92:eb:35:fc:84:cc:5f:bb:4b:
                    30:53:dd:b4:b3:77:62:9c:70:1e:f3:a5:6f:e2:fd:
                    1d:39:c9:f2:b0:b7:58:f9:73:bd:03:13:fc:e9:91:
                    6e:d4:26:1d:4d:b4:17:5a:45:42:f1:e0:f8:16:a6:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:A7:C8:49:27:E8:14:47:CB:E8:A0:F3:C5:AB:1A:D1:8C:8D:25:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.76.0/22
                IPv6:
                  2804:2358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264157

    Signature Algorithm: sha256WithRSAEncryption
         30:af:13:4e:cb:cc:fc:63:04:c8:a4:9a:01:cc:e9:7c:6e:e0:
         60:35:fd:ea:b4:2c:f8:2b:52:cb:d3:9e:bd:7c:9c:ac:b5:86:
         a2:ce:e3:97:d3:09:34:ab:0e:a7:10:4e:dd:4d:af:43:7e:3e:
         98:d9:97:31:bf:8f:4e:ca:27:c9:cf:be:7d:a8:d9:57:12:0a:
         4f:40:86:46:c1:90:87:84:47:39:92:14:01:6a:5b:ed:c7:72:
         8f:5a:b6:fc:97:f2:3f:3a:08:77:f3:64:02:7b:7e:9c:f6:b3:
         1d:58:82:77:6f:da:55:2c:a1:7b:61:43:c0:02:82:b5:ab:4e:
         9f:ef:f8:88:71:2e:7c:dc:25:30:5b:3e:f2:8b:07:70:da:16:
         6e:46:71:e0:4a:ac:bc:4e:52:f0:31:9b:66:77:54:3f:ac:22:
         15:65:da:65:13:26:7c:b5:1b:d0:e0:04:63:61:c7:8b:0e:93:
         fb:a7:ac:68:36:c2:cf:87:9f:4e:f5:34:63:f4:e4:34:ee:89:
         47:d9:c6:55:54:ae:91:85:a6:af:fd:0e:f3:18:75:e1:bc:8d:
         2b:8d:12:af:1a:4f:ba:72:d8:db:93:20:e1:a1:50:8b:28:da:
         76:73:5a:92:34:a7:46:bd:48:1c:70:9e:83:5b:5a:c3:27:be:
         b5:d4:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org