Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer
File:                     0FF897150A721E543538D1FB1C6A7C5017A68480.cer (raw, json)
Hash identifier:          LnCX/rbiILsYNVDlpKDW4FSOWlM0uSa8kM1V0y4hwCI=
Subject key identifier:   0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FAE46B445899780F466DFBEA8883052248AF173
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 14 May 2023 20:27:26 +0000
Certificate not after:    Sun 12 May 2024 20:32:26 +0000
Subordinate resources:    AS: 266247
                          IP: 45.6.216.0/22
                          IP: 2804:3d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ae:46:b4:45:89:97:80:f4:66:df:be:a8:88:30:52:24:8a:f1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 14 20:27:26 2023 GMT
            Not After : May 12 20:32:26 2024 GMT
        Subject: CN=0FF897150A721E543538D1FB1C6A7C5017A68480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:d2:e5:17:6a:0e:da:df:95:1c:d4:33:9f:
                    59:32:33:30:ac:c2:98:40:b4:9b:14:56:07:1e:81:
                    38:39:a2:a8:7c:bd:78:83:9c:f9:95:8c:1b:81:9c:
                    33:fa:0e:2e:c3:08:6a:32:b7:61:14:f5:22:9f:44:
                    34:4f:14:04:e1:fd:5a:25:66:8c:a2:28:75:dc:69:
                    72:58:ce:1b:18:41:9b:58:36:bb:53:50:93:0f:20:
                    47:25:fa:d0:23:8b:22:f2:d3:37:e2:68:92:93:5f:
                    0d:c2:0c:29:27:b3:4a:fa:37:19:b1:c9:a3:43:ea:
                    c5:27:bb:50:0d:03:e5:b7:54:70:05:63:6a:9b:a1:
                    5f:69:7a:37:5e:ee:76:f2:7c:5c:52:b4:ae:cf:6b:
                    bc:01:fc:9a:d4:2b:55:f5:69:d9:90:a6:94:a8:5c:
                    0b:34:35:73:33:13:30:ff:11:8b:e6:06:14:85:af:
                    4d:41:c3:a5:97:f8:84:24:f5:46:63:cb:f4:59:1e:
                    1b:65:fa:5a:67:f5:fb:6a:e5:1f:91:f6:57:b6:23:
                    d8:e0:e3:b9:8e:eb:3a:b0:c6:00:55:34:86:ad:57:
                    6f:c6:a5:5a:59:c4:af:e3:55:0c:8f:89:4e:f3:34:
                    df:35:36:44:c6:26:ce:60:1a:0b:c6:ce:3d:a6:f9:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.216.0/22
                IPv6:
                  2804:3d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266247

    Signature Algorithm: sha256WithRSAEncryption
         04:83:0c:78:ec:5b:eb:b3:30:df:7b:68:82:cb:c7:71:60:50:
         de:6b:db:fa:66:27:45:a6:a6:f3:bf:61:30:0d:91:1c:8b:aa:
         ca:11:ef:5e:55:b5:5b:be:7f:24:a1:56:8c:42:f1:dd:fc:bf:
         5f:b8:96:ea:f0:72:f5:52:e7:81:98:f7:e9:76:45:cd:b2:24:
         ac:b1:8d:df:c7:ec:fa:28:65:50:e3:56:ed:69:23:c5:20:0e:
         e9:3b:71:3a:1a:4b:ac:1a:dd:64:97:df:95:ef:56:59:cc:94:
         c8:4d:e8:80:58:2f:8c:f2:a3:e0:db:21:64:69:99:10:b0:0c:
         6c:7c:3b:4e:f2:08:7f:9b:99:5a:87:b3:e6:b7:39:9b:4a:68:
         68:73:e8:fb:b0:87:e6:99:b8:d0:5d:8c:2e:68:88:03:0b:be:
         15:d0:67:0f:31:02:af:7b:bf:d0:ac:99:8f:e3:a5:4a:38:b6:
         1c:8c:8a:9b:4d:a9:8b:f3:7f:c2:c8:c3:be:3c:3a:6b:f8:08:
         4e:e2:01:cc:fe:5d:9a:4d:12:6e:a1:4b:6c:42:b0:f3:99:91:
         22:9e:08:32:7f:a7:1b:f9:fd:b9:d4:a6:29:e1:d2:2c:e6:ed:
         ae:f1:b1:5b:3b:74:15:b0:b9:0c:02:c3:7f:ba:1b:fa:8e:86:
         92:71:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org