Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.cer
File:                     1F0DF3C10B489849F826B52958C15E39B8524EEB.cer (raw, json)
Hash identifier:          sQNbYf/z7gv083AQCWUuF/gna26a5O1nlIUmL7R+/BI=
Subject key identifier:   1F:0D:F3:C1:0B:48:98:49:F8:26:B5:29:58:C1:5E:39:B8:52:4E:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A09EACCB88463A989AA19B87482CD5916471BDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 18:11:53 +0000
Certificate not after:    Mon 06 Jan 2025 18:16:53 +0000
Subordinate resources:    AS: 61775
                          IP: 138.204.36.0/22
                          IP: 200.229.84.0/22
                          IP: 2804:1928::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:09:ea:cc:b8:84:63:a9:89:aa:19:b8:74:82:cd:59:16:47:1b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 18:11:53 2024 GMT
            Not After : Jan  6 18:16:53 2025 GMT
        Subject: CN=1F0DF3C10B489849F826B52958C15E39B8524EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:a0:d7:03:76:f3:e9:94:47:9c:01:d5:bf:
                    12:91:ee:74:71:f5:1d:4c:93:32:cf:81:4f:54:36:
                    94:ca:7c:d9:27:f5:7c:50:25:11:68:40:ac:70:fe:
                    65:e5:f7:93:d4:f2:dd:92:59:91:ec:d0:fe:b1:f6:
                    88:34:d0:79:33:d6:ae:f5:2e:f9:4b:22:81:ff:77:
                    77:e0:6d:81:77:18:e6:89:39:90:49:cd:d3:3b:2a:
                    5a:6d:c8:61:7d:04:ee:2f:08:de:af:6d:14:34:0c:
                    66:66:ea:66:00:3c:b3:c7:aa:a4:01:5a:ea:b1:e1:
                    7f:cd:19:eb:4c:5d:39:7d:ad:90:c0:6a:10:d3:76:
                    96:11:16:cf:5f:15:19:36:42:f1:8c:64:33:06:e8:
                    62:74:e5:41:59:36:e0:b9:39:8f:b7:ed:fc:8f:2f:
                    1f:10:5d:3a:3d:d5:b0:70:70:69:a3:35:81:d0:5b:
                    77:5f:46:ba:c4:8c:e3:50:75:b8:1e:0d:8a:b1:7d:
                    60:06:38:fe:5f:7c:97:d3:e9:cf:53:b7:c7:72:f6:
                    23:31:fb:a2:71:24:89:83:d0:be:a3:eb:09:a0:4b:
                    ff:66:13:53:01:79:ea:d5:24:91:c2:4d:53:57:e7:
                    60:ad:a7:f9:ac:f2:3b:1b:49:9b:de:6a:b1:ad:89:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:0D:F3:C1:0B:48:98:49:F8:26:B5:29:58:C1:5E:39:B8:52:4E:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/0/1F0DF3C10B489849F826B52958C15E39B8524EEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.36.0/22
                  200.229.84.0/22
                IPv6:
                  2804:1928::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61775

    Signature Algorithm: sha256WithRSAEncryption
         a6:44:35:9e:26:0e:18:d2:97:55:ea:ef:ec:b0:6b:60:a4:04:
         e9:43:bc:17:21:14:88:49:d6:be:9b:4c:b1:94:e3:05:73:85:
         4e:2d:f8:67:7c:08:b8:c2:87:92:77:6b:13:05:fd:fb:fe:9a:
         81:8f:53:b3:8e:81:b5:cb:98:e2:dd:d2:55:49:c9:fd:e1:21:
         a7:85:b8:02:e0:95:41:f5:b1:e2:ae:a5:a5:a6:78:96:92:21:
         a4:cf:af:af:81:69:bd:c2:94:26:33:a6:1d:e0:7d:f9:08:b4:
         03:03:e2:9e:47:75:57:29:f8:1e:3b:2f:ae:76:bd:53:13:01:
         b6:5d:ba:2f:91:f4:a1:14:56:21:6b:59:22:c2:a0:3b:44:b3:
         0d:94:06:61:f2:d8:15:7b:8b:bd:2a:e9:62:5b:6b:bc:f0:7e:
         93:fa:0e:3d:0c:8d:5d:1c:05:23:a4:dc:64:51:f4:af:89:36:
         be:a8:70:44:c1:69:dc:38:d3:33:a3:2b:5e:4c:6b:ad:71:3f:
         c5:f2:09:56:17:d2:72:c5:c6:2e:b2:c3:ec:93:70:00:71:a1:
         2d:b8:63:b8:40:58:50:96:06:c1:c8:66:f2:11:c8:3f:d2:ef:
         bf:dc:6f:34:6a:c4:6a:67:a7:d7:78:9d:1c:9d:17:95:bc:7e:
         45:e2:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org