Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F85F0D9ABF8B6F60A15034647E253E33B612E21.cer
File:                     1F85F0D9ABF8B6F60A15034647E253E33B612E21.cer (raw, json)
Hash identifier:          gzY0cT/Ta2w2SyNXUDBW/yHyF2IBb7UP9gFi8C74JRo=
Subject key identifier:   1F:85:F0:D9:AB:F8:B6:F6:0A:15:03:46:47:E2:53:E3:3B:61:2E:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FB46DF54A5295B0E53CC0260B1AE448D4CC215F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/1F85F0D9ABF8B6F60A15034647E253E33B612E21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Feb 2023 17:57:22 +0000
Certificate not after:    Thu 01 Feb 2024 18:02:22 +0000
Subordinate resources:    AS: 271529
                          IP: 181.174.248.0/22
                          IP: 2804:7cf4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b4:6d:f5:4a:52:95:b0:e5:3c:c0:26:0b:1a:e4:48:d4:cc:21:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 17:57:22 2023 GMT
            Not After : Feb  1 18:02:22 2024 GMT
        Subject: CN=1F85F0D9ABF8B6F60A15034647E253E33B612E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:a2:ae:2b:b5:07:f8:51:89:f5:6e:ac:a9:
                    4c:e1:43:be:6d:a7:73:57:22:2e:49:22:93:b5:46:
                    cf:12:77:46:fd:05:a9:1a:01:76:cf:00:69:49:4d:
                    24:f9:36:df:87:21:4c:ff:ef:a1:6d:01:3a:4c:b7:
                    b5:b5:f3:c8:d0:b6:46:ce:5d:a8:f5:3b:d4:d1:dc:
                    d8:2f:08:4c:d7:a1:72:da:fc:63:31:ac:f3:29:3b:
                    74:62:33:1e:5f:4c:24:c7:a3:33:90:73:fc:c1:d5:
                    e1:0f:e4:85:91:41:ce:ce:11:98:fc:2f:aa:6e:4f:
                    00:a0:e5:79:b5:b8:15:9f:f6:41:e8:46:63:b5:3a:
                    c9:18:21:e2:65:de:57:9b:34:7e:24:01:78:82:9c:
                    12:79:6c:7d:cf:18:49:a2:01:d3:ed:3f:b2:6c:2a:
                    be:c8:7e:7b:36:7a:37:c6:22:dd:22:0b:32:8f:14:
                    13:b8:ff:28:b9:36:05:45:fe:2b:28:8e:26:71:a1:
                    e0:e1:32:be:fd:7e:ae:71:ad:9c:1e:96:ce:de:2c:
                    71:1e:9e:f7:15:b3:6f:02:da:68:5f:e8:35:7a:2c:
                    de:1a:81:17:6c:33:ee:17:e5:73:e4:1a:97:f5:37:
                    75:d3:d4:d5:04:0e:51:9f:87:a0:43:21:c1:aa:14:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:85:F0:D9:AB:F8:B6:F6:0A:15:03:46:47:E2:53:E3:3B:61:2E:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/1F85F0D9ABF8B6F60A15034647E253E33B612E21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.248.0/22
                IPv6:
                  2804:7cf4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271529

    Signature Algorithm: sha256WithRSAEncryption
         a1:0e:59:fa:29:ae:49:80:1e:f3:d5:9a:fc:b5:4b:4f:51:05:
         a0:e9:30:1a:0c:1b:02:26:7b:95:50:69:40:7d:c3:5a:45:0c:
         0f:e6:5e:29:76:8f:f6:84:73:54:f3:08:40:57:8b:52:fa:37:
         5b:00:6f:d9:d1:ef:db:c7:a7:a1:5d:57:eb:5e:0f:91:e5:67:
         d9:19:a1:1b:dd:ea:9d:89:ac:40:f3:f9:3c:b5:ff:ca:5d:a4:
         f8:59:1c:af:bc:51:49:50:da:b0:8a:3a:1c:d8:62:fb:58:e2:
         90:33:0f:73:46:cd:2d:8f:92:e4:ce:71:87:9f:4d:13:21:9c:
         5f:f2:87:e5:26:d0:15:3b:70:92:23:d7:81:3c:d4:5d:2e:00:
         b2:16:f5:ed:ca:a9:79:45:54:99:4f:77:0e:03:65:9f:0f:59:
         0f:60:cc:ac:71:8f:bb:71:e5:ac:01:68:ec:e3:52:18:f5:89:
         d8:a0:41:f0:b7:82:2a:e7:d5:e4:09:dd:a4:07:66:b2:cb:37:
         ab:fa:56:fd:1a:fc:a0:06:fc:e7:0f:a0:b9:ac:2a:81:6e:29:
         e1:d0:bf:c9:92:4d:0a:83:64:7c:9f:d3:57:99:17:a8:22:ca:
         c4:20:81:9c:39:53:4d:2b:c2:8d:d8:28:12:59:8b:00:6e:da:
         27:8c:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org