Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F9867939554340FF876B0019FF6C57940FF8214.cer
File:                     1F9867939554340FF876B0019FF6C57940FF8214.cer (raw, json)
Hash identifier:          ur43mO9rRh+PAzMsXPMqz37o2orxxNBmWUC+Zqrji/Y=
Subject key identifier:   1F:98:67:93:95:54:34:0F:F8:76:B0:01:9F:F6:C5:79:40:FF:82:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       463FF5B4A2210AB5B448E3491DB065D462D5B42C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1F9867939554340FF876B0019FF6C57940FF8214.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 13:07:01 +0000
Certificate not after:    Mon 19 Aug 2024 13:12:01 +0000
Subordinate resources:    AS: 265080
                          IP: 170.233.120.0/22
                          IP: 2804:3278::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3f:f5:b4:a2:21:0a:b5:b4:48:e3:49:1d:b0:65:d4:62:d5:b4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 13:07:01 2023 GMT
            Not After : Aug 19 13:12:01 2024 GMT
        Subject: CN=1F9867939554340FF876B0019FF6C57940FF8214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:92:dd:f9:35:15:38:27:e7:1b:6e:f9:a3:
                    26:0e:1a:74:c2:b1:48:fe:35:fa:93:46:a9:d8:f2:
                    9f:28:0f:0a:14:f3:3e:ae:3e:a5:f8:b9:01:40:e3:
                    dd:f9:ab:15:0a:1c:31:10:21:72:ac:6b:a2:cf:70:
                    3d:48:0c:5c:62:dd:be:c4:ce:20:bf:7e:57:de:e8:
                    6c:79:e9:40:d4:e4:20:f0:d9:c6:96:bd:f4:dd:19:
                    a7:48:a0:24:cb:cd:04:86:a1:b2:a9:a9:b7:9f:17:
                    18:16:c7:77:da:2a:ec:53:67:31:38:d7:79:33:a4:
                    84:fa:87:0e:8c:f1:10:76:ef:f3:78:91:36:a2:ce:
                    dc:e1:ce:14:a6:3d:9c:d7:32:32:b7:b2:aa:a1:8d:
                    7a:ed:74:fc:8b:1e:53:12:c1:19:72:e5:df:f4:30:
                    c4:aa:03:db:fd:69:4c:37:55:11:ce:5c:3a:70:f9:
                    ea:d1:2c:64:88:20:56:69:95:1c:dc:6c:74:e9:b4:
                    6c:86:a9:d3:b5:0d:5b:47:b6:ec:b6:80:b0:53:c6:
                    0c:c1:87:1e:31:97:89:f5:c3:10:0e:01:2e:74:ba:
                    75:23:08:08:aa:b5:a2:1d:72:fa:17:cb:4e:34:e7:
                    e6:ce:22:85:e6:14:41:96:72:9c:24:eb:20:8b:96:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:98:67:93:95:54:34:0F:F8:76:B0:01:9F:F6:C5:79:40:FF:82:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1F9867939554340FF876B0019FF6C57940FF8214.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/22
                IPv6:
                  2804:3278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265080

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:9e:2a:5f:31:46:e3:52:c7:a6:3a:ca:1c:fb:a0:1f:6e:
         4e:72:e3:3b:f4:2f:49:37:02:83:e3:a1:c4:f2:ef:d8:95:3f:
         67:0c:33:07:e2:66:02:dd:71:99:7f:93:3b:58:22:b9:11:f7:
         87:2b:e1:8f:3b:26:8e:ca:79:87:06:6c:e0:f2:3e:76:bb:a1:
         7f:4d:b7:f3:51:f8:ea:c4:03:c3:e9:25:62:f9:f6:d3:11:30:
         92:80:e4:6f:82:7c:d7:57:06:e8:68:cd:74:7d:28:b8:73:ab:
         8a:2d:4e:44:53:eb:45:cb:af:81:94:33:b5:be:31:84:61:63:
         99:0f:60:e5:c3:80:64:8d:97:2c:61:19:42:a9:e9:5d:3e:d7:
         24:25:fa:b8:1c:68:c9:c8:41:3c:44:11:40:79:86:c2:56:45:
         f6:b6:13:56:8c:86:28:5d:0e:c6:dc:bb:4f:9f:20:de:ca:af:
         03:35:29:e4:41:9e:6e:60:7a:d0:dd:7b:d4:d0:a3:8d:0f:ff:
         13:99:0a:02:50:74:6f:f0:f9:a3:62:65:e8:72:c2:8d:c6:ca:
         9b:46:1c:5e:5a:e3:5d:91:2d:0d:73:d6:72:b1:96:64:7c:79:
         f4:ec:90:4f:74:54:fd:0e:a2:de:62:11:53:fd:79:20:48:a5:
         e4:67:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org