Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.cer
File:                     1F9A49C248A696B5167DAB1D9B36795298FC2EC1.cer (raw, json)
Hash identifier:          lquDp8kZyvT6tajXh8BBBLITgyP7N9LFZ1SlSKTf5Ec=
Subject key identifier:   1F:9A:49:C2:48:A6:96:B5:16:7D:AB:1D:9B:36:79:52:98:FC:2E:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75873A42B7663932F58AD714C756CEE97E076CB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 04:50:58 +0000
Certificate not after:    Tue 01 Oct 2024 04:55:58 +0000
Subordinate resources:    AS: 263625
                          IP: 179.125.16.0/22
                          IP: 2804:1038::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:87:3a:42:b7:66:39:32:f5:8a:d7:14:c7:56:ce:e9:7e:07:6c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  3 04:50:58 2023 GMT
            Not After : Oct  1 04:55:58 2024 GMT
        Subject: CN=1F9A49C248A696B5167DAB1D9B36795298FC2EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:91:64:db:1e:c4:1c:5c:b5:9e:18:0c:ff:
                    8c:71:dc:c4:c5:ba:c2:d9:dd:cd:57:34:0c:7b:a0:
                    e4:ca:f8:90:5a:46:bc:0c:53:ff:61:cf:e1:5c:e8:
                    2b:5f:1f:af:95:53:5a:d4:bc:b4:63:fc:ef:80:ff:
                    96:d1:77:00:e2:10:ac:10:92:9c:ca:df:e0:4f:3b:
                    85:10:db:96:a9:2b:a1:3f:ca:4a:06:32:02:b8:d1:
                    a3:e5:49:86:2b:67:72:dd:ff:8f:45:0b:19:84:0d:
                    b7:ab:ec:37:c7:40:32:ab:37:0b:e7:40:59:9e:1b:
                    ed:b4:7f:02:fc:76:94:82:84:88:62:9c:fd:50:d2:
                    28:fb:75:3e:0f:53:be:fe:d3:0d:35:64:89:37:60:
                    2f:ca:ee:f3:b9:71:40:fa:b7:f3:39:52:c9:e5:f3:
                    9d:2d:ba:3c:22:4c:1f:28:6c:95:0b:0e:a0:d4:21:
                    dd:07:94:30:a0:6f:41:d6:67:b2:9d:04:6d:6b:93:
                    d6:07:33:2a:42:f6:43:1a:8d:d1:f3:75:9b:c9:cd:
                    36:dd:b7:2c:37:2e:af:22:90:f6:f0:0a:bd:54:46:
                    ba:bd:e1:db:0d:64:20:0e:75:68:b7:11:a6:22:45:
                    0d:eb:44:08:b0:cd:b0:3c:58:99:4d:3e:a1:32:5b:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:9A:49:C2:48:A6:96:B5:16:7D:AB:1D:9B:36:79:52:98:FC:2E:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.16.0/22
                IPv6:
                  2804:1038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263625

    Signature Algorithm: sha256WithRSAEncryption
         ae:ec:22:11:b5:30:a2:d2:7e:9b:03:ac:c4:82:1a:0b:77:5b:
         d4:ae:1a:70:be:b9:f4:3e:1a:73:23:94:f5:8d:9e:f3:82:a1:
         2b:6a:07:8c:c7:97:3c:9d:1d:37:94:8e:64:5e:68:02:92:10:
         1b:3e:a1:bf:1f:5b:cc:35:39:3a:da:99:ff:d5:8d:60:e9:18:
         a1:95:7d:4f:27:3f:db:1e:e8:c6:e5:8d:b7:aa:6f:c6:44:18:
         23:f6:25:50:28:3d:a0:f5:27:85:51:48:3a:1d:f4:ea:9a:8e:
         53:fd:26:54:76:f3:e6:89:2f:df:d2:6c:b0:09:35:82:f1:43:
         ca:2f:5c:46:42:04:d2:3d:9b:9d:b7:31:e8:fe:42:41:ff:98:
         cd:44:f3:d2:f2:7e:b4:c1:22:1a:73:52:f6:03:b9:ba:d9:d5:
         ba:f2:ff:03:82:cb:94:6e:80:d9:32:2f:c6:7f:e8:5c:07:89:
         9c:88:66:9a:8b:e5:8d:ba:c5:9a:2f:78:d2:4e:e6:ae:02:20:
         cc:aa:5e:3e:51:cc:dd:e4:b5:08:c0:47:6f:a1:12:3e:a7:74:
         20:14:df:8c:4f:5a:d6:87:a0:23:4c:81:0c:51:db:2a:04:d5:
         fd:cf:a8:9b:63:fa:89:63:25:c8:f7:7b:80:47:2f:51:ab:94:
         fc:67:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org