Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1FB1CC39904AE9D237F63768EFF474DEF318288A.cer
File:                     1FB1CC39904AE9D237F63768EFF474DEF318288A.cer (raw, json)
Hash identifier:          bWSnx7raYJdegCbwsGIvVz6FG3DRo1v6EwDq0g27shY=
Subject key identifier:   1F:B1:CC:39:90:4A:E9:D2:37:F6:37:68:EF:F4:74:DE:F3:18:28:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D4E7244AF54F2C09005CD46E2827F3A3441FB71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/1FB1CC39904AE9D237F63768EFF474DEF318288A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Aug 2023 20:06:58 +0000
Certificate not after:    Wed 07 Aug 2024 20:11:58 +0000
Subordinate resources:    AS: 263450
                          IP: 168.232.156.0/22
                          IP: 177.91.232.0/22
                          IP: 2804:1200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4e:72:44:af:54:f2:c0:90:05:cd:46:e2:82:7f:3a:34:41:fb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  9 20:06:58 2023 GMT
            Not After : Aug  7 20:11:58 2024 GMT
        Subject: CN=1FB1CC39904AE9D237F63768EFF474DEF318288A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:15:9f:44:f8:e6:4e:f8:77:b9:00:4c:4f:
                    e5:48:11:98:cc:d3:10:31:12:ef:5e:e5:77:9f:d6:
                    4f:7b:41:71:67:97:b5:59:bd:d9:bd:1b:93:fd:14:
                    c0:44:f0:8e:2d:50:84:51:a1:ac:10:64:fd:5a:5e:
                    d5:7b:4a:df:17:5e:1e:9e:59:9f:54:b0:8c:87:59:
                    d8:f3:ff:ca:3d:97:6f:dd:40:cb:bf:15:21:a7:a0:
                    cf:78:72:be:6d:17:7e:25:d1:b0:a4:63:94:d2:16:
                    73:76:dc:cb:26:cb:a0:12:20:3b:b3:85:1c:d1:b4:
                    de:f7:39:09:cd:d0:1e:6d:5e:8b:14:f3:ce:ae:66:
                    8f:5a:82:a1:94:40:46:01:12:99:2f:8c:e9:e7:af:
                    ea:7e:0e:e7:22:77:ab:58:25:14:71:86:f5:75:08:
                    ea:86:6b:97:a8:d8:e7:d1:14:1a:47:0e:65:70:d2:
                    82:64:c4:02:c8:26:dd:eb:8f:a0:cf:d3:50:fd:45:
                    cb:74:38:7f:69:73:1a:c8:79:39:86:6f:15:a2:5c:
                    66:68:6f:66:c8:c5:c2:40:43:e2:b4:20:c4:ca:e1:
                    06:7e:84:06:58:9f:cb:f6:6c:a7:8d:8e:8f:07:65:
                    05:6f:93:3a:ba:1b:47:21:a2:ad:d6:83:e7:1d:55:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:B1:CC:39:90:4A:E9:D2:37:F6:37:68:EF:F4:74:DE:F3:18:28:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/1FB1CC39904AE9D237F63768EFF474DEF318288A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.156.0/22
                  177.91.232.0/22
                IPv6:
                  2804:1200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263450

    Signature Algorithm: sha256WithRSAEncryption
         a3:20:83:ee:c6:ea:eb:85:f3:6d:e8:7e:7e:df:df:55:50:b4:
         39:e4:7b:f3:17:13:9a:34:23:25:bc:76:20:29:39:a9:fb:1a:
         ea:a8:7c:88:0a:f3:15:07:ba:17:51:3b:2b:5b:d1:34:59:9f:
         10:7b:35:f1:2f:91:06:36:23:56:51:f7:eb:96:b7:91:36:d3:
         a9:79:94:58:b4:d8:16:22:30:d8:a7:39:5a:c8:c3:3f:79:86:
         60:33:2c:c5:5d:02:ec:3e:b7:43:79:2a:cf:a7:be:04:2f:68:
         39:96:9d:f6:0f:36:1c:27:18:ed:66:62:16:06:f0:5b:0a:89:
         b0:a4:60:2a:19:b1:d5:39:29:2f:4b:b1:99:4b:5c:9b:bc:a8:
         03:94:d3:f1:a6:7d:52:1f:52:3f:0e:ea:27:95:7b:dc:d4:8b:
         32:b6:00:da:68:fc:7c:56:c6:a2:dd:8d:20:28:41:43:5f:0c:
         38:be:35:90:7a:62:13:c6:61:36:b9:de:75:48:04:d9:3f:29:
         d5:95:48:33:b0:67:bf:c1:a7:44:55:25:0b:d1:a9:a3:d7:95:
         74:aa:f5:6e:1e:35:48:c6:64:85:e6:34:52:27:cc:2d:4a:35:
         8e:d3:59:33:20:15:cd:d0:c9:fc:f4:48:1a:26:e6:b4:0f:45:
         4d:43:3b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org