Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
File:                     1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer (raw, json)
Hash identifier:          S0XoqzmRMluNYQnp+r9wFHRYn/Y/36LTXzQrEk52kqI=
Subject key identifier:   1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FDA1AB731CA35A4B721CD43AABC7E34A3E5E088
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 18:53:57 +0000
Certificate not after:    Tue 24 Sep 2024 18:58:57 +0000
Subordinate resources:    AS: 262720
                          IP: 177.8.192.0/20
                          IP: 186.195.96.0/20
                          IP: 2804:c94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:da:1a:b7:31:ca:35:a4:b7:21:cd:43:aa:bc:7e:34:a3:e5:e0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 18:53:57 2023 GMT
            Not After : Sep 24 18:58:57 2024 GMT
        Subject: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f9:24:7c:6c:be:a5:d8:cb:f6:40:81:9a:9a:
                    10:c6:1b:cc:50:65:01:3c:58:86:0e:16:4e:d2:f5:
                    1f:75:a9:7f:b0:2e:44:84:12:b4:a6:61:99:f1:60:
                    1f:7d:b7:f2:87:a2:39:d9:19:c6:48:74:49:34:05:
                    7a:a6:11:86:9e:2d:4e:ba:e7:86:d2:a3:30:a1:ea:
                    21:f5:75:18:03:ce:13:a9:a4:93:72:f6:0e:51:de:
                    9f:5f:3d:f1:a4:02:a3:00:f2:a7:97:4c:6b:f0:68:
                    2b:1d:c1:d3:42:f9:a1:97:97:96:6c:5e:6b:ee:41:
                    85:f2:d5:59:7e:ab:de:1c:f4:b5:20:1a:7c:60:49:
                    7e:bb:55:2b:30:9b:df:d5:c8:45:46:00:96:57:04:
                    08:b5:c6:12:92:3a:eb:d1:9c:7e:51:3e:85:02:60:
                    f2:d4:ca:15:61:63:4b:6e:3a:d7:1b:2f:12:0a:5c:
                    4d:52:d2:af:86:0b:aa:68:9d:95:fc:79:bb:b2:8c:
                    85:a9:d7:de:8d:49:4c:8f:7c:51:08:27:51:18:d1:
                    eb:fe:da:83:3e:65:56:b9:1c:7b:e1:da:41:ef:6a:
                    d4:a5:e3:ca:04:0a:10:ad:1a:cd:5a:2c:b5:65:07:
                    70:d9:4d:72:b1:34:d6:54:7f:03:f0:0d:6b:16:f3:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.192.0/20
                  186.195.96.0/20
                IPv6:
                  2804:c94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262720

    Signature Algorithm: sha256WithRSAEncryption
         25:8b:30:c9:85:d9:10:20:a4:96:55:2f:a8:2d:ef:30:b3:ce:
         a0:98:4d:8a:bd:c5:2a:90:d9:58:78:05:96:91:b1:82:ab:30:
         06:35:a8:29:71:08:b6:9c:0b:5e:70:9f:75:80:33:10:e0:a7:
         e3:e8:8b:86:24:c1:b0:46:6b:e5:bb:36:0e:e0:cb:21:24:39:
         9c:79:c3:4e:02:2e:64:48:78:b7:8c:f6:ec:ed:ed:4c:22:ec:
         a6:da:8b:a9:9e:80:bd:5e:0a:26:20:1a:f3:4b:e1:4d:62:91:
         0c:37:c3:af:4d:53:ba:a5:ab:de:9f:2d:b9:3f:9b:1b:1a:ce:
         ea:94:29:0b:17:f3:c2:95:71:9e:c4:1e:c0:cd:f7:65:b9:39:
         7f:83:b8:15:6d:8b:88:f1:fd:78:4e:65:47:73:58:c7:07:1e:
         e8:dc:2e:06:a8:61:aa:e8:78:c5:04:7e:6e:d8:e3:e9:dc:0d:
         7d:4c:98:5a:bf:7e:31:f8:85:e5:cc:36:93:86:ee:50:e8:ac:
         e7:59:c3:42:43:46:a7:13:4d:44:44:e8:97:9e:3a:31:87:5c:
         a7:87:03:38:db:65:38:b7:38:36:bd:4f:52:39:7c:6f:f2:e4:
         48:b5:bc:96:5c:80:9f:e4:1e:0e:77:c6:8d:0d:a0:16:d3:10:
         10:74:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org