Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1FF47BF504E938690689C256F6627F852112D99E.cer
File:                     1FF47BF504E938690689C256F6627F852112D99E.cer (raw, json)
Hash identifier:          +/CzoeosS5oGnRk0X2fYj5N0JlMb2T6hoT9qX5z1BCU=
Subject key identifier:   1F:F4:7B:F5:04:E9:38:69:06:89:C2:56:F6:62:7F:85:21:12:D9:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1709C3EDD8DE6F3520AFDE1D130C94EDFA2F4DFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/1FF47BF504E938690689C256F6627F852112D99E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Apr 2022 01:53:41 +0000
Certificate not after:    Mon 10 Apr 2023 01:58:41 +0000
Subordinate resources:    AS: 267551
                          IP: 45.70.48.0/22
                          IP: 2804:4324::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:09:c3:ed:d8:de:6f:35:20:af:de:1d:13:0c:94:ed:fa:2f:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 01:53:41 2022 GMT
            Not After : Apr 10 01:58:41 2023 GMT
        Subject: CN=1FF47BF504E938690689C256F6627F852112D99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:b1:2d:7d:4a:a2:82:75:3a:81:e7:86:bd:
                    fb:c2:30:f2:08:9e:5d:45:7a:e1:98:1c:95:0e:07:
                    cb:31:17:07:73:1e:bf:b9:22:24:14:04:e7:1c:12:
                    da:80:01:04:d4:5b:0c:41:db:4c:42:83:07:e6:78:
                    e4:51:7f:47:ec:9e:66:70:35:07:9f:24:3b:bc:76:
                    72:67:8c:d1:52:08:fd:06:74:bf:76:c6:ac:fd:b3:
                    45:ba:64:95:37:97:c9:84:dc:2b:dc:14:88:d4:ac:
                    cc:d2:13:bb:22:7b:9e:d8:10:66:bb:d2:d6:d2:5f:
                    15:8c:a3:4c:9d:8c:a6:a1:4e:a1:25:3e:55:18:66:
                    69:8c:90:84:c8:23:52:2f:43:eb:6c:a8:50:43:89:
                    d1:d2:82:99:8f:57:34:2a:7a:da:ae:4b:e8:63:fb:
                    cd:e7:a8:0c:b1:26:7e:31:85:4c:11:9a:3a:dc:1c:
                    c0:38:ce:90:0c:0d:ce:d9:8e:71:56:53:6a:68:16:
                    c9:2d:84:5a:e3:2a:8c:57:68:42:26:56:34:40:3f:
                    59:e5:33:93:a1:6f:bd:e5:c8:6e:93:b7:1a:2e:9e:
                    19:d1:81:ff:97:f8:8f:10:02:6d:89:c4:89:d1:43:
                    3e:11:a4:b9:a6:59:75:b8:c0:48:89:d9:22:73:83:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:F4:7B:F5:04:E9:38:69:06:89:C2:56:F6:62:7F:85:21:12:D9:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/1FF47BF504E938690689C256F6627F852112D99E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.48.0/22
                IPv6:
                  2804:4324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267551

    Signature Algorithm: sha256WithRSAEncryption
         96:45:e6:6f:24:49:14:8c:07:41:da:55:1a:d5:1b:7d:8c:f3:
         c0:8f:f9:65:e9:66:f0:e5:0c:a8:a7:fb:51:88:f7:f7:15:67:
         70:60:4a:78:c7:f1:a5:c8:81:76:d2:74:bc:77:b3:f2:b1:42:
         7e:8e:e1:6e:5b:43:48:8b:d0:1a:96:9d:07:f5:fc:e1:9f:34:
         c3:75:de:93:83:fd:b0:f2:50:6d:e6:b9:cf:58:1a:21:d3:39:
         aa:05:24:b4:47:35:fe:cd:2a:86:0d:12:fa:c7:a3:20:af:e3:
         46:a7:d5:18:44:f9:28:ee:53:b5:73:8d:2a:15:17:22:2a:7e:
         d0:3c:61:d1:d8:7d:d2:01:f8:62:7d:5b:fe:dd:6d:5b:1e:e7:
         f4:47:71:08:4a:80:02:bc:f9:97:4d:1f:f3:0e:bc:cf:64:71:
         d4:de:9e:8e:f4:ab:de:c2:b6:08:5e:c0:9e:45:16:26:73:86:
         18:13:b1:e3:6c:18:32:5f:f8:b7:bc:20:e4:85:ab:ac:84:9b:
         1e:8a:7d:40:68:9c:01:48:e1:03:08:5a:a8:f6:dd:0e:a6:96:
         9a:86:c0:c4:25:6f:ea:db:6c:92:a4:49:85:b2:f9:f9:69:58:
         a5:27:3e:03:5c:ae:fb:97:c1:5f:ca:8b:3d:a9:52:d2:e0:ea:
         ba:82:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org