Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1FF846E87408259A09771D1251217303FAF7732A.cer
File:                     1FF846E87408259A09771D1251217303FAF7732A.cer (raw, json)
Hash identifier:          siys8lUx0dUgmTTfum9Wo7gz7MlpK+nje2OkyF511Tg=
Subject key identifier:   1F:F8:46:E8:74:08:25:9A:09:77:1D:12:51:21:73:03:FA:F7:73:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C261DC448394A924E4752F5D11DDEE1D1AAFA26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/1FF846E87408259A09771D1251217303FAF7732A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 19:20:57 +0000
Certificate not after:    Thu 13 Mar 2025 19:25:57 +0000
Subordinate resources:    AS: 272460
                          IP: 2804:8188::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:26:1d:c4:48:39:4a:92:4e:47:52:f5:d1:1d:de:e1:d1:aa:fa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 19:20:57 2024 GMT
            Not After : Mar 13 19:25:57 2025 GMT
        Subject: CN=1FF846E87408259A09771D1251217303FAF7732A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:ea:ae:41:51:6b:7c:f9:8b:2e:40:ff:4e:
                    50:a3:16:dc:98:cc:db:e6:83:59:00:fe:d3:5e:16:
                    aa:70:27:bc:1b:b8:54:0f:84:f1:7a:a2:91:ae:b0:
                    65:f7:6f:34:db:26:67:dd:98:a2:80:8b:5c:1a:38:
                    c9:02:f0:75:61:a8:9b:63:3f:8b:eb:9f:57:7e:ba:
                    68:e1:41:cf:6b:f9:81:01:48:5f:f5:41:91:27:c4:
                    d7:1c:61:80:99:ba:c5:04:d5:2b:f2:76:62:3a:96:
                    35:4d:20:ce:d8:41:0f:52:27:3a:6f:88:ca:07:5e:
                    dd:b4:ec:1b:50:19:29:c7:f2:b8:fc:ae:92:88:50:
                    ab:63:b9:40:14:8a:85:69:2f:7b:d1:e6:17:0c:5a:
                    3d:e4:48:4f:e0:58:0b:c4:2a:81:c8:29:52:ed:f4:
                    74:4b:42:00:e3:0c:27:4c:f6:07:5b:94:cb:51:aa:
                    10:27:1f:4f:2a:6e:a9:54:b2:ea:78:3e:b8:16:b7:
                    d6:ed:30:eb:7f:10:af:74:00:7e:a9:e6:2b:59:b1:
                    ba:21:eb:a3:d2:43:32:4a:6e:8a:7e:44:7b:81:e2:
                    d9:08:ac:84:5a:7b:4c:4a:e1:8c:c1:eb:50:8a:86:
                    b4:52:14:69:ee:42:2a:97:d2:25:15:1a:2e:b9:07:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:F8:46:E8:74:08:25:9A:09:77:1D:12:51:21:73:03:FA:F7:73:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vUBqYPvw1DGJ1L9NnqpZdJ8j96mDFnhQBfczm3W3HcQ/0/1FF846E87408259A09771D1251217303FAF7732A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272460

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:15:90:e1:af:c7:3b:58:de:4f:01:c6:eb:fa:74:84:91:
         81:bf:ef:64:64:17:3b:b5:93:bf:04:c6:cf:e5:2e:bd:fb:4f:
         3f:1e:cf:c5:c1:f2:98:ca:65:61:eb:9d:4b:b5:f2:2f:14:66:
         a4:d4:ba:00:bd:40:bb:d3:a2:b8:e3:3d:bf:7f:80:7e:1c:8e:
         cf:7d:49:74:92:be:8c:c0:26:cc:ce:f1:51:61:ce:ab:0c:f5:
         65:2e:52:bf:cf:8f:6f:57:ed:3f:98:f1:5b:71:8e:d5:49:ef:
         60:d8:aa:59:d9:df:ba:2a:2c:e0:26:84:0c:53:42:fc:be:6a:
         ca:a4:8d:c1:97:89:85:b8:33:60:08:28:de:1a:eb:df:ed:4c:
         22:4e:e1:d2:80:c2:f4:22:45:ae:44:77:8e:09:cb:8a:aa:12:
         9f:ee:5d:14:0f:5b:cd:0f:fd:8d:79:e9:a3:45:e4:0c:38:6a:
         bd:36:87:12:6b:3a:04:ce:f7:38:df:39:00:86:1b:27:30:f9:
         84:c6:b0:d8:75:70:e2:97:48:03:13:49:e7:62:12:5a:e8:48:
         11:46:17:20:c6:35:ea:8c:64:ef:05:c9:e3:f4:ad:b7:93:1d:
         d5:94:25:11:dd:ae:a3:d8:39:39:b7:46:15:5c:49:c2:c7:3b:
         cb:b2:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:31:34 2025 by rpki-client