Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.cer
File:                     86F1BCC47B050AEC6311573060F716DB6C2AEE14.cer (raw, json)
Hash identifier:          slLX6X/A2Hj0b1YNIPKHU3p5cyrc6ss6FxQik1qcQsQ=
Subject key identifier:   86:F1:BC:C4:7B:05:0A:EC:63:11:57:30:60:F7:16:DB:6C:2A:EE:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3336C261F03289846668A3DC3F8719B7D774185F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 18:05:26 +0000
Certificate not after:    Wed 10 Jul 2024 18:10:26 +0000
Subordinate resources:    AS: 263320
                          IP: 191.7.144.0/20
                          IP: 2804:143c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:36:c2:61:f0:32:89:84:66:68:a3:dc:3f:87:19:b7:d7:74:18:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 18:05:26 2023 GMT
            Not After : Jul 10 18:10:26 2024 GMT
        Subject: CN=86F1BCC47B050AEC6311573060F716DB6C2AEE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:d1:96:71:e8:99:b2:c9:c8:13:5a:0a:97:
                    b5:83:5b:69:b5:1d:7b:ed:30:2e:d7:54:4e:83:e4:
                    17:9d:94:24:9a:d0:94:6a:e1:f6:2c:3e:55:65:fc:
                    c0:21:c2:b7:99:af:b4:03:16:ef:e4:c7:44:00:59:
                    c7:c1:75:66:f2:49:3d:79:94:9d:a9:de:b2:06:fb:
                    f1:0d:45:b4:1f:6d:93:6d:3f:ff:a6:5b:74:b9:ab:
                    b9:02:37:8c:d1:d9:6f:26:1e:1e:3e:55:bf:68:3e:
                    db:96:65:47:43:b0:46:14:80:a6:45:30:e7:50:a6:
                    50:a6:66:bc:ce:88:f7:c8:eb:48:11:04:5c:36:49:
                    b6:0b:b2:4d:20:a1:0b:b5:bd:72:0a:fe:36:ed:78:
                    40:bb:18:72:48:de:ce:f7:df:4b:6b:b9:98:35:59:
                    03:f0:01:de:17:aa:bf:cb:c2:cc:6f:62:87:57:49:
                    96:22:a5:54:81:3e:b2:15:38:14:b3:1e:9e:3d:69:
                    91:eb:c3:ab:b4:87:76:b8:6a:94:15:50:ff:1b:07:
                    ba:cf:27:16:46:71:d6:21:e5:45:8a:b9:c7:ee:de:
                    9c:92:a5:7b:c5:5b:7c:2c:08:de:4b:06:a2:99:21:
                    c2:40:80:b0:6b:44:08:db:ad:78:32:fa:d4:85:9b:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:F1:BC:C4:7B:05:0A:EC:63:11:57:30:60:F7:16:DB:6C:2A:EE:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/86F1BCC47B050AEC6311573060F716DB6C2AEE14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.144.0/20
                IPv6:
                  2804:143c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263320

    Signature Algorithm: sha256WithRSAEncryption
         7b:c4:dc:3b:84:d8:5f:88:d5:71:94:46:6b:f9:da:34:d0:e9:
         49:c0:e8:cf:2d:0d:3e:74:91:b3:3c:84:26:fd:ea:ae:fd:ee:
         44:27:2b:b4:d5:d7:2c:29:50:0a:93:1a:87:30:52:c1:1d:ea:
         de:aa:da:e3:9b:0a:f9:b3:e9:49:38:9f:3f:87:31:f9:32:21:
         66:d6:76:c9:aa:e2:1d:2f:63:15:a4:f5:9b:dc:c9:1b:88:d7:
         d9:f4:d6:ab:02:b5:dd:60:d6:07:67:d7:31:f9:c8:8e:8f:9d:
         31:db:9a:9a:6d:ec:3d:41:21:df:6f:e5:7b:98:13:13:d4:d6:
         a6:8c:61:72:14:c9:36:3b:85:f3:74:67:52:0a:68:11:c2:9f:
         dd:d0:11:3a:e7:2d:b4:55:24:ee:a0:2a:5c:27:39:be:8d:72:
         6f:6d:80:dd:54:4a:02:61:a8:7f:a9:d3:91:1a:a7:e0:8b:1f:
         5b:95:3f:42:6c:c0:cd:17:ef:c4:de:c7:71:f8:dd:6b:d5:79:
         77:bd:46:31:16:da:3a:53:8d:87:63:95:9f:87:de:e0:87:a7:
         83:fb:25:df:97:51:24:aa:4e:01:b6:44:90:09:2e:a7:e0:ef:
         28:0e:dd:46:f6:b4:13:ac:f4:60:ae:47:76:2f:5b:6f:f7:1c:
         7c:1c:cb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:08 2025 by rpki-client