Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9FC063107590576F0D8D8D6866D3685D024C3FC6.cer
File:                     9FC063107590576F0D8D8D6866D3685D024C3FC6.cer (raw, json)
Hash identifier:          jzrRDozd84Oaww07BfsQZybZW6BVc31fCMoV0g4Looo=
Subject key identifier:   9F:C0:63:10:75:90:57:6F:0D:8D:8D:68:66:D3:68:5D:02:4C:3F:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41481F757FF3D1D35867781682D5DE73292ECBC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/9FC063107590576F0D8D8D6866D3685D024C3FC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 May 2022 21:42:23 +0000
Certificate not after:    Mon 22 May 2023 21:47:23 +0000
Subordinate resources:    AS: 263671
                          IP: 143.208.140.0/22
                          IP: 191.241.128.0/21
                          IP: 2804:1154::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:48:1f:75:7f:f3:d1:d3:58:67:78:16:82:d5:de:73:29:2e:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 21:42:23 2022 GMT
            Not After : May 22 21:47:23 2023 GMT
        Subject: CN=9FC063107590576F0D8D8D6866D3685D024C3FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:ca:f8:7e:30:94:02:33:80:56:cd:a9:b3:
                    c0:82:01:44:5b:55:05:5c:16:79:e3:36:58:c4:ea:
                    50:43:59:c3:65:db:be:63:ef:73:eb:1a:e7:16:53:
                    1b:36:48:03:10:d6:e2:14:7f:34:1b:58:6e:f5:e3:
                    b5:bd:fd:61:46:eb:6e:79:c2:03:f0:b9:72:8a:c5:
                    b8:1c:38:d7:2a:59:63:91:bb:27:c6:f5:74:45:45:
                    89:1f:7e:e0:17:7a:1d:24:65:c2:0f:f3:c4:af:e5:
                    37:e0:de:69:52:d0:fa:98:02:a7:95:18:1a:e9:00:
                    12:e1:06:e3:cd:ac:47:9f:e7:85:4e:35:9e:85:2d:
                    a2:ce:eb:d7:f5:62:b9:03:eb:9d:60:a5:25:c1:14:
                    76:37:e5:04:75:d7:10:b9:c2:16:bc:da:aa:b6:77:
                    ca:2d:1a:c1:13:ee:0f:11:2f:6a:13:26:bf:e7:9d:
                    ec:2d:b8:9e:e0:7e:ce:25:02:21:25:53:06:31:0c:
                    d6:b7:4b:76:bf:20:38:ad:15:cc:b4:5e:ef:9b:5a:
                    a8:54:b5:32:4a:a6:3f:28:59:8d:68:d5:3c:53:b6:
                    ae:51:9c:f6:80:04:1b:cd:9e:74:34:16:59:fd:8b:
                    ff:5e:43:97:e9:71:96:5f:56:8b:7d:fd:d8:be:d3:
                    3e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:C0:63:10:75:90:57:6F:0D:8D:8D:68:66:D3:68:5D:02:4C:3F:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/9FC063107590576F0D8D8D6866D3685D024C3FC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.140.0/22
                  191.241.128.0/21
                IPv6:
                  2804:1154::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263671

    Signature Algorithm: sha256WithRSAEncryption
         52:77:5d:fb:9b:0a:51:c0:bb:c2:2b:85:ec:b8:37:d6:4e:a2:
         cb:06:c3:b6:97:85:a4:ab:41:c4:0d:3a:29:2d:5c:2c:ea:19:
         b4:90:44:33:7c:40:c7:a9:8c:80:11:2d:77:94:69:93:d0:62:
         02:1f:48:59:04:3a:58:fb:8c:a7:dc:a2:89:b6:8f:47:01:62:
         d5:71:8f:c9:8a:30:f2:61:a5:97:2c:46:1d:db:58:b1:12:df:
         1f:84:36:5c:f8:bf:0a:47:f1:83:f6:49:03:21:60:89:d7:9e:
         60:86:16:d8:82:31:1a:89:42:16:f7:61:70:d0:74:f9:05:27:
         b4:5a:ba:0a:00:87:f1:54:2e:4c:9a:60:d9:bb:b7:2c:34:a6:
         be:54:1d:91:85:6d:af:c7:66:06:4d:b5:b6:24:ac:b1:d9:85:
         2a:0e:87:d6:e9:64:07:b4:54:17:d8:64:35:20:23:a5:1b:10:
         f3:ef:c6:e7:4a:c7:da:0e:a0:95:e6:31:84:aa:6c:07:fd:80:
         51:27:5c:80:e2:24:0a:b8:03:75:06:b8:49:4f:0c:72:95:bd:
         4f:eb:97:2d:a6:1b:48:82:4a:41:29:60:9e:54:5a:98:97:11:
         e9:48:9b:a1:c2:dc:90:bf:3c:cf:ae:22:51:c2:df:7a:a2:3e:
         b7:0a:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org