Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C01FB9EA4199295499428B52E0720A6F2480922E.cer
File:                     C01FB9EA4199295499428B52E0720A6F2480922E.cer (raw, json)
Hash identifier:          S9Fc7F5a3FqW+6ozvtbhdaXpKsRNl6kNgiBf3VP7EgU=
Subject key identifier:   C0:1F:B9:EA:41:99:29:54:99:42:8B:52:E0:72:0A:6F:24:80:92:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       010622FA1AB7899114F01A1E145E8A6E83390D53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/C01FB9EA4199295499428B52E0720A6F2480922E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Dec 2023 18:09:50 +0000
Certificate not after:    Sat 07 Dec 2024 18:14:50 +0000
Subordinate resources:    AS: 267560
                          IP: 181.191.216.0/22
                          IP: 2804:4348::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:06:22:fa:1a:b7:89:91:14:f0:1a:1e:14:5e:8a:6e:83:39:0d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 18:09:50 2023 GMT
            Not After : Dec  7 18:14:50 2024 GMT
        Subject: CN=C01FB9EA4199295499428B52E0720A6F2480922E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:95:80:c5:6d:fc:df:93:51:71:60:b4:1c:
                    df:fd:e7:07:41:a1:a2:40:be:ea:c3:ac:05:56:c1:
                    dd:a4:9f:1a:c9:0e:85:9f:7b:ef:ea:cf:45:2b:71:
                    b9:0a:cd:36:47:3f:ca:e9:6b:09:06:83:70:3e:57:
                    fc:ce:84:73:9f:d0:07:7a:00:49:cd:9e:91:3e:7f:
                    fe:2b:ce:9e:4a:d9:1a:93:4a:5c:98:e4:86:83:8a:
                    28:25:64:7d:a1:df:74:df:af:17:ec:c6:3f:8d:40:
                    54:33:50:8b:f3:94:1f:04:8e:00:d6:72:7b:34:f8:
                    ec:ea:98:87:d7:f2:53:80:2b:ce:a8:20:3b:25:7d:
                    9a:9b:3a:59:6d:74:81:c7:ab:8a:63:d3:69:2a:03:
                    f0:18:5e:b4:38:17:9b:4e:d3:f5:7d:e4:db:55:d7:
                    b4:b4:d8:27:14:5b:ed:e5:16:b3:05:ee:82:78:ca:
                    bb:c8:de:2f:bb:fe:fe:8d:47:93:75:dd:37:34:f5:
                    9a:9d:50:63:f6:52:33:02:8a:52:c9:bc:5e:93:d5:
                    ea:e6:ef:e1:48:22:23:67:33:a7:64:49:d2:68:3d:
                    50:cb:65:8c:ba:53:f3:59:d8:18:51:4b:c2:e4:d8:
                    fd:7a:29:3e:ac:2e:3b:fc:08:67:6a:0d:90:a8:8e:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:1F:B9:EA:41:99:29:54:99:42:8B:52:E0:72:0A:6F:24:80:92:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/C01FB9EA4199295499428B52E0720A6F2480922E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/22
                IPv6:
                  2804:4348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267560

    Signature Algorithm: sha256WithRSAEncryption
         a1:66:b2:85:8d:12:8d:aa:5b:c7:04:e0:fc:9d:d4:a3:76:2f:
         76:50:ef:32:7d:f8:60:22:dd:3d:42:e2:13:88:74:fa:d3:d3:
         95:58:b6:98:75:c1:d6:6d:cb:80:2b:45:76:1d:95:87:d6:69:
         e7:86:33:a7:c5:ca:19:aa:31:c8:fd:29:1b:b0:f2:d4:a3:33:
         e2:44:73:e7:ca:da:23:b1:38:81:f9:78:81:e2:10:4c:4c:cf:
         29:d0:82:fd:c7:6d:60:ff:64:52:9c:45:c7:81:7a:48:22:33:
         3b:6d:de:c7:f1:0f:7f:9e:a7:ea:ab:6c:ba:0f:ab:e4:39:35:
         c4:da:89:8a:1e:37:32:ba:a3:c4:37:3a:e2:38:b5:34:61:9b:
         2a:b7:4a:e3:08:21:2b:10:e7:5c:2d:9d:e7:6d:d0:f7:fc:03:
         6c:ba:c7:e8:35:62:47:10:cc:cc:f1:22:1d:94:66:53:cc:12:
         e0:df:12:b8:b7:11:54:fb:03:a6:72:33:28:32:28:33:33:e8:
         6a:81:25:61:0f:63:ce:50:dc:8e:a3:ed:c0:04:24:ec:ca:5e:
         82:e2:a6:c7:8e:24:bc:ad:d7:16:85:d5:3d:6b:54:61:ef:bf:
         9b:39:bd:89:e5:25:2e:b6:f1:db:e8:50:38:09:d2:48:c4:2e:
         f7:aa:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org