Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F02497CC6E45A69767A9FA6AA718ECC9613D891C.cer
File:                     F02497CC6E45A69767A9FA6AA718ECC9613D891C.cer (raw, json)
Hash identifier:          R1hVS9qauR5diso29/NGklK8q9t9buRU4FD4wQ0xNbk=
Subject key identifier:   F0:24:97:CC:6E:45:A6:97:67:A9:FA:6A:A7:18:EC:C9:61:3D:89:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3409AB7C83D6BDD9681BEE5B35C1B64C60EEA560
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/F02497CC6E45A69767A9FA6AA718ECC9613D891C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 14:01:32 +0000
Certificate not after:    Fri 02 Aug 2024 14:06:32 +0000
Subordinate resources:    AS: 61734
                          IP: 131.72.164.0/22
                          IP: 2804:1b8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:09:ab:7c:83:d6:bd:d9:68:1b:ee:5b:35:c1:b6:4c:60:ee:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 14:01:32 2023 GMT
            Not After : Aug  2 14:06:32 2024 GMT
        Subject: CN=F02497CC6E45A69767A9FA6AA718ECC9613D891C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:16:a0:2e:a1:27:21:04:40:ee:af:ea:f7:
                    ce:61:b2:28:37:8d:fa:ae:89:66:41:cc:66:c1:c5:
                    6f:0f:62:42:13:98:5e:94:54:8d:09:b0:33:fb:b4:
                    57:fe:af:b4:a2:50:ce:47:cf:2d:bd:73:83:ed:ef:
                    e0:63:82:76:4f:84:88:87:4e:d7:a8:aa:46:f4:72:
                    ca:f8:66:f7:15:69:52:c1:6f:e4:e2:d6:e1:70:70:
                    4b:c2:70:53:83:ed:00:40:f0:7c:3a:09:f9:5d:cc:
                    e2:d6:21:07:bc:f5:42:1c:4d:26:02:3f:51:ed:c7:
                    e4:c7:83:50:a4:60:66:4c:58:15:c9:ab:6c:82:f5:
                    f7:af:55:6e:6c:96:5a:f9:01:32:59:e1:ec:f5:72:
                    89:96:c6:b7:cb:34:e4:8e:29:07:65:ca:a6:56:1f:
                    88:5b:28:04:88:30:63:52:48:a3:37:42:e3:02:d4:
                    8e:5a:d4:64:e2:68:b3:f0:60:b0:5b:68:30:cd:c4:
                    3b:17:55:d8:84:3b:61:e3:14:5a:ac:16:e9:2e:24:
                    de:97:43:a8:a7:ff:ea:cb:fe:13:38:d4:02:1c:27:
                    35:a1:53:57:5a:12:01:38:83:9a:c9:f1:14:ef:89:
                    61:7e:0b:fa:67:0a:05:20:fc:93:3a:ce:3b:14:ac:
                    15:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:24:97:CC:6E:45:A6:97:67:A9:FA:6A:A7:18:EC:C9:61:3D:89:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7cSpMnR6gvbHCVzbEQRha5bFXzRzb9EgyMHFzh8UahPE/0/F02497CC6E45A69767A9FA6AA718ECC9613D891C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.164.0/22
                IPv6:
                  2804:1b8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61734

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:be:5d:45:1b:7f:fb:74:d3:22:f7:54:1f:32:8a:b4:34:
         54:8a:10:41:7a:8c:d9:8b:c5:28:3c:99:9f:ce:c8:71:e3:1d:
         9e:66:c8:6e:76:f3:2b:4b:e0:7e:4d:f0:4e:28:8a:13:ec:20:
         f0:54:eb:4d:d0:b4:dc:4f:43:0d:01:63:a8:42:de:59:d9:d2:
         30:21:d1:42:a8:af:15:2f:f6:a7:35:4f:81:17:ad:b6:ed:b8:
         47:2f:9d:0a:a7:92:0e:86:2f:fd:49:17:76:28:b6:03:3b:de:
         01:fa:9f:5d:42:1e:a4:0d:86:1c:60:c0:4d:cf:bb:7a:2c:e4:
         d4:36:d4:1d:e6:c4:3e:48:af:2b:37:ad:51:70:76:75:d3:ba:
         1a:38:41:68:4e:3d:be:ee:d5:08:ee:b7:af:ea:92:1d:76:e8:
         15:75:b6:40:bc:5b:9a:f3:cc:9c:d6:47:7b:81:ab:17:c4:06:
         d1:e5:9f:ae:ac:6d:95:b6:02:91:d2:27:66:0b:81:89:4d:67:
         fe:1d:86:e4:5b:4f:c8:41:79:e8:52:67:00:10:ad:13:5b:36:
         44:24:d6:64:28:66:c2:7e:a1:74:8e:d6:e2:9d:c1:8f:4d:71:
         97:9b:96:54:37:af:ff:1e:d2:57:36:00:70:2a:1f:05:aa:7b:
         f8:9a:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org